Package swiss.trustbroker.common.saml.util

Class SkinnySamlUtil

java.lang.Object

swiss.trustbroker.common.saml.util.SkinnySamlUtil

public class SkinnySamlUtil
extends Object

Skinny SAML messages handling requires rewriting the opensaml output DOM. It's recommended to use the cleaner opensaml representation but large SAML messages might be blocked on peers.

• The fun of SAML XML-Sec C14N: AttributeValue of type XSString or XSInteger causing signature validation to fail
• AD connect requirements: Use a SAML IdP for SSO Federation Metadata
• ADFS interop: Shibboleth IDP
• This manipulation is configured in XB using CanonicalizationMethod: http://www.w3.org/2001/10/xml-exc-c14n#WithSkinnyPatches
• Standards this is based on: XML Canonicalization

Limitations: UTF-8 character hex code encoding might be required as we remove the XML encoding header below, so AttributeValue should not contain any non-7-bit ASCII characters.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALGO_ID_C14N_EXCL_WITH_SKINNY_PATCHES

Method Summary

Modifier and Type	Method	Description
static String	discardXmlDocHeader(String messageXml)
static void	eliminateCertWhitespace(org.opensaml.xmlsec.signature.KeyInfo keyInfo)
static void	eliminateCertWhitespace(Element element)
static boolean	isPatchedResponse(org.opensaml.core.xml.XMLObject message)
static void	prepareSAMLObject(org.opensaml.xmlsec.signature.SignableXMLObject object, String c14nAlgo)
static void	prepareSAMLSignature(org.opensaml.xmlsec.signature.Signature signature, String c14nAlgo)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ALGO_ID_C14N_EXCL_WITH_SKINNY_PATCHES

public static final String ALGO_ID_C14N_EXCL_WITH_SKINNY_PATCHES

See Also:

• Constant Field Values

Method Details

prepareSAMLSignature

public static void prepareSAMLSignature(org.opensaml.xmlsec.signature.Signature signature,
 String c14nAlgo)

prepareSAMLObject

public static void prepareSAMLObject(org.opensaml.xmlsec.signature.SignableXMLObject object,
 String c14nAlgo)

eliminateCertWhitespace

public static void eliminateCertWhitespace(Element element)

eliminateCertWhitespace

public static void eliminateCertWhitespace(org.opensaml.xmlsec.signature.KeyInfo keyInfo)

isPatchedResponse

public static boolean isPatchedResponse(org.opensaml.core.xml.XMLObject message)

discardXmlDocHeader

public static String discardXmlDocHeader(String messageXml)