All Classes and Interfaces
Class
Description
Filter that responds with a 404 for URLs that we do not want to expose the Angular UI
This class describes the configuration of the AccessRequest for an RP.
Access request configuration.
Authentication Context Class (ACClass).
Account Source configuration.
Whitelist of Assertion consumer service URLs / OIDC redirect URLs.
Admin action parameters - internal DTO.
Allow private network access.
Announcement configuration.
Controller for announcement services.
This class describes the configuration of announcements for an RP.
Build application and API URLs in a consistent way with properly encoded parameters.
This is the main controller for SAML POST and federation metadata related interaction.
Initialize everything based on the spring container's initialization procedure.
Initialize everything before starting spring container, especially libraries using statics.
Configuration for SAMl Artifact Binding.
Modes for SAML Artifact Binding.
SAML artifact resolution protocol configuration.
Minimal implementation with only methods used by OpenSAML StorageServiceSAMLArtifactMap
Validate (parts of) SAML messages applying our XTB specific business rules to increase security.
Configuration of attributes.
Configuration of individual attributes.
Selection of claims returned by CP/IDM.
OIDC client audiences.
Auditing configuration.
Represents the data that we can base reports on.
Build log entry for audit log in expected format:
key=value[,key=value ...].Filtering of audit data.
Interface for audit logging.
Maps DTOs for auditing.
Holds information on an OIDC Authorization Code Flow Request for auditing.
OIDC client for Authorization Code Flow.
OIDC authorization grant types.
OIDC authorization grant types.
This class describes the configuration of an application to be authorized by AccessRequest.
Describes Authorized Applications for AccessRequest.
Specifies optional banner displayed on top of the screen.
Base class of loggers that perrform the actual logging.
Springify OpTrace filter and add a UUID and client IP in a thread-local so:
- GlobalException catcher can send UUID to the user to find the logs
- Logback via the logging.pattern.console: ...
The certificate configurations contain file paths relative to
Utility function related to keys and certificates with dependencies to this subproject.
Mapping of OIDC/SAML claims.
Service for mapping claims (attributes, user details, properties).
This class describes the configuration of a claims provider (CP).
Configuration for CP mapped to an RP.
Defines all known claims providers and their display on the HRD screen in a XML file config.
List of CPs mappings for an RP.
Defines claims parties (CPs).
OIDC client authentication methods.
OIDC client authentication methods.
Controller for the version and UI config APIs.
Status details of a single XML configuration.
Status flag of the XML configurations.
Status of the XML configurations including details.
List of constant attributes as declared.
Calculating unsafe-hashes:
echo -n 'myscript()' | openssl sha256 -binary | openssl base64
Risks: A thus whitelisted script could be injected in other parts of the page by an attacker.Cookie configuration.
HTTP CORS configurations.
Abstraction for shared features of RP and CP.
This class implement the processing context which is the core of the XTB processing model according.
Copied from spring-security-oauth2-authorization-server:
org.springframework.security.oauth2.server.authorization.authentication.DPoPProofVerifier
That class is final and the method package private.
DTO field needs to be logged with a custom implementation
Copied from spring-security-oauth2-authorization-server:
org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthenticationProviderUtils
That class is final and the method package private.
Utility methods for the OAuth 2.0 Protocol Endpoints.
Token exchange authentication converter.Copied from spring-security-oauth2-authorization-server:
org.springframework.security.oauth2.server.authorization.web.authentication.OAuth2TokenExchangeAuthenticationConverter.
Token exchange handler endpoint.
Partially copied from spring-security-oauth2-authorization-server:
org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthorizationCodeRequestAuthenticationValidator
Javadoc of original class:
A
Consumer providing access to the OAuth2AuthorizationCodeRequestAuthenticationContext
containing an OAuth2AuthorizationCodeRequestAuthenticationToken
and is the default authentication validator
used for validating specific OAuth 2.0 Authorization Request parameters used in the Authorization Code Grant.No-op SessionRegistry - sessions are handled in the DB.
Used to check tokens for validity and content on the OIDC provider
org.springframework.security.oauth2.server.authorization.authentication.OAuth2TokenIntrospectionAuthenticationProvider
NOTE We copied this class including their to-do remarks because this one does OIDC and in the XTB set-up the default one does
SAML2 introspection.
Revocation handler endpoint.
Annotation with default value for a field.
Regular audit logger that audits all details.
Handle default values defined via
@Default annotation.Attribute definition.
Because jackson cannot properly deal with complex map keys, custom deserialization support on maps are necessary.
Because jackson cannot properly deal with complex map keys, custom serialization support on maps are necessary.
This class describes the configuration of the SAML encryption for an RP.
Configuration for encryption Key Info.
Configuration for encryption key placement.
Configuration enabling toggle.
SSO device fingerprint check.
Configuration for an individual error code.
Error flow control configuration.
HTTP Frame Options configuration.
Spring MVC exception handler towards REST and WEB clients.
Configurable GUI buttons
GUI feature configuration
GUI related configurations.
Home Name configuration.
HRD services separated from application namespace.
Log-able web input (where we do not expected any StringUtil.clean modified data) and other helpers.
Log-able web input (where we do not expected any StringUtil.clean modified data) and other helpers.
Configuration for optional IDM integration.
Specify a list of queries that are executed in the specified order.
Configures an IDM query to be executed.
Handles OIDC claims from a CP JWT token.
LDAP Identity Selection
Configuration for LDAP store sub-system.
This is the controller for metadata related interaction.
Service for Micrometer metrics.
Monitoring configuration.
Monitoring API
Handling of same attributes across queries.
Handling of multi-values.
Network configuration.
NO-OP fallback implementation of AccessRequestService, never requires any access request.
NO-OP fallback implementation of AnnouncementService, provides no announcements.
NO-OP fallback implementation of HrdService, returns unmodified data.
NO-OP fallback implementation of ProfileSelectionService, returns empty data.
OIDC client applications for an RP.
OIDC specific data for auditing.
Source for OIDC CP claims.
Sources of claims for OIDC CPs.
Service for validating claims from an OIDC CP.
OIDC client application configuration.
OIDC client side controller accepting responses from an OIDC CP.
Service for OIDC Encryption Keystore loading
Small parts copied from spring-security-oauth2-authorization-server:
org.springframework.security.oauth2.server.authorization.authentication.OAuth2AuthorizationCodeRequestAuthenticationValidator
Javadoc of original class:
An
AuthenticationProvider implementation for the OAuth 2.0 Authorization Request
used in the Authorization Code Grant.Provides HTTP clients configured for an OidcClient.
OIDC identity provider configuration.
OIDC IDP credential - internal model.
Service for OIDC metadata configuration fetching.
OIDC protocol configuration.
Security policy overrides for OIDC.
Transaction boundary filter.
Configuration read from OIDC metadata.
Implementation of
AuthenticationProvider for SAML authentications when
receiving a Response object containing an Assertion.A tuple containing an OpenSAML
Assertion and its associated authentication
token.A tuple containing an OpenSAML
Response and its associated authentication
token.A strategy for resolving a SAML 2.0 Authentication Request from the
HttpServletRequest using OpenSAML.An
AuthenticationConverter that generates a Saml2AuthenticationToken
appropriate for authenticated a SAML 2.0 Assertion against an
AuthenticationManager.CID (client identifying data) auditing configuration.
Audit logger for CID free logging.
A base config class that mau contain references relative to its file path.
Configures the profile selection.
Profile selection configuration.
Controller for profile selection services.
Mode for profile selection.
Java bean property utilities.
SAML/OIDC protocol endpoints.
This class describes the configuration of the provisioning for a CP.
Provisioning mode for a claims party.
Quality of Authentication (QoA) configuration.
Comparison of Qoa values.
Service for mapping and handling Qoa values from/to RP and CP.
Mostly internal helper for QoaMappingService.
Quality of Authentication (QoA) configuration.
Output redirect in a form suitable for a calling script (XMLHttpRequest/fetch).
This class describes the configuration of a relying party (RP).
Relying party configuration - internal model.
Defines relying parties (RPs).
OIDC client resources.
OIDC response modes.
Base class for CP and RP side status codes.
Class is used to implement the contract towards ScriptService on RP request processing side.
SAML configuration for CP/RP.
SAML namespace mapping.
SAML protocol configuration.
Performs mapping between Flow ID, SAML error codes, OIDC error codes, UI error codes.
Service for loading the XSD schemas.
OIDC scopes.
OIDC client scopes.
Groovy script hook configuration.
Groovy script hooks per RP/CP.
Service implements flexibility hooks for the XTB Processing Model.
Security token configuration.
Class controls various security checks on a global level.
This class allows configuring policies per CP/RP as opposed to SecurityChecks on a global level.
Wrap transactional Tomcat session loading and session around a servlet API filter chain.
Cryptographic setup of SAML signing as supported by Apache XML-security configuration.
Keystore configuration.
Keystore/truststore configuration.
Truststore configuration.
Operation mode for single (global) logout.
Combines static configuration from SloUrl with dynamic SLO notification information
Single logout (SLO) protocol.
Single logout (SLO) configurations for an RP.
Contains parameters required for rendering an SLO Logout response.
SessionRegistry that used to integrate Spring auth server OIDC session with XTB SSO Session.
XTB Single Sign On (SSO, SLO) configuration for an RP.
SSO feature configuration.
SSO services
SSO groups are defined per CP as the XTB Single Sign On (SSO, SLO) mechanism separates SSO logins per identity.
All SSO groups are configured in this list.
SSO session ID generation policy.
Checks access to the StateCache DB via a dummy query.
Configuration for DB state cache.
DB entity.
Policy for handling if the user returned by the CP is not found or not active in the IDM.
The SubjectName map allows to pick an attribute as a mapped subject nameId from the following sources in this order:
AttributesSelection
>UserDetailsSelection
PropertiesSelection
If the issuer is defined, the picking is done per CP.
Subject Name ID mappings.
Support configuration.
Technical user configuration for IDM.
Filter that sets the cookie with the UI theme for the Angular application, if missing.
Inspired by (but not copied from) hazelcast-tomcat-sessionmanager
Mode for Tomcat session.
Extension of Tomcat Rfc6265CookieProcessor to implement dynamic sameSite attributes.
The root of the XTB configuration.
Banner for HRD.
Reason for disabling an HRD UI object.
UI Objects for HRD: Tiles and banners.
Status for an XML config element that is validated and disabled if invalid.
Holder of the current version.
Controller for web resources consumed by the GUI.
Caching provider for web resources.
Log-able web input (where we do not expected any StringUtil.
WS-Fed protocol configuration.
WS-Trust configuration for RP.
Bindings for WS-Trust
WS-Trust protocol configuration.
Controller for the config API.
Service for checking the configuration status.
Handles XML config parsing via JAXB.