org.picketlink.identity.federation.web.servlets

Class IDPServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

org.picketlink.identity.federation.web.servlets.IDPServlet

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

public class IDPServlet
extends javax.servlet.http.HttpServlet

SAML Web Browser SSO - POST binding

Since:

Aug 13, 2009

Author:

Anil.Saldhana@redhat.com

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	IDPServlet.SessionHolder

Field Summary

Fields

Modifier and Type	Field and Description
protected DelegatedAttributeManager	attribManager
protected List<String>	attributeKeys
protected String	canonicalizationMethod
protected SAML2HandlerChain	chain
protected javax.servlet.ServletContext	context
protected String	identityParticipantStack If the user wants to set a particular IdentityParticipantStack
protected String	identityURL
protected IDPType	idpConfiguration
protected Boolean	ignoreIncomingSignatures
protected TrustKeyManager	keyManager
protected PicketLinkType	picketLinkConfiguration
protected RoleGenerator	roleGenerator
protected Boolean	signOutgoingMessages

Constructor Summary

Constructors

Constructor and Description
IDPServlet()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
protected void	doPost(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
Boolean	getIgnoreIncomingSignatures()
void	init(javax.servlet.ServletConfig config)
boolean	isStrictPostBinding()
protected void	sendErrorResponseToSP(String referrer, javax.servlet.http.HttpServletResponse response, String relayState, IDPWebRequestUtil webRequestUtil)
void	setStrictPostBinding(boolean strictPostBinding)
void	testPost(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
protected boolean	validate(String remoteAddress, String queryString, IDPServlet.SessionHolder holder, boolean isPost)

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

idpConfiguration

protected transient IDPType idpConfiguration

picketLinkConfiguration

protected transient PicketLinkType picketLinkConfiguration

roleGenerator

protected transient RoleGenerator roleGenerator

attribManager

protected transient DelegatedAttributeManager attribManager

attributeKeys

protected List<String> attributeKeys

identityURL

protected String identityURL

keyManager

protected transient TrustKeyManager keyManager

ignoreIncomingSignatures

protected Boolean ignoreIncomingSignatures

signOutgoingMessages

protected Boolean signOutgoingMessages

canonicalizationMethod

protected String canonicalizationMethod

context

protected transient javax.servlet.ServletContext context

chain

protected transient SAML2HandlerChain chain

identityParticipantStack

protected String identityParticipantStack

If the user wants to set a particular IdentityParticipantStack

Constructor Detail

IDPServlet

public IDPServlet()

Method Detail

isStrictPostBinding

public boolean isStrictPostBinding()

setStrictPostBinding

public void setStrictPostBinding(boolean strictPostBinding)

getIgnoreIncomingSignatures

public Boolean getIgnoreIncomingSignatures()

init

public void init(javax.servlet.ServletConfig config)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Servlet

Overrides:

init in class javax.servlet.GenericServlet

Throws:

javax.servlet.ServletException

doPost

protected void doPost(javax.servlet.http.HttpServletRequest request,
          javax.servlet.http.HttpServletResponse response)
               throws javax.servlet.ServletException,
                      IOException

Overrides:

doPost in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

sendErrorResponseToSP

protected void sendErrorResponseToSP(String referrer,
                         javax.servlet.http.HttpServletResponse response,
                         String relayState,
                         IDPWebRequestUtil webRequestUtil)
                              throws javax.servlet.ServletException,
                                     IOException,
                                     ConfigurationException

Throws:

javax.servlet.ServletException

IOException

ConfigurationException

doGet

protected void doGet(javax.servlet.http.HttpServletRequest req,
         javax.servlet.http.HttpServletResponse resp)
              throws javax.servlet.ServletException,
                     IOException

Overrides:

doGet in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

validate

protected boolean validate(String remoteAddress,
               String queryString,
               IDPServlet.SessionHolder holder,
               boolean isPost)
                    throws IOException,
                           GeneralSecurityException

Throws:

IOException

GeneralSecurityException

testPost

public void testPost(javax.servlet.http.HttpServletRequest request,
            javax.servlet.http.HttpServletResponse response)
              throws javax.servlet.ServletException,
                     IOException

Throws:

javax.servlet.ServletException

IOException