Package swiss.trustbroker.saml.service

Class RelyingPartyService

java.lang.Object

swiss.trustbroker.saml.service.RelyingPartyService

@Service
public class RelyingPartyService
extends Object

Constructor Summary

Constructors

Constructor

Description

RelyingPartyService(StateCacheService stateCacheService, TrustBrokerProperties trustBrokerProperties, RelyingPartySetupService relyingPartySetupService, List<swiss.trustbroker.api.idm.service.IdmQueryService> idmQueryServices, List<swiss.trustbroker.api.idm.service.IdmProvisioningService> idmProvisioningServices, ProfileSelectionServiceFactory profileSelectionServiceFactory, SsoService ssoService, AuditService auditService, ScriptService scriptService, ApiSupport apiSupport, swiss.trustbroker.api.accessrequest.service.AccessRequestService accessRequestService, ResponseFactory responseFactory, UnknownUserPolicyService unknownUserPolicyService, QoaMappingService qoaService, ClaimsMapperService claimsMapperService, JwtClaimsService jwtClaimsService)

Method Summary

Modifier and Type	Method	Description
Map<Definition,List<String>>	extractAndValidateCpAttrs(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet, Map<String,Set<String>> requestParams, ClaimsParty claimsParty)
void	fetchIdmData(CpResponse cpResponse, StateData stateData, String clientName, boolean audited)
void	filterPropertiesSelection(CpResponse cpResponse, String requestIssuer, String requestReferer)
void	filterPropertiesSelection(CpResponse cpResponse, AttributesSelection propertiesSelection, AttributesSelection claimsSelection)
String	findRelyingPartyIdForTrustbrokerSamlObject(org.opensaml.saml.common.SAMLObject samlObject)
static String	getDataEncryptionAlgorithm(Encryption encryption)
static String	getKeyEncryptionAlgorithm(Encryption encryption)
Map<String,Object>	getTokenExchangeUserData(Map<String,Object> tokenClaims, Map<Definition,List<String>> cpOriginalAttributes, RelyingParty relyingParty, ClaimsParty claimsParty, OidcClient rpOidcClient, Set<String> authorizedScopes, List<String> subjectAcrs)
void	handleLogoutRequest(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, org.opensaml.saml.saml2.core.LogoutRequest logoutRequest, String requestRelayState, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, swiss.trustbroker.common.saml.dto.SignatureContext signatureContext)
String	performAccessRequestWithDataRefreshIfRequired(jakarta.servlet.http.HttpServletRequest httpServletRequest, RelyingParty relyingParty, ClaimsParty claimsParty, StateData idpStateData, StateData stateDataByAuthnReq)
void	reloadIdmData(RelyingParty relyingParty, StateData idpStateData)
String	sendAbortedSamlResponseToRp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, StateData stateData, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse, ResponseStatus responseStatus, swiss.trustbroker.common.saml.dto.SamlBinding samlBinding)
String	sendAuthnResponseToRpFromState(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse, StateData ssoStateData, StateData stateDataByAuthnReq)
String	sendFailedSamlResponseToRp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, ResponseData<org.opensaml.saml.saml2.core.Response> responseData, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse, CpResponse cpResponse)
String	sendResponseToRpFromSessionState(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, RelyingParty relyingParty, StateData idpStateData, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse)
String	sendResponseWithSamlResponseFromCp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, ResponseData<org.opensaml.saml.saml2.core.Response> responseData, CpResponse cpResponse, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse)
String	sendResponseWithSamlResponseFromCp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, ResponseData<org.opensaml.saml.saml2.core.Response> responseData, StateData cpStateData, CpResponse cpResponse, jakarta.servlet.http.HttpServletRequest httpServletRequest, jakarta.servlet.http.HttpServletResponse httpServletResponse)
String	sendResponseWithSelectedProfile(List<swiss.trustbroker.api.saml.service.OutputService> outputServices, ProfileRequest profileRequest, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	setProperties(CpResponse cpResponse)
void	validateRpQoaRequirement(StateData cpStateData, CpResponse cpResponse)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

RelyingPartyService

public RelyingPartyService(StateCacheService stateCacheService,
 TrustBrokerProperties trustBrokerProperties,
 RelyingPartySetupService relyingPartySetupService,
 List<swiss.trustbroker.api.idm.service.IdmQueryService> idmQueryServices,
 List<swiss.trustbroker.api.idm.service.IdmProvisioningService> idmProvisioningServices,
 ProfileSelectionServiceFactory profileSelectionServiceFactory,
 SsoService ssoService,
 AuditService auditService,
 ScriptService scriptService,
 ApiSupport apiSupport,
 swiss.trustbroker.api.accessrequest.service.AccessRequestService accessRequestService,
 ResponseFactory responseFactory,
 UnknownUserPolicyService unknownUserPolicyService,
 QoaMappingService qoaService,
 ClaimsMapperService claimsMapperService,
 JwtClaimsService jwtClaimsService)

Method Details

setProperties

public void setProperties(CpResponse cpResponse)

sendResponseWithSamlResponseFromCp

@Transactional
public String sendResponseWithSamlResponseFromCp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 ResponseData<org.opensaml.saml.saml2.core.Response> responseData,
 CpResponse cpResponse,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse)

sendResponseWithSamlResponseFromCp

public String sendResponseWithSamlResponseFromCp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 ResponseData<org.opensaml.saml.saml2.core.Response> responseData,
 StateData cpStateData,
 CpResponse cpResponse,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse)

validateRpQoaRequirement

public void validateRpQoaRequirement(StateData cpStateData,
 CpResponse cpResponse)

performAccessRequestWithDataRefreshIfRequired

public String performAccessRequestWithDataRefreshIfRequired(jakarta.servlet.http.HttpServletRequest httpServletRequest,
 RelyingParty relyingParty,
 ClaimsParty claimsParty,
 StateData idpStateData,
 StateData stateDataByAuthnReq)

filterPropertiesSelection

public void filterPropertiesSelection(CpResponse cpResponse,
 String requestIssuer,
 String requestReferer)

filterPropertiesSelection

public void filterPropertiesSelection(CpResponse cpResponse,
 AttributesSelection propertiesSelection,
 AttributesSelection claimsSelection)

sendFailedSamlResponseToRp

public String sendFailedSamlResponseToRp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 ResponseData<org.opensaml.saml.saml2.core.Response> responseData,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse,
 CpResponse cpResponse)

sendAbortedSamlResponseToRp

public String sendAbortedSamlResponseToRp(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 StateData stateData,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse,
 ResponseStatus responseStatus,
 swiss.trustbroker.common.saml.dto.SamlBinding samlBinding)

sendAuthnResponseToRpFromState

public String sendAuthnResponseToRpFromState(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse,
 StateData ssoStateData,
 StateData stateDataByAuthnReq)

fetchIdmData

public void fetchIdmData(CpResponse cpResponse,
 StateData stateData,
 String clientName,
 boolean audited)

getDataEncryptionAlgorithm

public static String getDataEncryptionAlgorithm(Encryption encryption)

getKeyEncryptionAlgorithm

public static String getKeyEncryptionAlgorithm(Encryption encryption)

handleLogoutRequest

public void handleLogoutRequest(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 org.opensaml.saml.saml2.core.LogoutRequest logoutRequest,
 String requestRelayState,
 jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 swiss.trustbroker.common.saml.dto.SignatureContext signatureContext)

sendResponseWithSelectedProfile

@Transactional
public String sendResponseWithSelectedProfile(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 ProfileRequest profileRequest,
 jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

sendResponseToRpFromSessionState

public String sendResponseToRpFromSessionState(List<swiss.trustbroker.api.saml.service.OutputService> outputServices,
 RelyingParty relyingParty,
 StateData idpStateData,
 jakarta.servlet.http.HttpServletRequest httpServletRequest,
 jakarta.servlet.http.HttpServletResponse httpServletResponse)

reloadIdmData

public void reloadIdmData(RelyingParty relyingParty,
 StateData idpStateData)

findRelyingPartyIdForTrustbrokerSamlObject

public String findRelyingPartyIdForTrustbrokerSamlObject(org.opensaml.saml.common.SAMLObject samlObject)

getTokenExchangeUserData

public Map<String,Object> getTokenExchangeUserData(Map<String,Object> tokenClaims,
 Map<Definition,List<String>> cpOriginalAttributes,
 RelyingParty relyingParty,
 ClaimsParty claimsParty,
 OidcClient rpOidcClient,
 Set<String> authorizedScopes,
 List<String> subjectAcrs)

extractAndValidateCpAttrs

public Map<Definition,List<String>> extractAndValidateCpAttrs(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet,
 Map<String,Set<String>> requestParams,
 ClaimsParty claimsParty)