Package org.opensaml.saml.common.binding.security.impl

Class InResponseToSecurityHandler

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.messaging.handler.AbstractMessageHandler

org.opensaml.saml.common.binding.security.impl.InResponseToSecurityHandler

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, MessageHandler

public class InResponseToSecurityHandler
extends AbstractMessageHandler

Client-side message handler for validating that the inbound SAML response inResponseTo ID matches the corresponding outbound request ID.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Logger.

Constructor Summary

Constructors

Constructor	Description
InResponseToSecurityHandler()

Method Summary

Modifier and Type	Method	Description
protected void	doInvoke(MessageContext messageContext)	Performs the handler logic.
private String	resolveInboundInResponseTo(MessageContext messageContext)	Resolve the inbound inResponseTo ID.
private String	resolveOutboundRequestID(MessageContext messageContext)	Resolve the outbound request ID.

Methods inherited from class org.opensaml.messaging.handler.AbstractMessageHandler

doPostInvoke, doPostInvoke, doPreInvoke, getActivationCondition, getLogPrefix, invoke, isPreInvokeCalled, setActivationCondition

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private org.slf4j.Logger log

Logger.

Constructor Details

InResponseToSecurityHandler

public InResponseToSecurityHandler()

Method Details

doInvoke

protected void doInvoke(@Nonnull
 MessageContext messageContext)
                 throws MessageHandlerException

Performs the handler logic.

Specified by:

doInvoke in class AbstractMessageHandler

Parameters:

messageContext - the message context on which to invoke the handler

Throws:

MessageHandlerException - if there is an error invoking the handler on the message context

resolveOutboundRequestID

@Nullable
private String resolveOutboundRequestID(@Nonnull
 MessageContext messageContext)

Resolve the outbound request ID.

Parameters:

messageContext - the message context

Returns:

the outbound request ID, or null

resolveInboundInResponseTo

@Nullable
private String resolveInboundInResponseTo(@Nonnull
 MessageContext messageContext)

Resolve the inbound inResponseTo ID.

Parameters:

messageContext - the message context

Returns:

the inbound inResponseTo, or null