org.opensaml.xmlsec.impl

Class AbstractSecurityParametersResolver<ProductType>

java.lang.Object

org.opensaml.xmlsec.impl.AbstractSecurityParametersResolver<ProductType>

Type Parameters:

ProductType - the type of output produced by the resolver

All Implemented Interfaces:

net.shibboleth.utilities.java.support.resolver.Resolver<ProductType,net.shibboleth.utilities.java.support.resolver.CriteriaSet>

Direct Known Subclasses:

BasicDecryptionParametersResolver, BasicEncryptionParametersResolver, BasicSignatureSigningParametersResolver, BasicSignatureValidationParametersResolver

public abstract class AbstractSecurityParametersResolver<ProductType>
extends Object
implements net.shibboleth.utilities.java.support.resolver.Resolver<ProductType,net.shibboleth.utilities.java.support.resolver.CriteriaSet>

Abstract base class for security parameters resolvers which supplies commonly used functionality for reuse.

Field Summary

Fields

Modifier and Type	Field and Description
private Logger	log Logger.

Constructor Summary

Constructors

Constructor and Description
AbstractSecurityParametersResolver()

Method Summary

Methods

Modifier and Type	Method and Description
protected KeyInfoGenerator	lookupKeyInfoGenerator(org.opensaml.security.credential.Credential credential, NamedKeyInfoGeneratorManager manager, String keyInfoProfileName) Resolve a KeyInfoGenerator instance based on a NamedKeyInfoGeneratorManager, Credential and optional KeyInfo generation profile name.
protected void	resolveAndPopulateWhiteAndBlacklists(WhitelistBlacklistParameters params, net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria, List<? extends WhitelistBlacklistConfiguration> configs) Resolve and populate the effective whitelist or blacklist on the supplied instance of WhitelistBlacklistParameters.
protected Collection<String>	resolveEffectiveBlacklist(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria, List<? extends WhitelistBlacklistConfiguration> configs) Resolve and return the effective algorithm blacklist based on supplied configuration.
protected Collection<String>	resolveEffectiveWhitelist(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria, List<? extends WhitelistBlacklistConfiguration> configs) Resolve and return the effective algorithm whitelist based on supplied configuration.
protected WhitelistBlacklistConfiguration.Precedence	resolveWhitelistBlacklistPrecedence(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria, List<? extends WhitelistBlacklistConfiguration> configs) Resolve and return the effective algorithm whitelist/blacklist precedence based on supplied configuration.
protected com.google.common.base.Predicate<String>	resolveWhitelistBlacklistPredicate(net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria, List<? extends WhitelistBlacklistConfiguration> configs) Get a predicate which operates according to the effective configured whitelist and blacklist policy.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.resolver.Resolver

resolve, resolveSingle

Field Detail

log

private Logger log

Logger.

Constructor Detail

AbstractSecurityParametersResolver

public AbstractSecurityParametersResolver()

Method Detail

lookupKeyInfoGenerator

@Nullable
protected KeyInfoGenerator lookupKeyInfoGenerator(@Nonnull
                                               org.opensaml.security.credential.Credential credential,
                                               @Nullable
                                               NamedKeyInfoGeneratorManager manager,
                                               @Nullable
                                               String keyInfoProfileName)

Resolve a KeyInfoGenerator instance based on a NamedKeyInfoGeneratorManager, Credential and optional KeyInfo generation profile name.

Parameters:

credential - the credential for which a KeyInfo generator is needed

manager - the named KeyInfo generator manager instance

keyInfoProfileName - KeyInfo generation profile name

Returns:

the resolved KeyInfo generator instance, or null

resolveAndPopulateWhiteAndBlacklists

protected void resolveAndPopulateWhiteAndBlacklists(@Nonnull
                                        WhitelistBlacklistParameters params,
                                        @Nonnull
                                        net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria,
                                        @Nonnull@NonnullElements@NotEmpty
                                        List<? extends WhitelistBlacklistConfiguration> configs)

Resolve and populate the effective whitelist or blacklist on the supplied instance of WhitelistBlacklistParameters.

Parameters:

params - the whitelist/blacklist parameters instance to populate

criteria - the input criteria being evaluated

configs - the effective list of WhitelistBlacklistConfiguration instances to consider

resolveWhitelistBlacklistPredicate

@Nonnull
protected com.google.common.base.Predicate<String> resolveWhitelistBlacklistPredicate(@Nonnull
                                                                                  net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria,
                                                                                  @Nonnull@NonnullElements@NotEmpty
                                                                                  List<? extends WhitelistBlacklistConfiguration> configs)

Get a predicate which operates according to the effective configured whitelist and blacklist policy.

Parameters:

criteria - the input criteria being evaluated

configs - the effective list of WhitelistBlacklistConfiguration instances to consider

Returns:

a predicate instance which operates accordingly to the effective whitelist and blacklist policy

resolveEffectiveBlacklist

@Nonnull
protected Collection<String> resolveEffectiveBlacklist(@Nonnull
                                                   net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria,
                                                   @Nonnull@NonnullElements@NotEmpty
                                                   List<? extends WhitelistBlacklistConfiguration> configs)

Resolve and return the effective algorithm blacklist based on supplied configuration.

Parameters:

criteria - the input criteria being evaluated

configs - the effective list of WhitelistBlacklistConfiguration instances to consider

Returns:

the effective algorithm blacklist

resolveEffectiveWhitelist

@Nonnull
protected Collection<String> resolveEffectiveWhitelist(@Nonnull
                                                   net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria,
                                                   @Nonnull@NonnullElements@NotEmpty
                                                   List<? extends WhitelistBlacklistConfiguration> configs)

Resolve and return the effective algorithm whitelist based on supplied configuration.

Parameters:

criteria - the input criteria being evaluated

configs - the effective list of WhitelistBlacklistConfiguration instances to consider

Returns:

the effective algorithm whitelist

resolveWhitelistBlacklistPrecedence

@Nonnull
protected WhitelistBlacklistConfiguration.Precedence resolveWhitelistBlacklistPrecedence(@Nonnull
                                                                                     net.shibboleth.utilities.java.support.resolver.CriteriaSet criteria,
                                                                                     @Nonnull@NonnullElements@NotEmpty
                                                                                     List<? extends WhitelistBlacklistConfiguration> configs)

Resolve and return the effective algorithm whitelist/blacklist precedence based on supplied configuration.

Parameters:

criteria - the input criteria being evaluated

configs - the effective list of WhitelistBlacklistConfiguration instances to consider

Returns:

the effective algorithm whitelist/blacklist precedence