Package org.pac4j.saml.client

Class SAML2Client

java.lang.Object

org.pac4j.core.util.InitializableObject

org.pac4j.core.client.BaseClient

org.pac4j.core.client.IndirectClient

org.pac4j.saml.client.SAML2Client

All Implemented Interfaces:

org.pac4j.core.client.Client

public class SAML2Client
extends org.pac4j.core.client.IndirectClient

This class is the client to authenticate and logout users with a SAML2 Identity Provider.

Since:

1.5.0

Author:

Michael Remond, Misagh Moayyed, Ruochao Zheng, Jerome Leleu

Field Summary

Fields

Modifier and Type	Field	Description
protected SAML2ResponseValidator	authnResponseValidator
protected SAML2Configuration	configuration
protected SAMLContextProvider	contextProvider
protected org.opensaml.saml.saml2.encryption.Decrypter	decrypter
protected SAML2MetadataResolver	identityProviderMetadataResolver
protected SAML2LogoutValidator	logoutValidator
protected ReplayCacheProvider	replayCache
protected SAML2MetadataResolver	serviceProviderMetadataResolver
protected SignatureSigningParametersProvider	signatureSigningParametersProvider
protected SAML2SignatureTrustEngineProvider	signatureTrustEngineProvider
protected SOAPPipelineProvider	soapPipelineProvider
protected org.pac4j.core.util.generator.ValueGenerator	stateGenerator

Fields inherited from class org.pac4j.core.client.IndirectClient

ATTEMPTED_AUTHENTICATION_SUFFIX, callbackUrl, callbackUrlResolver, urlResolver

Fields inherited from class org.pac4j.core.client.BaseClient

logger, saveProfileInSession

Constructor Summary

Constructors

Constructor	Description
SAML2Client()
SAML2Client(SAML2Configuration configuration)

Method Summary

Modifier and Type	Method	Description
void	destroy()
final String	getIdentityProviderResolvedEntityId()
SAML2LogoutRequestMessageSender	getLogoutRequestMessageSender()
final String	getServiceProviderResolvedEntityId()
SAML2WebSSOMessageSender	getSSOMessageSender()
protected void	initDecrypter()
protected void	initIdentityProviderMetadataResolver()
protected void	initSAMLContextProvider()
protected void	initSAMLLogoutResponseValidator()
protected void	initSAMLReplayCache()
protected void	initSAMLResponseValidator()
protected void	initServiceProviderMetadataResolver()
protected void	initSignatureSigningParametersProvider()
protected void	initSignatureTrustEngineProvider()
protected void	initSOAPPipelineProvider()
protected void	internalInit(boolean forceReinit)
void	notifySessionRenewal(org.pac4j.core.context.CallContext ctx, String oldSessionId)

Methods inherited from class org.pac4j.core.client.IndirectClient

afterInternalInit, beforeInternalInit, checkCredentials, computeFinalCallbackUrl, getAjaxRequestResolver, getCallbackUrl, getCallbackUrlResolver, getCodeVerifierSessionAttributeName, getLogoutAction, getLogoutActionBuilder, getLogoutProcessor, getNonceSessionAttributeName, getRedirectionAction, getRedirectionActionBuilder, getStateSessionAttributeName, getUrlResolver, isCheckAuthenticationAttempt, newDefaultCallbackUrlResolver, processLogout, setAjaxRequestResolver, setCallbackUrl, setCallbackUrlResolver, setCheckAuthenticationAttempt, setLogoutActionBuilder, setLogoutActionBuilderIfUndefined, setLogoutProcessor, setLogoutProcessorIfUndefined, setRedirectionActionBuilder, setRedirectionActionBuilderIfUndefined, setUrlResolver, toString

Methods inherited from class org.pac4j.core.client.BaseClient

addAuthorizationGenerator, addAuthorizationGenerators, getAuthenticator, getAuthorizationGenerators, getCredentials, getCredentialsExtractor, getCustomProperties, getLogger, getName, getProfileCreator, getProfileFactoryWhenNotAuthenticated, getSaveProfileInSession, getSaveProfileInSession, getUserProfile, internalValidateCredentials, isMultiProfile, isMultiProfile, renewUserProfile, setAuthenticator, setAuthenticatorIfUndefined, setAuthorizationGenerator, setAuthorizationGenerators, setAuthorizationGenerators, setCredentialsExtractor, setCredentialsExtractorIfUndefined, setCustomProperties, setMultiProfile, setName, setProfileCreator, setProfileCreatorIfUndefined, setProfileFactoryWhenNotAuthenticated, setSaveProfileInSession, validateCredentials

Methods inherited from class org.pac4j.core.util.InitializableObject

getInitialized, getLastAttempt, getMaxAttempts, getMinTimeIntervalBetweenAttemptsInMilliseconds, getNbAttempts, init, init, isInitialized, reinit, setMaxAttempts, setMinTimeIntervalBetweenAttemptsInMilliseconds, shouldInitialize

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

contextProvider

protected SAMLContextProvider contextProvider

signatureSigningParametersProvider

protected SignatureSigningParametersProvider signatureSigningParametersProvider

authnResponseValidator

protected SAML2ResponseValidator authnResponseValidator

logoutValidator

protected SAML2LogoutValidator logoutValidator

signatureTrustEngineProvider

protected SAML2SignatureTrustEngineProvider signatureTrustEngineProvider

identityProviderMetadataResolver

protected SAML2MetadataResolver identityProviderMetadataResolver

serviceProviderMetadataResolver

protected SAML2MetadataResolver serviceProviderMetadataResolver

decrypter

protected org.opensaml.saml.saml2.encryption.Decrypter decrypter

configuration

protected SAML2Configuration configuration

stateGenerator

protected org.pac4j.core.util.generator.ValueGenerator stateGenerator

replayCache

protected ReplayCacheProvider replayCache

soapPipelineProvider

protected SOAPPipelineProvider soapPipelineProvider

Constructor Details

SAML2Client

public SAML2Client()

SAML2Client

public SAML2Client(SAML2Configuration configuration)

Method Details

internalInit

protected void internalInit(boolean forceReinit)

Specified by:

internalInit in class org.pac4j.core.util.InitializableObject

initSOAPPipelineProvider

protected void initSOAPPipelineProvider()

getLogoutRequestMessageSender

public SAML2LogoutRequestMessageSender getLogoutRequestMessageSender()

getSSOMessageSender

public SAML2WebSSOMessageSender getSSOMessageSender()

initSAMLLogoutResponseValidator

protected void initSAMLLogoutResponseValidator()

initSAMLResponseValidator

protected void initSAMLResponseValidator()

initSignatureTrustEngineProvider

protected void initSignatureTrustEngineProvider()

initSAMLContextProvider

protected void initSAMLContextProvider()

initServiceProviderMetadataResolver

protected void initServiceProviderMetadataResolver()

initIdentityProviderMetadataResolver

protected void initIdentityProviderMetadataResolver()

initDecrypter

protected void initDecrypter()

initSignatureSigningParametersProvider

protected void initSignatureSigningParametersProvider()

initSAMLReplayCache

protected void initSAMLReplayCache()

destroy

public void destroy()

notifySessionRenewal

public void notifySessionRenewal(org.pac4j.core.context.CallContext ctx,
 String oldSessionId)

Overrides:

notifySessionRenewal in class org.pac4j.core.client.BaseClient

getIdentityProviderResolvedEntityId

public final String getIdentityProviderResolvedEntityId()

getServiceProviderResolvedEntityId

public final String getServiceProviderResolvedEntityId()