Uses of Interface
org.opensaml.security.credential.Credential
Packages that use Credential
Package
Description
Classes responsible for performing transport-related and basic message
validation of decoded SAML messages.
SAML 2.0 message encoders.
Security-related message handlers for SAML 2.0.
Classes related to verifying various credentials within a SAML system.
Interfaces and classes related to credentials and ways to represent them.
Implementations of
Criterion where the
parameterized evaluation target type is Credential.CredentialResolver implementation classes.General cryptographic functionality.
Messaging-related security classes.
TrustEngine implementation classes.X.509-based credential and trust classes.
TrustEngine implementation classes related to PKIX.Factory beans for various credential classes.
Factory beans for trust engines.
Configuration and support classes for security.
API components related to key agreement operations.
Implementation components related to key agreement operations.
Configuration and support classes for security algorithms.
Support classes for XML Security operations.
Functional support for XML Encryption.
Implementation of configuration and parameter resolver classes.
Classes in support of processing XML Signature KeyInfo material.
Interfaces and classes for working with XML KeyInfo elements.
Specific implementations of
KeyInfoProvider.XMLObject interfaces and helper classes for representing digitally signed content and signing/validating content.
Implementations of the interfaces for XMLObjects that represent XML signature types.
Functional support for XML Signature.
Implementations of signature evaluation functions.
Provides Santuario-specific implementation of signing and validation.
-
Uses of Credential in org.opensaml.saml.common.binding.security.impl
Methods in org.opensaml.saml.common.binding.security.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionprotected List<Credential>BaseSAMLSimpleSignatureSecurityHandler.getRequestCredentials(MessageContext messageContext) Extract any candidate validation credentials from the request and/or message context.Method parameters in org.opensaml.saml.common.binding.security.impl with type arguments of type CredentialModifier and TypeMethodDescriptionprotected booleanBaseSAMLSimpleSignatureSecurityHandler.validateSignature(byte[] signature, byte[] signedContent, String algorithmURI, CriteriaSet criteriaSet, List<Credential> candidateCredentials) Validate the simple signature. -
Uses of Credential in org.opensaml.saml.saml2.binding.encoding.impl
Methods in org.opensaml.saml.saml2.binding.encoding.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected StringHTTPPostSimpleSignEncoder.buildKeyInfo(Credential signingCredential, KeyInfoGenerator kiGenerator) Build theKeyInfofrom the signing credential.protected StringHTTPPostSimpleSignEncoder.generateSignature(Credential signingCredential, String algorithmURI, String formData) Generates the signature over the string of concatenated form control data as indicated by the SimpleSign spec.protected StringHTTPRedirectDeflateEncoder.generateSignature(Credential signingCredential, String algorithmURI, String queryString) Generates the signature over the query string. -
Uses of Credential in org.opensaml.saml.saml2.binding.security.impl
Methods in org.opensaml.saml.saml2.binding.security.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionprotected List<Credential>SAML2HTTPPostSimpleSignSecurityHandler.getRequestCredentials(MessageContext samlContext) Extract any candidate validation credentials from the request and/or message context. -
Uses of Credential in org.opensaml.saml.security.impl
Methods in org.opensaml.saml.security.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionprotected Collection<Credential>MetadataCredentialResolver.resolveFromMetadata(CriteriaSet criteriaSet, String entityID, QName role, String protocol, UsageType usage) Resolves credentials using this resolver's configured instance ofRoleDescriptorResolver.protected Collection<Credential>MetadataCredentialResolver.resolveFromRoleDescriptor(CriteriaSet criteriaSet, RoleDescriptor roleDescriptor, UsageType usage) Resolves credentials using a supplied instance ofRoleDescriptor.protected Iterable<Credential>MetadataCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.Methods in org.opensaml.saml.security.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected booleanSAMLMetadataEncryptionParametersResolver.checkAndProcessKeyAgreement(EncryptionParameters params, CriteriaSet criteria, Predicate<String> includeExcludePredicate, Credential credential) Check for a credential type that implies a key agreement operation, and process if so indicated.protected booleanSAMLMetadataEncryptionParametersResolver.credentialSupportsEncryptionMethod(Credential credential, EncryptionMethod encryptionMethod) Evaluate whether the specified credential is supported for use with the specifiedEncryptionMethod.protected booleanSAMLMetadataSignatureSigningParametersResolver.credentialSupportsSigningMethod(Credential credential, SigningMethod signingMethod) Evaluate whether the specified credential is supported for use with the specifiedSigningMethod.SAMLMetadataEncryptionParametersResolver.getEffectiveKeyAgreementConfiguration(CriteriaSet criteria, Credential credential) Get the effectiveSAMLMetadataKeyAgreementEncryptionConfigurationto use with the specified credential.protected Pair<String,EncryptionMethod> SAMLMetadataEncryptionParametersResolver.resolveKeyTransportAlgorithm(Credential keyTransportCredential, CriteriaSet criteria, Predicate<String> includeExcludePredicate, String dataEncryptionAlgorithm, SAMLMDCredentialContext metadataCredContext) Determine the key transport algorithm URI to use with the specified credential, also returning the associatedEncryptionMethodfrom metadata if relevant.Method parameters in org.opensaml.saml.security.impl with type arguments of type CredentialModifier and TypeMethodDescriptionprotected voidMetadataCredentialResolver.extractCredentials(Collection<Credential> accumulator, KeyDescriptor keyDescriptor, String entityID, UsageType mdUsage) Extract the credentials from the specified KeyDescriptor.protected voidMetadataCredentialResolver.processRoleDescriptor(Collection<Credential> accumulator, RoleDescriptor roleDescriptor, String entityID, UsageType usage) Process a RoleDescriptor by examing each of its KeyDescriptors. -
Uses of Credential in org.opensaml.security.credential
Subinterfaces of Credential in org.opensaml.security.credentialModifier and TypeInterfaceDescriptioninterfaceA specialization ofCredentialwhich supports mutation of its properties.Classes in org.opensaml.security.credential that implement CredentialModifier and TypeClassDescriptionclassBase class forCredentialimplementations.classA basic implementation ofCredential.Methods in org.opensaml.security.credential that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>BasicCredential.getCredentialType()Get the primary type of the credential instance.Class<? extends Credential>Credential.getCredentialType()Get the primary type of the credential instance.Methods in org.opensaml.security.credential with parameters of type CredentialModifier and TypeMethodDescriptionstatic KeyCredentialSupport.extractDecryptionKey(Credential credential) Extract the decryption key from the credential.static KeyCredentialSupport.extractEncryptionKey(Credential credential) Extract the encryption key from the credential.static KeyCredentialSupport.extractSigningKey(Credential credential) Extract the signing key from the credential.static KeyCredentialSupport.extractVerificationKey(Credential credential) Extract the verification key from the credential. -
Uses of Credential in org.opensaml.security.credential.criteria.impl
Methods in org.opensaml.security.credential.criteria.impl with parameters of type CredentialModifier and TypeMethodDescriptionprivate KeyEvaluableKeyAlgorithmCredentialCriterion.getKey(Credential credential) Get the key contained within the credential.private KeyEvaluableKeyLengthCredentialCriterion.getKey(Credential credential) Get the key contained within the credential.booleanEvaluableEntityIDCredentialCriterion.test(Credential target) booleanEvaluableKeyAlgorithmCredentialCriterion.test(Credential target) booleanEvaluableKeyLengthCredentialCriterion.test(Credential target) booleanEvaluableKeyNameCredentialCriterion.test(Credential target) booleanEvaluablePublicKeyCredentialCriterion.test(Credential target) booleanEvaluableUsageCredentialCriterion.test(Credential target) booleanEvaluableX509CertSelectorCredentialCriterion.test(Credential target) booleanEvaluableX509DigestCredentialCriterion.test(Credential target) booleanEvaluableX509IssuerSerialCredentialCriterion.test(Credential target) booleanEvaluableX509SubjectKeyIdentifierCredentialCriterion.test(Credential target) booleanEvaluableX509SubjectNameCredentialCriterion.test(Credential target) -
Uses of Credential in org.opensaml.security.credential.impl
Fields in org.opensaml.security.credential.impl declared as CredentialModifier and TypeFieldDescriptionprivate CredentialAbstractChainingCredentialResolver.CredentialIterator.nextCredentialThe next credential that is safe to return.Fields in org.opensaml.security.credential.impl with type parameters of type CredentialModifier and TypeFieldDescriptionprivate final Collection<Credential>CollectionCredentialResolver.collectionThe collection of credentials which is the underlying store for the resolver.private Iterator<Credential>AbstractChainingCredentialResolver.CredentialIterator.credentialIteratorThe iterator over Credential instances from the current resolver.private final List<Credential>StaticCredentialResolver.credsList of credentials held by this resolver.Methods in org.opensaml.security.credential.impl that return CredentialModifier and TypeMethodDescriptionprotected CredentialKeyStoreCredentialResolver.buildCredential(KeyStore.Entry keyStoreEntry, String entityID, UsageType usage) Build a credential instance from the key store entry.private CredentialAbstractChainingCredentialResolver.CredentialIterator.getNextCredential()Get the next credential that will be returned by this iterator.AbstractChainingCredentialResolver.CredentialIterator.next()protected CredentialKeyStoreCredentialResolver.processSecretKeyEntry(KeyStore.SecretKeyEntry secretKeyEntry, String entityID, UsageType usage) Build a Credential from a keystore secret key entry.AbstractCredentialResolver.resolveSingle(CriteriaSet criteriaSet) Methods in org.opensaml.security.credential.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionCollectionCredentialResolver.getCollection()Get the (modifiable) credential collection which is the backing store for the resolver.private Iterator<Credential>AbstractChainingCredentialResolver.CredentialIterator.getNextCredentialIterator()Get the iterator from the next resolver in the chain.private Set<Predicate<Credential>>AbstractCriteriaFilteringCredentialResolver.getPredicates(CriteriaSet criteriaSet) Construct a set of credential predicates based on the criteria set.AbstractChainingCredentialResolver.CredentialIterable.iterator()AbstractChainingCredentialResolver.resolve(CriteriaSet criteriaSet) abstract Iterable<Credential>AbstractCredentialResolver.resolve(CriteriaSet criteriaSet) AbstractCriteriaFilteringCredentialResolver.resolve(CriteriaSet criteriaSet) StaticCredentialResolver.resolve(CriteriaSet criteria) protected abstract Iterable<Credential>AbstractCriteriaFilteringCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.protected Iterable<Credential>CollectionCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.protected Iterable<Credential>FilesystemCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.protected Iterable<Credential>KeyStoreCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.Constructors in org.opensaml.security.credential.impl with parameters of type CredentialConstructor parameters in org.opensaml.security.credential.impl with type arguments of type CredentialModifierConstructorDescriptionCollectionCredentialResolver(Collection<Credential> credentials) Constructor.StaticCredentialResolver(List<Credential> credentials) Constructor. -
Uses of Credential in org.opensaml.security.crypto
Methods in org.opensaml.security.crypto with parameters of type CredentialModifier and TypeMethodDescriptionstatic byte[]SigningUtil.sign(Credential signingCredential, String jcaAlgorithmID, boolean isMAC, byte[] input) Compute the signature or MAC value over the supplied input.static booleanSigningUtil.verify(Credential verificationCredential, String jcaAlgorithmID, boolean isMAC, byte[] signature, byte[] input) Verify the signature value computed over the supplied input against the supplied signature value. -
Uses of Credential in org.opensaml.security.messaging
Classes in org.opensaml.security.messaging that implement CredentialModifier and TypeClassDescriptionclassAn adapter that exposes the X.509 certificates contained in the servlet request attribute.Methods in org.opensaml.security.messaging that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>ServletRequestX509CredentialAdapter.getCredentialType()Get the primary type of the credential instance. -
Uses of Credential in org.opensaml.security.trust.impl
Methods in org.opensaml.security.trust.impl with parameters of type CredentialModifier and TypeMethodDescriptionbooleanExplicitKeyTrustEngine.validate(Credential untrustedCredential, CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.booleanExplicitKeyTrustEvaluator.validate(Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate trust.booleanExplicitKeyTrustEvaluator.validate(Credential untrustedCredential, Credential trustedCredential) Evaluate trust.Method parameters in org.opensaml.security.trust.impl with type arguments of type CredentialModifier and TypeMethodDescriptionbooleanExplicitKeyTrustEvaluator.validate(Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate trust.booleanExplicitX509CertificateTrustEvaluator.validate(X509Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate trust. -
Uses of Credential in org.opensaml.security.x509
Subinterfaces of Credential in org.opensaml.security.x509Modifier and TypeInterfaceDescriptioninterfaceAn entity credential based on key material and other information (e.g.Classes in org.opensaml.security.x509 that implement CredentialMethods in org.opensaml.security.x509 that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>BasicX509Credential.getCredentialType()Get the primary type of the credential instance. -
Uses of Credential in org.opensaml.security.x509.impl
Classes in org.opensaml.security.x509.impl that implement CredentialModifier and TypeClassDescriptionclassA wrapper that changes aKeyStorein to aX509Credential.classA class that wraps aX509KeyManagerand exposes it as anX509Credential.Methods in org.opensaml.security.x509.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>KeyStoreX509CredentialAdapter.getCredentialType()Get the primary type of the credential instance.Class<? extends Credential>X509KeyManagerX509CredentialAdapter.getCredentialType()Get the primary type of the credential instance. -
Uses of Credential in org.opensaml.spring.credential
Classes in org.opensaml.spring.credential with type parameters of type CredentialModifier and TypeClassDescriptionclassAbstractCredentialFactoryBean<T extends Credential>A factory bean to accumulate the information pertaining to anAbstractCredential. -
Uses of Credential in org.opensaml.spring.trust
Methods in org.opensaml.spring.trust that return types with arguments of type CredentialModifier and TypeMethodDescriptionprotected List<Credential>StaticExplicitKeyFactoryBean.getCredentials()Get the configured certificates. -
Uses of Credential in org.opensaml.xmlsec
Fields in org.opensaml.xmlsec declared as CredentialModifier and TypeFieldDescriptionprivate CredentialEncryptionParameters.dataEncryptionCredentialThe EncryptedData encryption credential.private final CredentialKeyTransportAlgorithmPredicate.SelectionInput.keyTransportCredentialThe candidate key transport credential.private CredentialEncryptionParameters.keyTransportEncryptionCredentialThe EncryptedKey encryption credential.private CredentialSignatureSigningParameters.signingCredentialThe signing credential.Methods in org.opensaml.xmlsec that return CredentialModifier and TypeMethodDescriptionEncryptionParameters.getDataEncryptionCredential()Get the encryption credential to use when encrypting the EncryptedData.KeyTransportAlgorithmPredicate.SelectionInput.getKeyTransportCredential()Get the candidate key transport credential.EncryptionParameters.getKeyTransportEncryptionCredential()Get the encryption credential to use when encrypting the EncryptedKey.SignatureSigningParameters.getSigningCredential()Get the signing credential to use when signing.Methods in org.opensaml.xmlsec that return types with arguments of type CredentialModifier and TypeMethodDescriptionEncryptionConfiguration.getDataEncryptionCredentials()Get the list of data encryption credentials to use, in preference order.EncryptionConfiguration.getKeyTransportEncryptionCredentials()Get the list of key transport encryption credentials to use, in preference order.SignatureSigningConfiguration.getSigningCredentials()Get the list of signing credentials to use when signing, in preference order.Methods in org.opensaml.xmlsec with parameters of type CredentialModifier and TypeMethodDescriptionvoidEncryptionParameters.setDataEncryptionCredential(Credential credential) Set the encryption credential to use when encrypting the EncryptedData.voidEncryptionParameters.setKeyTransportEncryptionCredential(Credential credential) Set the encryption credential to use when encrypting the EncryptedKey.voidSignatureSigningParameters.setSigningCredential(Credential credential) Set the signing credential to use when signing.Constructors in org.opensaml.xmlsec with parameters of type CredentialModifierConstructorDescriptionSelectionInput(String keyTransportAlgorithmCandidate, String dataEncryptionAlgorithmCandidate, Credential keyTransportCredentialCandidate) Constructor. -
Uses of Credential in org.opensaml.xmlsec.agreement
Subinterfaces of Credential in org.opensaml.xmlsec.agreementModifier and TypeInterfaceDescriptioninterfaceAn entity credential which represents the result of a key agreement operation.Methods in org.opensaml.xmlsec.agreement that return CredentialModifier and TypeMethodDescriptionKeyAgreementCredential.getOriginatorCredential()The credential holding the originator key material.KeyAgreementCredential.getRecipientCredential()The credential holding the recipient key material.Methods in org.opensaml.xmlsec.agreement with parameters of type CredentialModifier and TypeMethodDescriptionKeyAgreementProcessor.execute(Credential publicCredential, String keyAlgorithm, KeyAgreementParameters parameters) Perform the key agreement operation and return a new credential representing the results.static booleanKeyAgreementSupport.supportsKeyAgreement(Credential credential) Evaluate whether the specified credential contains a public key which supports key agreement. -
Uses of Credential in org.opensaml.xmlsec.agreement.impl
Classes in org.opensaml.xmlsec.agreement.impl that implement CredentialFields in org.opensaml.xmlsec.agreement.impl declared as CredentialModifier and TypeFieldDescriptionprivate CredentialPrivateCredential.credentialThe wrapped Credential.private CredentialBasicKeyAgreementCredential.originatorCredentialOriginator credential.private CredentialBasicKeyAgreementCredential.recipientCredentialRecipient credential.Methods in org.opensaml.xmlsec.agreement.impl that return CredentialModifier and TypeMethodDescriptionPrivateCredential.getCredential()Get the wrapped credential.BasicKeyAgreementCredential.getOriginatorCredential()The credential holding the originator key material.BasicKeyAgreementCredential.getRecipientCredential()The credential holding the recipient key material.protected CredentialAbstractKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialDHWithExplicitKDFKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialDHWithLegacyKDFKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialECDHKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.Methods in org.opensaml.xmlsec.agreement.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>BasicKeyAgreementCredential.getCredentialType()Get the primary type of the credential instance.Methods in org.opensaml.xmlsec.agreement.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected KeyAgreementCredentialAbstractKeyAgreementProcessor.buildKeyAgreementCredential(SecretKey derivedKey, Credential publicCredential, Credential privateCredential, KeyAgreementParameters parameters) Build the finalKeyAgreementCredentialfrom the given inputs.AbstractKeyAgreementProcessor.execute(Credential publicCredential, String keyAlgorithm, KeyAgreementParameters inputParameters) Perform the key agreement operation and return a new credential representing the results.protected abstract byte[]AbstractKeyAgreementProcessor.generateAgreementSecret(Credential publicCredential, Credential privateCredential, KeyAgreementParameters parameters) Generate the agreement secret according to the key algorithm and using the supplied public and private credentials.protected byte[]DHWithExplicitKDFKeyAgreementProcessor.generateAgreementSecret(Credential publicCredential, Credential privateCredential, KeyAgreementParameters parameters) Generate the agreement secret according to the key algorithm and using the supplied public and private credentials.protected byte[]DHWithLegacyKDFKeyAgreementProcessor.generateAgreementSecret(Credential publicCredential, Credential privateCredential, KeyAgreementParameters parameters) Generate the agreement secret according to the key algorithm and using the supplied public and private credentials.protected byte[]ECDHKeyAgreementProcessor.generateAgreementSecret(Credential publicCredential, Credential privateCredential, KeyAgreementParameters parameters) Generate the agreement secret according to the key algorithm and using the supplied public and private credentials.protected CredentialAbstractKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialDHWithExplicitKDFKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialDHWithLegacyKDFKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.protected CredentialECDHKeyAgreementProcessor.obtainPrivateCredential(Credential publicCredential, KeyAgreementParameters parameters) Obtain the private credential which is compatible with the given public credential.Constructors in org.opensaml.xmlsec.agreement.impl with parameters of type CredentialModifierConstructorDescriptionBasicKeyAgreementCredential(SecretKey derivedKey, String agreementAlgorithm, Credential originator, Credential recipient) Constructor.PrivateCredential(Credential newCredential) Constructor. -
Uses of Credential in org.opensaml.xmlsec.algorithm
Methods in org.opensaml.xmlsec.algorithm that return CredentialModifier and TypeMethodDescriptionstatic CredentialAlgorithmSupport.generateKeyPairAndCredential(String algorithmURI, int keyLength, boolean includePrivate) Generate a random asymmetric key pair and return in a BasicCredential.static CredentialAlgorithmSupport.generateKeyPairAndCredential(String algorithmURI, AlgorithmParameterSpec paramSpec, boolean includePrivate) Generate a random asymmetric key pair and return in a BasicCredential.static CredentialAlgorithmSupport.generateSymmetricKeyAndCredential(String algorithmURI) Generate a random symmetric key and return in a BasicCredential.Methods in org.opensaml.xmlsec.algorithm with parameters of type CredentialModifier and TypeMethodDescriptionstatic booleanAlgorithmSupport.credentialSupportsAlgorithmForEncryption(Credential credential, AlgorithmDescriptor algorithm) Check whether the supplied credential may be used with the supplied algorithm for the purpose of encryption.static booleanAlgorithmSupport.credentialSupportsAlgorithmForSigning(Credential credential, AlgorithmDescriptor algorithm) Check whether the supplied credential may be used with the supplied algorithm for the purpose of signing. -
Uses of Credential in org.opensaml.xmlsec.crypto
Methods in org.opensaml.xmlsec.crypto with parameters of type CredentialModifier and TypeMethodDescriptionstatic byte[]XMLSigningUtil.signWithURI(Credential signingCredential, String algorithmURI, byte[] input) Compute the signature or MAC value over the supplied input.static booleanXMLSigningUtil.verifyWithURI(Credential verificationCredential, String algorithmURI, byte[] signature, byte[] input) Verify the signature value computed over the supplied input against the supplied signature value. -
Uses of Credential in org.opensaml.xmlsec.encryption.support
Fields in org.opensaml.xmlsec.encryption.support declared as CredentialModifier and TypeFieldDescriptionprivate CredentialDataEncryptionParameters.encryptionCredentialCredential used to encrypt.Methods in org.opensaml.xmlsec.encryption.support that return CredentialModifier and TypeMethodDescriptionDataEncryptionParameters.getEncryptionCredential()Gets the credential used to encrypt.Methods in org.opensaml.xmlsec.encryption.support with parameters of type CredentialModifier and TypeMethodDescriptionvoidDataEncryptionParameters.setEncryptionCredential(Credential newEncryptionCredential) Sets the credential used to encrypt. -
Uses of Credential in org.opensaml.xmlsec.impl
Fields in org.opensaml.xmlsec.impl with type parameters of type CredentialModifier and TypeFieldDescriptionprivate List<Credential>BasicEncryptionConfiguration.dataEncryptionCredentialsData encryption credentials.private List<Credential>BasicEncryptionConfiguration.keyTransportEncryptionCredentialsKey transport encryption credentials.private List<Credential>BasicSignatureSigningConfiguration.signingCredentialsSigning credentials.Methods in org.opensaml.xmlsec.impl that return CredentialModifier and TypeMethodDescriptionprotected CredentialBasicEncryptionParametersResolver.generateDataEncryptionCredential(String dataEncryptionAlgorithm) Generate a random data encryption symmetric key credential.Methods in org.opensaml.xmlsec.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionBasicEncryptionConfiguration.getDataEncryptionCredentials()Get the list of data encryption credentials to use, in preference order.protected List<Credential>BasicEncryptionParametersResolver.getEffectiveDataEncryptionCredentials(CriteriaSet criteria) Get the effective list of data encryption credentials to consider.protected List<Credential>BasicEncryptionParametersResolver.getEffectiveKeyTransportCredentials(CriteriaSet criteria) Get the effective list of key transport credentials to consider.protected List<Credential>BasicSignatureSigningParametersResolver.getEffectiveSigningCredentials(CriteriaSet criteria) Get the effective list of signing credentials to consider.BasicEncryptionConfiguration.getKeyTransportEncryptionCredentials()Get the list of key transport encryption credentials to use, in preference order.BasicSignatureSigningConfiguration.getSigningCredentials()Get the list of signing credentials to use when signing, in preference order.Methods in org.opensaml.xmlsec.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected booleanBasicEncryptionParametersResolver.checkAndProcessKeyAgreement(EncryptionParameters params, CriteriaSet criteria, Credential credential, List<String> dataEncryptionAlgorithms, List<String> keyTransportAlgorithms) Check for a credential type that implies a key agreement operation, and process if so indicated.protected booleanBasicEncryptionParametersResolver.credentialSupportsAlgorithm(Credential credential, String algorithm) Evaluate whether the specified credential is supported for use with the specified algorithm URI.protected booleanBasicSignatureSigningParametersResolver.credentialSupportsAlgorithm(Credential credential, String algorithm) Evaluate whether the specified credential is supported for use with the specified algorithm URI.protected KeyAgreementEncryptionConfigurationBasicEncryptionParametersResolver.getEffectiveKeyAgreementConfiguration(CriteriaSet criteria, Credential credential) Get the effectiveKeyAgreementEncryptionConfigurationto use with the specified credential.protected KeyInfoGeneratorAbstractSecurityParametersResolver.lookupKeyInfoGenerator(Credential credential, NamedKeyInfoGeneratorManager manager, String keyInfoProfileName) Resolve aKeyInfoGeneratorinstance based on aNamedKeyInfoGeneratorManager,Credentialand optional KeyInfo generation profile name.protected StringBasicEncryptionParametersResolver.resolveDataEncryptionAlgorithm(Credential dataEncryptionCredential, List<String> dataEncryptionAlgorithms) Determine the data encryption algorithm URI, considering the optionally specified data encryption credential.protected StringBasicEncryptionParametersResolver.resolveDataEncryptionAlgorithm(Credential dataEncryptionCredential, CriteriaSet criteria, Predicate<String> includeExcludePredicate) Determine the data encryption algorithm URI to use with the specified data encryption credential.protected KeyInfoGeneratorBasicEncryptionParametersResolver.resolveDataKeyInfoGenerator(CriteriaSet criteria, Credential dataEncryptionCredential) Resolve and return theKeyInfoGeneratorinstance to use with the specified data encryption credential.protected IntegerBasicSignatureSigningParametersResolver.resolveHMACOutputLength(CriteriaSet criteria, Credential signingCredential, String algorithmURI) Resolve and return the effective HMAC output length to use, if applicable to the specified signing credential and signature method algorithm URI.protected KeyInfoGeneratorBasicSignatureSigningParametersResolver.resolveKeyInfoGenerator(CriteriaSet criteria, Credential signingCredential) Resolve and return theKeyInfoGeneratorinstance to use with the specified credential.protected StringBasicEncryptionParametersResolver.resolveKeyTransportAlgorithm(Credential keyTransportCredential, List<String> keyTransportAlgorithms, String dataEncryptionAlgorithm, KeyTransportAlgorithmPredicate keyTransportPredicate) Determine the key transport encryption algorithm URI to use with the specified key transport credential and optional data encryption algorithm URI.protected StringBasicEncryptionParametersResolver.resolveKeyTransportAlgorithm(Credential keyTransportCredential, CriteriaSet criteria, Predicate<String> includeExcludePredicate, String dataEncryptionAlgorithm) Determine the key transport algorithm URI to use with the specified credential.protected KeyInfoGeneratorBasicEncryptionParametersResolver.resolveKeyTransportKeyInfoGenerator(CriteriaSet criteria, Credential keyTransportEncryptionCredential) Resolve and return theKeyInfoGeneratorinstance to use with the specified key transport credential.Method parameters in org.opensaml.xmlsec.impl with type arguments of type CredentialModifier and TypeMethodDescriptionBasicEncryptionConfiguration.setDataEncryptionCredentials(List<Credential> credentials) Set the data encryption credentials to use.BasicEncryptionConfiguration.setKeyTransportEncryptionCredentials(List<Credential> credentials) Set the key transport encryption credentials to use.BasicSignatureSigningConfiguration.setSigningCredentials(List<Credential> credentials) Set the signing credentials to use when signing. -
Uses of Credential in org.opensaml.xmlsec.keyinfo
Fields in org.opensaml.xmlsec.keyinfo with type parameters of type CredentialModifier and TypeFieldDescriptionprivate final Map<Class<? extends Credential>,KeyInfoGeneratorFactory> KeyInfoGeneratorManager.factoriesThe factories being managed, indexed by credential type.Methods in org.opensaml.xmlsec.keyinfo that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>KeyInfoGeneratorFactory.getCredentialType()Get the type (interface) of the specific type of credential handled by generators produced by this factory.Methods in org.opensaml.xmlsec.keyinfo with parameters of type CredentialModifier and TypeMethodDescriptionKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.KeyInfoGeneratorManager.getFactory(Credential credential) Get the factory which produces KeyInfoGenerators which can handle the specified credential.NamedKeyInfoGeneratorManager.getFactory(String name, Credential credential) Lookup and return the named generator factory for the type of the credential specified.static KeyInfoGeneratorKeyInfoSupport.getKeyInfoGenerator(Credential credential, NamedKeyInfoGeneratorManager manager, String keyInfoProfileName) Obtains aKeyInfoGeneratorfor the specifiedCredential.booleanKeyInfoGeneratorFactory.handles(Credential credential) Check whether the generators produced by this factory can handle the specified credential. -
Uses of Credential in org.opensaml.xmlsec.keyinfo.impl
Fields in org.opensaml.xmlsec.keyinfo.impl with type parameters of type CredentialModifier and TypeFieldDescriptionprivate final Collection<Credential>KeyInfoResolutionContext.resolvedCredentialsThis list provides KeyInfo resolvers and providers in a particular processing environment access to credentials that may have already been previously resolved.Methods in org.opensaml.xmlsec.keyinfo.impl that return CredentialModifier and TypeMethodDescriptionprotected CredentialBasicProviderKeyInfoCredentialResolver.buildBasicCredential(Key key, Set<String> keyNames) Construct a basic credential containing the specified key and set of key names.Methods in org.opensaml.xmlsec.keyinfo.impl that return types with arguments of type CredentialModifier and TypeMethodDescriptionClass<? extends Credential>BasicKeyInfoGeneratorFactory.getCredentialType()Get the type (interface) of the specific type of credential handled by generators produced by this factory.Class<? extends Credential>KeyAgreementKeyInfoGeneratorFactory.getCredentialType()Get the type (interface) of the specific type of credential handled by generators produced by this factory.Class<? extends Credential>X509KeyInfoGeneratorFactory.getCredentialType()Get the type (interface) of the specific type of credential handled by generators produced by this factory.KeyInfoResolutionContext.getResolvedCredentials()Get the set of credentials previously resolved.KeyInfoProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.protected Collection<Credential>BasicProviderKeyInfoCredentialResolver.processKeyInfoChild(KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, XMLObject keyInfoChild) Process the given KeyInfo child with the registered providers.protected Collection<? extends Credential>LocalKeyInfoCredentialResolver.resolveByKeyName(String keyName) Resolve credentials from local resolver using key name criteria.protected Collection<? extends Credential>LocalKeyInfoCredentialResolver.resolveByPublicKey(PublicKey publicKey) Resolve credentials from local resolver using public key criteria.protected Iterable<Credential>BasicProviderKeyInfoCredentialResolver.resolveFromSource(CriteriaSet criteriaSet) Subclasses are required to implement this method to resolve credentials from the implementation-specific type of underlying credential source.Methods in org.opensaml.xmlsec.keyinfo.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected KeyBasicProviderKeyInfoCredentialResolver.extractKeyValue(Credential cred) Utility method to extract any key that might be present in the specified Credential.BasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.KeyAgreementKeyInfoGeneratorFactory.KeyAgreementKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.StaticKeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.X509KeyInfoGeneratorFactory.X509KeyInfoGenerator.generate(Credential credential) Generate a new KeyInfo object based on keying material and other information within a credential.booleanBasicKeyInfoGeneratorFactory.handles(Credential credential) Check whether the generators produced by this factory can handle the specified credential.booleanKeyAgreementKeyInfoGeneratorFactory.handles(Credential credential) Check whether the generators produced by this factory can handle the specified credential.booleanX509KeyInfoGeneratorFactory.handles(Credential credential) Check whether the generators produced by this factory can handle the specified credential.protected booleanLocalKeyInfoCredentialResolver.isLocalCredential(Credential credential) Determine whether the credential is a local credential.protected voidBasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.processEntityID(KeyInfo keyInfo, Credential credential) Process the value ofgetEntityId().protected voidBasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.processKeyNames(KeyInfo keyInfo, Credential credential) Process the values ofgetKeyNames().protected voidBasicKeyInfoGeneratorFactory.BasicKeyInfoGenerator.processPublicKey(KeyInfo keyInfo, Credential credential) Process the value ofgetPublicKey().Method parameters in org.opensaml.xmlsec.keyinfo.impl with type arguments of type CredentialModifier and TypeMethodDescriptionprotected voidBasicProviderKeyInfoCredentialResolver.postProcess(KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, List<Credential> credentials) Hook for subclasses to do post-processing of the credential set after all KeyInfo children have been processed.protected voidLocalKeyInfoCredentialResolver.postProcess(KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, List<Credential> credentials) Hook for subclasses to do post-processing of the credential set after all KeyInfo children have been processed.protected voidBasicProviderKeyInfoCredentialResolver.postProcessEmptyCredentials(KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, List<Credential> credentials) Hook for processing the case where no credentials were returned by any resolution method by any provider, nor by the processing of theBasicProviderKeyInfoCredentialResolver.postProcess(KeyInfoResolutionContext, CriteriaSet, List)hook.private voidBasicProviderKeyInfoCredentialResolver.processKeyInfo(KeyInfo keyInfo, KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, List<Credential> credentials) The main processing logic implemented by this resolver.protected voidBasicProviderKeyInfoCredentialResolver.processKeyInfoChildren(KeyInfoResolutionContext kiContext, CriteriaSet criteriaSet, List<Credential> credentials) Use registered providers to process the non-KeyValue/DEREncodedKeyValue children of KeyInfo.Constructors in org.opensaml.xmlsec.keyinfo.impl with parameters of type CredentialModifierConstructorDescriptionStaticKeyInfoCredentialResolver(Credential credential) Constructor.Constructor parameters in org.opensaml.xmlsec.keyinfo.impl with type arguments of type CredentialModifierConstructorDescriptionCollectionKeyInfoCredentialResolver(Collection<Credential> credentials) Constructor.KeyInfoResolutionContext(Collection<Credential> credentials) Constructor.StaticKeyInfoCredentialResolver(List<Credential> credentials) Constructor. -
Uses of Credential in org.opensaml.xmlsec.keyinfo.impl.provider
Methods in org.opensaml.xmlsec.keyinfo.impl.provider that return CredentialModifier and TypeMethodDescriptionprivate CredentialAgreementMethodKeyInfoProvider.resolveOriginatorCredential(AgreementMethod agreementMethod, KeyInfoCredentialResolver resolver) Resolve the originatorCredentialfrom theOriginatorKeyInfoelement.private CredentialAgreementMethodKeyInfoProvider.resolveRecipientCredential(AgreementMethod agreementMethod, KeyInfoCredentialResolver resolver) Resolve the recipientCredentialfrom theRecipientKeyInfoelement.Methods in org.opensaml.xmlsec.keyinfo.impl.provider that return types with arguments of type CredentialModifier and TypeMethodDescriptionAgreementMethodKeyInfoProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.DEREncodedKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.DSAKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.ECKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.InlineX509DataProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.KeyInfoReferenceProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.RSAKeyValueProvider.process(KeyInfoCredentialResolver resolver, XMLObject keyInfoChild, CriteriaSet criteriaSet, KeyInfoResolutionContext kiContext) Process a specified KeyInfo child (XMLobject) and attempt to resolve a credential from it.Methods in org.opensaml.xmlsec.keyinfo.impl.provider with parameters of type CredentialModifier and TypeMethodDescriptionprotected KeyAbstractKeyInfoProvider.extractKeyValue(Credential cred) Utility method to extract any key that might be present in the specified Credential. -
Uses of Credential in org.opensaml.xmlsec.signature
Methods in org.opensaml.xmlsec.signature that return CredentialModifier and TypeMethodDescriptionSignature.getSigningCredential()Gets the signature signing credential.Methods in org.opensaml.xmlsec.signature with parameters of type CredentialModifier and TypeMethodDescriptionvoidSignature.setSigningCredential(Credential newCredential) Sets the signature signing credential. -
Uses of Credential in org.opensaml.xmlsec.signature.impl
Fields in org.opensaml.xmlsec.signature.impl declared as CredentialModifier and TypeFieldDescriptionprivate CredentialSignatureImpl.signingCredentialKey used to sign the signature.Methods in org.opensaml.xmlsec.signature.impl that return CredentialModifier and TypeMethodDescriptionSignatureImpl.getSigningCredential()Gets the signature signing credential.Methods in org.opensaml.xmlsec.signature.impl with parameters of type CredentialModifier and TypeMethodDescriptionvoidSignatureImpl.setSigningCredential(Credential newCredential) Sets the signature signing credential. -
Uses of Credential in org.opensaml.xmlsec.signature.support
Methods in org.opensaml.xmlsec.signature.support with parameters of type CredentialModifier and TypeMethodDescriptionbooleanSignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.voidSignatureValidationProvider.validate(Signature signature, Credential validationCredential) Validate the given XML Signature using the given candidate validation Credential.static voidSignatureValidator.validate(Signature signature, Credential validationCredential) Validate the given XML Signature using the given candidate validation Credential. -
Uses of Credential in org.opensaml.xmlsec.signature.support.impl
Methods in org.opensaml.xmlsec.signature.support.impl with parameters of type CredentialModifier and TypeMethodDescriptionprotected abstract booleanBaseSignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.protected booleanExplicitKeySignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.protected booleanPKIXSignatureTrustEngine.doValidate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.protected abstract booleanBaseSignatureTrustEngine.evaluateTrust(Credential untrustedCredential, TrustBasisType trustBasis) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.protected booleanExplicitKeySignatureTrustEngine.evaluateTrust(Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.protected booleanPKIXSignatureTrustEngine.evaluateTrust(Credential untrustedCredential, Pair<Set<String>, Iterable<PKIXValidationInformation>> validationPair) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.final booleanBaseSignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.booleanChainingSignatureTrustEngine.validate(byte[] signature, byte[] content, String algorithmURI, CriteriaSet trustBasisCriteria, Credential candidateCredential) Determines whether a raw signature over specified content is valid and signed by a trusted credential.protected booleanBaseSignatureTrustEngine.verifySignature(Signature signature, Credential credential) Attempt to verify a signature using the key from the supplied credential.Method parameters in org.opensaml.xmlsec.signature.support.impl with type arguments of type CredentialModifier and TypeMethodDescriptionprotected booleanExplicitKeySignatureTrustEngine.evaluateTrust(Credential untrustedCredential, Iterable<Credential> trustedCredentials) Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information. -
Uses of Credential in org.opensaml.xmlsec.signature.support.impl.provider
Methods in org.opensaml.xmlsec.signature.support.impl.provider with parameters of type CredentialModifier and TypeMethodDescriptionvoidApacheSantuarioSignatureValidationProviderImpl.validate(Signature signature, Credential validationCredential) Validate the given XML Signature using the given candidate validation Credential.