Package org.apache.cxf.ws.security.trust

Class STSStaxTokenValidator

java.lang.Object

org.apache.wss4j.stax.validate.SignatureTokenValidatorImpl

org.apache.wss4j.stax.validate.SamlTokenValidatorImpl

org.apache.cxf.ws.security.trust.STSStaxTokenValidator

All Implemented Interfaces:

BinarySecurityTokenValidator, SamlTokenValidator, SignatureTokenValidator, UsernameTokenValidator, Validator

public class STSStaxTokenValidator
extends SamlTokenValidatorImpl
implements BinarySecurityTokenValidator, UsernameTokenValidator

A Streaming SAML Token Validator implementation to validate a received Token to a SecurityTokenService (STS). TODO Refactor this class a bit better...

Constructor Summary

Constructors

Constructor	Description
STSStaxTokenValidator()
STSStaxTokenValidator(boolean alwaysValidateToSts)	Construct a new instance.

Method Summary

Modifier and Type	Method	Description
org.apache.xml.security.stax.securityToken.InboundSecurityToken	validate(BinarySecurityTokenType binarySecurityTokenType, TokenContext tokenContext)
<T extends UsernameSecurityToken & org.apache.xml.security.stax.securityToken.InboundSecurityToken> T	validate(UsernameTokenType usernameTokenType, TokenContext tokenContext)
<T extends SamlSecurityToken & org.apache.xml.security.stax.securityToken.InboundSecurityToken> T	validate(SamlAssertionWrapper samlAssertionWrapper, org.apache.xml.security.stax.securityToken.InboundSecurityToken subjectSecurityToken, TokenContext tokenContext)

Methods inherited from class org.apache.wss4j.stax.validate.SamlTokenValidatorImpl

checkAuthnStatements, checkConditions, checkConditions, checkOneTimeUse, getRequiredSubjectConfirmationMethod, getTtl, isRequireBearerSignature, isRequireStandardSubjectConfirmationMethod, isValidateSignatureAgainstProfile, setFutureTTL, setRequireBearerSignature, setRequiredSubjectConfirmationMethod, setRequireStandardSubjectConfirmationMethod, setTtl, setValidateSignatureAgainstProfile, validateAssertion, verifySubjectConfirmationMethod

Methods inherited from class org.apache.wss4j.stax.validate.SignatureTokenValidatorImpl

validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.wss4j.stax.validate.SignatureTokenValidator

validate

Constructor Details

STSStaxTokenValidator

public STSStaxTokenValidator()

STSStaxTokenValidator

public STSStaxTokenValidator(boolean alwaysValidateToSts)

Construct a new instance.

Parameters:

alwaysValidateToSts - whether to always validate the token to the STS

Method Details

validate

public <T extends SamlSecurityToken & org.apache.xml.security.stax.securityToken.InboundSecurityToken>
T validate(SamlAssertionWrapper samlAssertionWrapper,
 org.apache.xml.security.stax.securityToken.InboundSecurityToken subjectSecurityToken,
 TokenContext tokenContext)
    throws WSSecurityException

Specified by:

validate in interface SamlTokenValidator

Overrides:

validate in class SamlTokenValidatorImpl

Throws:

WSSecurityException

validate

public org.apache.xml.security.stax.securityToken.InboundSecurityToken validate(BinarySecurityTokenType binarySecurityTokenType,
 TokenContext tokenContext)
                                                                         throws WSSecurityException

Specified by:

validate in interface BinarySecurityTokenValidator

Throws:

WSSecurityException

validate

public <T extends UsernameSecurityToken & org.apache.xml.security.stax.securityToken.InboundSecurityToken>
T validate(UsernameTokenType usernameTokenType,
 TokenContext tokenContext)
    throws WSSecurityException

Specified by:

validate in interface UsernameTokenValidator

Throws:

WSSecurityException