org.codice.ddf.security.validator.x509

Class X509PathTokenValidator

java.lang.Object

org.codice.ddf.security.validator.x509.X509PathTokenValidator

All Implemented Interfaces:

org.apache.cxf.sts.token.validator.TokenValidator

public class X509PathTokenValidator
extends Object
implements org.apache.cxf.sts.token.validator.TokenValidator

X509PKIPathv1 validator for the STS. This validator is responsible for validating X509 tokens that are directly presented to the STS without going through any SSO Filters. It will validate the certificate chain instead of the specific certificate.

Field Summary

Fields

Modifier and Type	Field and Description
static String	BASE64_ENCODING
protected org.apache.wss4j.common.crypto.Merlin	merlin
static String	X509_PKI_PATH

Constructor Summary

Constructors

Constructor and Description
X509PathTokenValidator()

Method Summary

Modifier and Type	Method and Description
boolean	canHandleToken(org.apache.cxf.sts.request.ReceivedToken validateTarget) Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.
boolean	canHandleToken(org.apache.cxf.sts.request.ReceivedToken validateTarget, String realm) Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.
String	getSignaturePropertiesPath()
void	init() Initialize Merlin crypto object.
void	setSignaturePropertiesPath(String signaturePropertiesPath)
void	setSubjectConstraints(List<String> subjectConstraints) Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate
void	setValidator(org.apache.wss4j.dom.validate.Validator validator) Set the WSS4J Validator instance to use to validate the token.
org.apache.cxf.sts.token.validator.TokenValidatorResponse	validateToken(org.apache.cxf.sts.token.validator.TokenValidatorParameters tokenParameters) Validate a Token using the given TokenValidatorParameters.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_PKI_PATH

public static final String X509_PKI_PATH

See Also:

Constant Field Values

BASE64_ENCODING

public static final String BASE64_ENCODING

See Also:

Constant Field Values

merlin

protected org.apache.wss4j.common.crypto.Merlin merlin

Constructor Detail

X509PathTokenValidator

public X509PathTokenValidator()

Method Detail

init

public void init()

Initialize Merlin crypto object.

setSubjectConstraints

public void setSubjectConstraints(List<String> subjectConstraints)

Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate

setValidator

public void setValidator(org.apache.wss4j.dom.validate.Validator validator)

Set the WSS4J Validator instance to use to validate the token.

Parameters:

validator - the WSS4J Validator instance to use to validate the token

canHandleToken

public boolean canHandleToken(org.apache.cxf.sts.request.ReceivedToken validateTarget)

Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.

Specified by:

canHandleToken in interface org.apache.cxf.sts.token.validator.TokenValidator

Parameters:

validateTarget -

Returns:

true if the token can be handled

canHandleToken

public boolean canHandleToken(org.apache.cxf.sts.request.ReceivedToken validateTarget,
                              String realm)

Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument. The realm is ignored in this token Validator.

Specified by:

canHandleToken in interface org.apache.cxf.sts.token.validator.TokenValidator

Parameters:

validateTarget -

realm -

Returns:

true if the token can be handled

validateToken

public org.apache.cxf.sts.token.validator.TokenValidatorResponse validateToken(org.apache.cxf.sts.token.validator.TokenValidatorParameters tokenParameters)

Validate a Token using the given TokenValidatorParameters.

Specified by:

validateToken in interface org.apache.cxf.sts.token.validator.TokenValidator

Parameters:

tokenParameters -

Returns:

TokenValidatorResponse

getSignaturePropertiesPath

public String getSignaturePropertiesPath()

setSignaturePropertiesPath

public void setSignaturePropertiesPath(String signaturePropertiesPath)