net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl

Class AbstractStaticPKIXParser

java.lang.Object

org.springframework.beans.factory.xml.AbstractBeanDefinitionParser

org.springframework.beans.factory.xml.AbstractSingleBeanDefinitionParser

net.shibboleth.idp.profile.spring.relyingparty.security.impl.AbstractWarningSecurityParser

net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl.AbstractTrustEngineParser

net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl.AbstractStaticPKIXParser

All Implemented Interfaces:

org.springframework.beans.factory.xml.BeanDefinitionParser

Direct Known Subclasses:

StaticPKIXSignatureParser, StaticPKIXX509CredentialParser

public abstract class AbstractStaticPKIXParser
extends AbstractTrustEngineParser

Base Parser for trust engines of type StaticPKIXKeySignature and StaticPKIXX509Credential.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	AbstractStaticPKIXParser.X509CredentialNameEvaluatorFactoryBean FactoryBean to do a deferred decision on whether to create a X509CredentialNameEvaluator.

Field Summary

Fields

Modifier and Type	Field and Description
static QName	TRUSTED_NAMES Trusted Names Information.
static QName	VALIDATION_INFO Validation Information.

Fields inherited from class org.springframework.beans.factory.xml.AbstractBeanDefinitionParser

ID_ATTRIBUTE, NAME_ATTRIBUTE

Constructor Summary

Constructors

Constructor and Description
AbstractStaticPKIXParser()

Method Summary

Methods

Modifier and Type	Method and Description
protected org.springframework.beans.factory.config.BeanDefinition	getPKIXTrustEvaluator(Element element, org.springframework.beans.factory.xml.ParserContext parserContext) Get the definition for the PKIXTrustEvaluator.
protected org.springframework.beans.factory.config.BeanDefinition	getPKIXValidationInformationResolver(Element element, org.springframework.beans.factory.xml.ParserContext parserContext) Get the definition for the PKIXValidationInformationResolver.
protected Object	getX509CredentialNameEvaluator(Element element, org.springframework.beans.factory.xml.ParserContext parserContext) Get the effective X509CredentialNameEvaluator to use.

Methods inherited from class net.shibboleth.idp.profile.spring.relyingparty.security.trustengine.impl.AbstractTrustEngineParser

doParse, resolveId

Methods inherited from class net.shibboleth.idp.profile.spring.relyingparty.security.impl.AbstractWarningSecurityParser

doParse

Methods inherited from class org.springframework.beans.factory.xml.AbstractSingleBeanDefinitionParser

getBeanClass, getBeanClassName, getParentName, parseInternal

Methods inherited from class org.springframework.beans.factory.xml.AbstractBeanDefinitionParser

parse, postProcessComponentDefinition, registerBeanDefinition, shouldFireEvents, shouldGenerateId, shouldGenerateIdAsFallback, shouldParseNameAsAliases

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

VALIDATION_INFO

public static final QName VALIDATION_INFO

Validation Information.

TRUSTED_NAMES

public static final QName TRUSTED_NAMES

Trusted Names Information.

Constructor Detail

AbstractStaticPKIXParser

public AbstractStaticPKIXParser()

Method Detail

getPKIXValidationInformationResolver

protected org.springframework.beans.factory.config.BeanDefinition getPKIXValidationInformationResolver(@Nonnull
                                                                                           Element element,
                                                                                           @Nonnull
                                                                                           org.springframework.beans.factory.xml.ParserContext parserContext)

Get the definition for the PKIXValidationInformationResolver. This is constructed from the Trusted names and the Validation Info.

Parameters:

element - what to parse

parserContext - the context to parse inside

Returns:

the definition

getPKIXTrustEvaluator

protected org.springframework.beans.factory.config.BeanDefinition getPKIXTrustEvaluator(@Nonnull
                                                                            Element element,
                                                                            @Nonnull
                                                                            org.springframework.beans.factory.xml.ParserContext parserContext)

Get the definition for the PKIXTrustEvaluator. This is purely a CertPathPKIXTrustEvaluator constructed with whatever ValidationOptions we provide.

Parameters:

element - what to parse

parserContext - the context to parse inside

Returns:

the definition

getX509CredentialNameEvaluator

protected Object getX509CredentialNameEvaluator(@Nonnull
                                    Element element,
                                    @Nonnull
                                    org.springframework.beans.factory.xml.ParserContext parserContext)

Get the effective X509CredentialNameEvaluator to use. Currently we return a literal value, but in the future a BeanDefinition could be returned if necessary if we support toggling the name evaluator settings, hence the Object return type.

Parameters:

element - what to parse

parserContext - the context to parse inside

Returns:

an X509CredentialNameEvaluator instance or a BeanDefinition. May be null.