org.codice.ddf.security.delegation

Class BSTDelegationHandler

java.lang.Object

org.codice.ddf.security.delegation.BSTDelegationHandler

All Implemented Interfaces:

org.apache.cxf.sts.token.delegation.TokenDelegationHandler

public class BSTDelegationHandler
extends Object
implements org.apache.cxf.sts.token.delegation.TokenDelegationHandler

The SAML TokenDelegationHandler implementation. It disallows ActAs or OnBehalfOf for all cases apart from the case of a Bearer SAML Token. In addition, the AppliesTo address (if supplied) must match an AudienceRestriction address (if in token), if the "checkAudienceRestriction" property is set to "true".

Field Summary

Fields

Modifier and Type	Field and Description
static String	BASE64_ENCODING
static String	BST_VALUE_TYPE
static String	X509_PKI_PATH
static String	X509_V3

Constructor Summary

Constructors

Constructor and Description
BSTDelegationHandler()

Method Summary

Modifier and Type	Method and Description
boolean	canHandleToken(org.apache.cxf.sts.request.ReceivedToken delegateTarget)
org.apache.cxf.sts.token.delegation.TokenDelegationResponse	isDelegationAllowed(org.apache.cxf.sts.token.delegation.TokenDelegationParameters tokenParameters)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_PKI_PATH

public static final String X509_PKI_PATH

See Also:

Constant Field Values

X509_V3

public static final String X509_V3

See Also:

Constant Field Values

BASE64_ENCODING

public static final String BASE64_ENCODING

See Also:

Constant Field Values

BST_VALUE_TYPE

public static final String BST_VALUE_TYPE

See Also:

Constant Field Values

Constructor Detail

BSTDelegationHandler

public BSTDelegationHandler()

Method Detail

canHandleToken

public boolean canHandleToken(org.apache.cxf.sts.request.ReceivedToken delegateTarget)

Specified by:

canHandleToken in interface org.apache.cxf.sts.token.delegation.TokenDelegationHandler

isDelegationAllowed

public org.apache.cxf.sts.token.delegation.TokenDelegationResponse isDelegationAllowed(org.apache.cxf.sts.token.delegation.TokenDelegationParameters tokenParameters)

Specified by:

isDelegationAllowed in interface org.apache.cxf.sts.token.delegation.TokenDelegationHandler