edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition

Class CryptoTransientIdAttributeDefinition

java.lang.Object

edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.AbstractResolutionPlugIn<BaseAttribute>

edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition

edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.CryptoTransientIdAttributeDefinition

All Implemented Interfaces:

AttributeDefinition, ResolutionPlugIn<BaseAttribute>

public class CryptoTransientIdAttributeDefinition
extends BaseAttributeDefinition

An attribute definition that generates integrity protected, encrypted identifiers useful for stateless transient subject IDs.

Field Summary

Fields

Modifier and Type	Field and Description
private DataSealer	dataSealer Object used to protect and encrypt the data.
private long	idLifetime Length, in milliseconds, tokens are valid.
private static org.slf4j.Logger	log Class logger.

Constructor Summary

Constructors

Constructor and Description
CryptoTransientIdAttributeDefinition(DataSealer sealer) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected BaseAttribute<String>	doResolve(ShibbolethResolutionContext resolutionContext) Creates and populates the values for the resolved attribute.
long	getIdLifetime() Gets the time, in milliseconds, ids are valid.
void	setIdLifetime(long lifetime) Sets the time, in milliseconds, ids are valid.
void	validate() Validate the internal state of this plug-in.

Methods inherited from class edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition

getAttributeEncoders, getDisplayDescriptions, getDisplayNames, getSourceAttributeID, getValuesFromAllDependencies, isDependencyOnly, resolve, setDependencyOnly, setSourceAttributeID

Methods inherited from class edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.AbstractResolutionPlugIn

getDependencyIds, getId, getValuesFromAllDependencies, getValuesFromAttributeDependency, getValuesFromConnectorDependency, setId

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ResolutionPlugIn

getDependencyIds, getId

Field Detail

log

private static org.slf4j.Logger log

Class logger.

dataSealer

private DataSealer dataSealer

Object used to protect and encrypt the data.

idLifetime

private long idLifetime

Length, in milliseconds, tokens are valid.

Constructor Detail

CryptoTransientIdAttributeDefinition

public CryptoTransientIdAttributeDefinition(DataSealer sealer)

Constructor.

Parameters:

sealer - object used to protect and encrypt the data

Method Detail

doResolve

protected BaseAttribute<String> doResolve(ShibbolethResolutionContext resolutionContext)
                                   throws AttributeResolutionException

Creates and populates the values for the resolved attribute. Implementations should *not* set, or otherwise manage, the attribute encoders for the resolved attribute.

Specified by:

doResolve in class BaseAttributeDefinition

Parameters:

resolutionContext - current attribute resolution context

Returns:

resolved attribute

Throws:

AttributeResolutionException - thrown if there is a problem resolving and creating the attribute

getIdLifetime

public long getIdLifetime()

Gets the time, in milliseconds, ids are valid.

Returns:

time, in milliseconds, ids are valid

setIdLifetime

public void setIdLifetime(long lifetime)

Sets the time, in milliseconds, ids are valid.

Parameters:

lifetime - time, in milliseconds, ids are valid

validate

public void validate()
              throws AttributeResolutionException

Validate the internal state of this plug-in. This process may not rely on information from any dependency.

Throws:

AttributeResolutionException - if the plug-in has an invalid internal state