Package swiss.trustbroker.saml.controller

Class AppController

java.lang.Object

swiss.trustbroker.saml.controller.AbstractSamlController

swiss.trustbroker.saml.controller.AppController

@Controller
@ConditionalOnBooleanProperty(value="trustbroker.config.saml.enabled",
                              matchIfMissing=true)
public class AppController
extends AbstractSamlController

This is the main controller for SAML POST and federation metadata related interaction.
Note that we offer the /trustbroker alternative for backward compat and to possibly get out of the ADFS's way for migration if running on same host name.

Field Summary

Fields inherited from class swiss.trustbroker.saml.controller.AbstractSamlController

samlValidator, trustBrokerProperties

Constructor Summary

Constructors

Constructor

Description

AppController(RelyingPartyService relyingPartyService, TrustBrokerProperties trustBrokerProperties, SamlValidator samlValidator, RelyingPartySetupService relyingPartySetupService, SsoService ssoService, ArtifactResolutionService artifactResolutionService, AuthenticationService authenticationService, RedirectOutputService redirectOutputService, List<swiss.trustbroker.api.saml.service.OutputService> outputServices)

Method Summary

Modifier and Type	Method	Description
String	handleIncomingGetMessages(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)	Web traffic dispatcher handling SAML Redirect and UI interaction.
String	handleIncomingPostMessages(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)	Web traffic dispatcher handling SAML POST and UI interaction.
String	handleIncomingSoapMessages(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)	Web traffic dispatcher handling SAML SOAP without UI interaction.
void	resolveArtifact(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)

Methods inherited from class swiss.trustbroker.saml.controller.AbstractSamlController

decodeSamlMessage, handleUnsupportedMessage, validateSamlIssuer, validateSamlMessage, validateSamlSchema

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AppController

@Autowired
public AppController(RelyingPartyService relyingPartyService,
 TrustBrokerProperties trustBrokerProperties,
 SamlValidator samlValidator,
 RelyingPartySetupService relyingPartySetupService,
 SsoService ssoService,
 ArtifactResolutionService artifactResolutionService,
 AuthenticationService authenticationService,
 RedirectOutputService redirectOutputService,
 List<swiss.trustbroker.api.saml.service.OutputService> outputServices)

Method Details

handleIncomingPostMessages

@PostMapping(path={"/api/v1/saml","/adfs/ls","/adfs/ls/","/trustbroker/adfs/ls"},
             consumes="application/x-www-form-urlencoded")
public String handleIncomingPostMessages(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

Web traffic dispatcher handling SAML POST and UI interaction.

Parameters:

request - is the web input according to servlet spec

response - is the web response according to servlet spec

Returns:

redirect routing or null when no redirect is needed.

handleIncomingGetMessages

@GetMapping(path={"/api/v1/saml","/adfs/ls","/adfs/ls/","/trustbroker/adfs/ls"})
public String handleIncomingGetMessages(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

Web traffic dispatcher handling SAML Redirect and UI interaction.

Parameters:

request - is the web input according to servlet spec

response - is the web response according to servlet spec

Returns:

redirect routing or null when no redirect is needed.

handleIncomingSoapMessages

@PostMapping(path={"/api/v1/saml","/adfs/ls","/adfs/ls/","/trustbroker/adfs/ls"},
             consumes={"text/xml","application/soap+xml"})
public String handleIncomingSoapMessages(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

Web traffic dispatcher handling SAML SOAP without UI interaction. Only LogoutRequest is supported at the moment.

Parameters:

request - is the web input according to servlet spec

response - is the web response according to servlet spec

Returns:

redirect routing or null when no redirect is needed.

resolveArtifact

@PostMapping(path="/api/v1/saml/arp")
public void resolveArtifact(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)