From fc8aab29eb278a1489a75847efa38ea72b941c79 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <thomas.lenz@egiz.gv.at>
Date: Wed, 5 Feb 2020 11:03:59 +0100
Subject: Extract interface from AbstractCredentialProvider.java Add new
 interface IPvpAddableChainingMetadataProvider.java and implement it in
 AbstractChainingMetadataProvider.java Fix possible nullPointer in
 Saml2Utils.java

---
 .../pvp2/api/utils/IPvp2CredentialProvider.java    | 55 ++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 eaaf_modules/eaaf_module_pvp2_core/src/main/java/at/gv/egiz/eaaf/modules/pvp2/api/utils/IPvp2CredentialProvider.java

(limited to 'eaaf_modules/eaaf_module_pvp2_core/src/main/java/at/gv/egiz/eaaf/modules/pvp2/api/utils/IPvp2CredentialProvider.java')

diff --git a/eaaf_modules/eaaf_module_pvp2_core/src/main/java/at/gv/egiz/eaaf/modules/pvp2/api/utils/IPvp2CredentialProvider.java b/eaaf_modules/eaaf_module_pvp2_core/src/main/java/at/gv/egiz/eaaf/modules/pvp2/api/utils/IPvp2CredentialProvider.java
new file mode 100644
index 00000000..a564efb2
--- /dev/null
+++ b/eaaf_modules/eaaf_module_pvp2_core/src/main/java/at/gv/egiz/eaaf/modules/pvp2/api/utils/IPvp2CredentialProvider.java
@@ -0,0 +1,55 @@
+package at.gv.egiz.eaaf.modules.pvp2.api.utils;
+
+import java.security.cert.X509Certificate;
+import java.util.List;
+
+import javax.annotation.Nonnull;
+import javax.annotation.Nullable;
+
+import at.gv.egiz.eaaf.modules.pvp2.api.credential.EaafX509Credential;
+import at.gv.egiz.eaaf.modules.pvp2.exception.CredentialsNotAvailableException;
+
+public interface IPvp2CredentialProvider {
+
+  /**
+   * Get Credentials to sign metadata.
+   *
+   * @return Credentials
+   * @throws CredentialsNotAvailableException In case of a credential error
+   */
+  @Nonnull
+  EaafX509Credential getMetaDataSigningCredential() throws CredentialsNotAvailableException;
+
+  /**
+   * Get Credentials to sign SAML2 messages, like AuthnRequest, Response,
+   * Assertions as some examples.
+   *
+   * @return Credentials
+   * @throws CredentialsNotAvailableException In case of a credential error
+   */
+  @Nonnull
+  EaafX509Credential getMessageSigningCredential() throws CredentialsNotAvailableException;
+
+  /**
+   * Get Credentials to encrypt messages, like Assertion as example.
+   *
+   * @return Credentials
+   * @throws CredentialsNotAvailableException In case of a credential error
+   */
+  @Nullable
+  EaafX509Credential getMessageEncryptionCredential()
+      throws CredentialsNotAvailableException;
+
+  /**
+   * Get a List of trusted {@link X509Certificate} that are available in this
+   * KeyStore.
+   *
+   * @return List of trusted {@link X509Certificate}, or an emptry {@link List} if
+   *         no certificates are available
+   * @throws CredentialsNotAvailableException In case of a KeyStore error
+   */
+  @Nonnull
+  List<X509Certificate> getTrustedCertificates()
+      throws CredentialsNotAvailableException;
+
+}
\ No newline at end of file
-- 
cgit v1.2.3