Package org.cilogon.oauth2.servlet.claims

Class SAMLAttributeClaimSource

java.lang.Object

org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

org.cilogon.oauth2.servlet.claims.SAMLAttributeClaimSource

All Implemented Interfaces:

Serializable, org.oa4mp.delegation.server.server.claims.ClaimSource

Direct Known Subclasses:

SAMLAttrbuteClaimSource

public class SAMLAttributeClaimSource
extends org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

This will read SAML attributes that are sent in the header from the IDP then stored in an attribute that is sent. At the right time, this attribute is read and parsed into information about the user and returned as a set of claims. NOTE that this is created by introspection (hence the no arg constructor) and hence never seems to be used in the code base. Several clients, however, require it.

Created by Jeff Gaynor
on 7/10/18 at 8:15 AM

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static String	SHIBBOLETH_LIST_DELIMITER
static String	SHIBBOLETH_MEMBER_OF_KEY

Fields inherited from class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

groupHandler

Constructor Summary

Constructors

Constructor	Description
SAMLAttributeClaimSource()
SAMLAttributeClaimSource(org.oa4mp.server.loader.oauth2.OA2SE oa2SE)
SAMLAttributeClaimSource(org.qdl_lang.variables.QDLStem stem)

Method Summary

Modifier and Type	Method	Description
boolean	isRunOnlyAtAuthorization()
static void	main(String[] arg)
protected net.sf.json.JSONObject	oldProcess(net.sf.json.JSONObject claims, org.oa4mp.delegation.server.ServiceTransaction transaction)	As of next release (4.1) we should be getting SAML attributes that have been parsed into JSON, so we do not need to do the parsing ourselves.
net.sf.json.JSONObject	process(net.sf.json.JSONObject claims, javax.servlet.http.HttpServletRequest request, org.oa4mp.delegation.server.ServiceTransaction transaction)
net.sf.json.JSONObject	process(net.sf.json.JSONObject claims, org.oa4mp.delegation.server.ServiceTransaction transaction)
protected static void	test1()
protected static void	test2()
org.qdl_lang.variables.QDLStem	toQDL()
String	toString()

Methods inherited from class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

addToStem, fromQDL, getClaims, getConfiguration, getGroupHandler, getOa2SE, getOmitList, getScopes, hasConfiguration, isEnabled, realProcessing, setConfiguration, setGroupHandler, setOa2SE, setOmitList, setScopes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

SHIBBOLETH_MEMBER_OF_KEY

public static final String SHIBBOLETH_MEMBER_OF_KEY

See Also:

Constant Field Values

SHIBBOLETH_LIST_DELIMITER

public static String SHIBBOLETH_LIST_DELIMITER

Constructor Detail

SAMLAttributeClaimSource

public SAMLAttributeClaimSource(org.oa4mp.server.loader.oauth2.OA2SE oa2SE)

SAMLAttributeClaimSource

public SAMLAttributeClaimSource()

SAMLAttributeClaimSource

public SAMLAttributeClaimSource(org.qdl_lang.variables.QDLStem stem)

Method Detail

process

public net.sf.json.JSONObject process(net.sf.json.JSONObject claims,
                                      org.oa4mp.delegation.server.ServiceTransaction transaction)
                               throws org.oa4mp.delegation.server.server.UnsupportedScopeException

Specified by:

process in interface org.oa4mp.delegation.server.server.claims.ClaimSource

Overrides:

process in class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

Throws:

org.oa4mp.delegation.server.server.UnsupportedScopeException

oldProcess

protected net.sf.json.JSONObject oldProcess(net.sf.json.JSONObject claims,
                                            org.oa4mp.delegation.server.ServiceTransaction transaction)
                                     throws org.oa4mp.delegation.server.server.UnsupportedScopeException

As of next release (4.1) we should be getting SAML attributes that have been parsed into JSON, so we do not need to do the parsing ourselves. Note that these attributes have been sent over out of band and stashed in a User attribute named User.getAttr_json(), since the assumption is that this servlet is access through Apache (or some other web server) and therefore cannot have direct access to the secure headers.

Parameters:

claims -

transaction -

Returns:

Throws:

org.oa4mp.delegation.server.server.UnsupportedScopeException

process

public net.sf.json.JSONObject process(net.sf.json.JSONObject claims,
                                      javax.servlet.http.HttpServletRequest request,
                                      org.oa4mp.delegation.server.ServiceTransaction transaction)
                               throws org.oa4mp.delegation.server.server.UnsupportedScopeException

Specified by:

process in interface org.oa4mp.delegation.server.server.claims.ClaimSource

Overrides:

process in class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

Throws:

org.oa4mp.delegation.server.server.UnsupportedScopeException

isRunOnlyAtAuthorization

public boolean isRunOnlyAtAuthorization()

Specified by:

isRunOnlyAtAuthorization in interface org.oa4mp.delegation.server.server.claims.ClaimSource

Overrides:

isRunOnlyAtAuthorization in class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl

toString

public String toString()

Overrides:

toString in class Object

main

public static void main(String[] arg)

test2

protected static void test2()
                     throws Exception

Throws:

Exception

test1

protected static void test1()
                     throws Exception

Throws:

Exception

toQDL

public org.qdl_lang.variables.QDLStem toQDL()

Specified by:

toQDL in interface org.oa4mp.delegation.server.server.claims.ClaimSource

Overrides:

toQDL in class org.oa4mp.server.loader.oauth2.claims.BasicClaimsSourceImpl