Class InResponseToSecurityHandler

  • All Implemented Interfaces:
    net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.DestructableComponent, net.shibboleth.utilities.java.support.component.InitializableComponent, org.opensaml.messaging.handler.MessageHandler

    public class InResponseToSecurityHandler
    extends org.opensaml.messaging.handler.AbstractMessageHandler
    Client-side message handler for validating that the inbound SAML response inResponseTo ID matches the corresponding outbound request ID.
    • Field Summary

      Fields 
      Modifier and Type Field Description
      private org.slf4j.Logger log
      Logger.
    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected void doInvoke​(org.opensaml.messaging.context.MessageContext messageContext)
      private String resolveInboundInResponseTo​(org.opensaml.messaging.context.MessageContext messageContext)
      Resolve the inbound inResponseTo ID.
      private String resolveOutboundRequestID​(org.opensaml.messaging.context.MessageContext messageContext)
      Resolve the outbound request ID.
      • Methods inherited from class org.opensaml.messaging.handler.AbstractMessageHandler

        doPostInvoke, doPostInvoke, doPreInvoke, getActivationCondition, getLogPrefix, invoke, setActivationCondition
      • Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

        destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized
      • Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

        initialize, isInitialized
    • Field Detail

      • log

        private org.slf4j.Logger log
        Logger.
    • Constructor Detail

      • InResponseToSecurityHandler

        public InResponseToSecurityHandler()
    • Method Detail

      • doInvoke

        protected void doInvoke​(@Nonnull
                                org.opensaml.messaging.context.MessageContext messageContext)
                         throws org.opensaml.messaging.handler.MessageHandlerException
        Specified by:
        doInvoke in class org.opensaml.messaging.handler.AbstractMessageHandler
        Throws:
        org.opensaml.messaging.handler.MessageHandlerException
      • resolveOutboundRequestID

        private String resolveOutboundRequestID​(@Nonnull
                                                org.opensaml.messaging.context.MessageContext messageContext)
        Resolve the outbound request ID.
        Parameters:
        messageContext - the message context
        Returns:
        the outbound request ID, or null
      • resolveInboundInResponseTo

        private String resolveInboundInResponseTo​(@Nonnull
                                                  org.opensaml.messaging.context.MessageContext messageContext)
        Resolve the inbound inResponseTo ID.
        Parameters:
        messageContext - the message context
        Returns:
        the inbound inResponseTo, or null