Package org.opensaml.saml.saml2.profile.impl

Class DecryptAssertions

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.saml.saml2.profile.impl.AbstractDecryptAction

org.opensaml.saml.saml2.profile.impl.DecryptAssertions

All Implemented Interfaces:

net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.DestructableComponent, net.shibboleth.utilities.java.support.component.InitializableComponent, org.opensaml.profile.action.ProfileAction

public class DecryptAssertions
extends AbstractDecryptAction

Action to decrypt an EncryptedAssertion element and replace it with the decrypted Assertion in situ.

All of the built-in SAML message types that may include an EncryptedAssertion are potentially handled, but the actual message to handle is obtained via strategy function, by default the inbound message.

Event:

EventIds.PROCEED_EVENT_ID, SAMLEventIds.DECRYPT_ASSERTION_FAILED

Field Summary

Fields

Modifier and Type	Field	Description
private Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
DecryptAssertions()

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(org.opensaml.profile.context.ProfileRequestContext profileRequestContext)
private org.opensaml.saml.saml2.core.Assertion	processEncryptedAssertion(org.opensaml.profile.context.ProfileRequestContext profileRequestContext, org.opensaml.saml.saml2.core.EncryptedAssertion encAssert)	Decrypt an EncryptedAssertion and return the result.
private void	processResponse(org.opensaml.profile.context.ProfileRequestContext profileRequestContext, org.opensaml.saml.saml2.core.Response response)	Decrypt any EncryptedAssertion found in a response and replace it with the result.

Methods inherited from class org.opensaml.saml.saml2.profile.impl.AbstractDecryptAction

doPreExecute, getDecrypter, getDecryptionPredicate, getSAMLObject, isErrorFatal, setDecryptionPredicate, setErrorFatal, setMessageLookupStrategy, setSecurityParametersContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final Logger log

Class logger.

Constructor Detail

DecryptAssertions

public DecryptAssertions()

Method Detail

doExecute

protected void doExecute(@Nonnull
                         org.opensaml.profile.context.ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class org.opensaml.profile.action.AbstractProfileAction

processEncryptedAssertion

@Nullable
private org.opensaml.saml.saml2.core.Assertion processEncryptedAssertion(@Nonnull
                                                                         org.opensaml.profile.context.ProfileRequestContext profileRequestContext,
                                                                         @Nonnull
                                                                         org.opensaml.saml.saml2.core.EncryptedAssertion encAssert)
                                                                  throws org.opensaml.xmlsec.encryption.support.DecryptionException

Decrypt an EncryptedAssertion and return the result.

Parameters:

profileRequestContext - current profile request context

encAssert - the encrypted object

Returns:

the decrypted assertion, or null if the object did not need decryption

Throws:

org.opensaml.xmlsec.encryption.support.DecryptionException - if an error occurs during decryption

processResponse

private void processResponse(@Nonnull
                             org.opensaml.profile.context.ProfileRequestContext profileRequestContext,
                             @Nonnull
                             org.opensaml.saml.saml2.core.Response response)
                      throws org.opensaml.xmlsec.encryption.support.DecryptionException

Decrypt any EncryptedAssertion found in a response and replace it with the result.

Parameters:

profileRequestContext - current profile request context

response - response to operate on

Throws:

org.opensaml.xmlsec.encryption.support.DecryptionException - if an error occurs