1 files changed, 269 insertions, 0 deletions
diff --git a/connector/src/main/java/at/asitplus/eidas/specific/connector/config/PvpMetadataConfiguration.java b/connector/src/main/java/at/asitplus/eidas/specific/connector/config/PvpMetadataConfiguration.java
new file mode 100644
index 00000000..f1828f87
--- /dev/null
+++ b/connector/src/main/java/at/asitplus/eidas/specific/connector/config/PvpMetadataConfiguration.java
@@ -0,0 +1,269 @@
+/*
+ * Copyright 2018 A-SIT Plus GmbH
+ * AT-specific eIDAS Connector has been developed in a cooperation between EGIZ,
+ * A-SIT Plus GmbH, A-SIT, and Graz University of Technology.
+ *
+ * Licensed under the EUPL, Version 1.2 or - as soon they will be approved by
+ * the European Commission - subsequent versions of the EUPL (the "License");
+ * You may not use this work except in compliance with the License.
+ * You may obtain a copy of the License at:
+ * https://joinup.ec.europa.eu/news/understanding-eupl-v12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * This product combines work with different licenses. See the "NOTICE" text
+ * file for details on the various modules and licenses.
+ * The "NOTICE" text file is part of the distribution. Any derivative works
+ * that you distribute must include a readable copy of the "NOTICE" text file.
+*/
+
+package at.asitplus.eidas.specific.connector.config;
+
+import java.util.Arrays;
+import java.util.List;
+
+import org.opensaml.saml2.core.Attribute;
+import org.opensaml.saml2.core.NameIDType;
+import org.opensaml.saml2.metadata.ContactPerson;
+import org.opensaml.saml2.metadata.Organization;
+import org.opensaml.saml2.metadata.RequestedAttribute;
+import org.opensaml.xml.security.credential.Credential;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import at.asitplus.eidas.specific.connector.MsEidasNodeConstants;
+import at.gv.egiz.eaaf.core.api.idp.IConfiguration;
+import at.gv.egiz.eaaf.core.exceptions.EaafException;
+import at.gv.egiz.eaaf.modules.pvp2.api.IPvp2BasicConfiguration;
+import at.gv.egiz.eaaf.modules.pvp2.api.metadata.IPvpMetadataBuilderConfiguration;
+import at.gv.egiz.eaaf.modules.pvp2.exception.CredentialsNotAvailableException;
+import at.gv.egiz.eaaf.modules.pvp2.impl.builder.PvpAttributeBuilder;
+import at.gv.egiz.eaaf.modules.pvp2.impl.utils.AbstractCredentialProvider;
+
+public class PvpMetadataConfiguration implements IPvpMetadataBuilderConfiguration {
+  private static final Logger log = LoggerFactory.getLogger(PvpMetadataConfiguration.class);
+
+  private final IConfiguration basicConfig;
+  private final String authUrl;
+  private final AbstractCredentialProvider pvpIdpCredentials;
+  private final IPvp2BasicConfiguration pvpBasicConfig;
+
+  /**
+   * Configuration object to create PVP2 S-Profile metadata.
+   * 
+   * @param basicConfig Application configuration
+   * @param authUrl Public-URL Prefix of the application 
+   * @param pvpBasicConfig PVP2 configuration object
+   * @param pvpIdpCredentials PVP2 credentials
+   */
+  public PvpMetadataConfiguration(IConfiguration basicConfig, String authUrl,
+      IPvp2BasicConfiguration pvpBasicConfig, AbstractCredentialProvider pvpIdpCredentials) {
+    this.authUrl = authUrl;
+    this.pvpIdpCredentials = pvpIdpCredentials;
+    this.basicConfig = basicConfig;
+    this.pvpBasicConfig = pvpBasicConfig;
+
+  }
+
+  @Override
+  public String getSpNameForLogging() {
+    return "PVP2 S-Profile IDP";
+  }
+
+  @Override
+  public int getMetadataValidUntil() {
+    return Integer.parseInt(basicConfig.getBasicConfiguration(
+        MsEidasNodeConstants.PROP_CONFIG_PVP2_METADATA_VALIDITY,
+        String.valueOf(MsEidasNodeConstants.DEFAULT_PVP_METADATA_VALIDITY)));
+
+  }
+
+  @Override
+  public boolean buildEntitiesDescriptorAsRootElement() {
+    return false;
+
+  }
+
+  @Override
+  public boolean buildIdpSsoDescriptor() {
+    return true;
+
+  }
+
+  @Override
+  public boolean buildSpSsoDescriptor() {
+    return false;
+
+  }
+
+  @Override
+  public String getEntityID() {
+    try {
+      return pvpBasicConfig.getIdpEntityId(authUrl);
+
+    } catch (final EaafException e) {
+      log.error("Can NOT build PVP metadata configuration.", e);
+      throw new RuntimeException("Can NOT build PVP metadata configuration.");
+
+    }
+
+  }
+
+  @Override
+  public String getEntityFriendlyName() {
+    return null;
+
+  }
+
+  @Override
+  public List<ContactPerson> getContactPersonInformation() {
+    try {
+      return pvpBasicConfig.getIdpContacts();
+
+    } catch (final EaafException e) {
+      log.error("Can NOT build PVP metadata configuration.", e);
+      throw new RuntimeException("Can NOT build PVP metadata configuration.");
+
+    }
+
+  }
+
+  @Override
+  public Organization getOrgansiationInformation() {
+    try {
+      return pvpBasicConfig.getIdpOrganisation();
+
+    } catch (final EaafException e) {
+      log.error("Can NOT build PVP metadata configuration.", e);
+      throw new RuntimeException("Can NOT build PVP metadata configuration.");
+
+    }
+  }
+
+  @Override
+  public Credential getMetadataSigningCredentials() throws CredentialsNotAvailableException {
+    return pvpIdpCredentials.getIdpMetaDataSigningCredential();
+
+  }
+
+  @Override
+  public Credential getRequestorResponseSigningCredentials() throws CredentialsNotAvailableException {
+    return pvpIdpCredentials.getIdpAssertionSigningCredential();
+
+  }
+
+  @Override
+  public Credential getEncryptionCredentials() throws CredentialsNotAvailableException {
+    return null;
+
+  }
+
+  @Override
+  public String getIdpWebSsoPostBindingUrl() {
+    try {
+      return pvpBasicConfig.getIdpSsoPostService(authUrl);
+
+    } catch (final EaafException e) {
+      log.error("Can NOT build PVP metadata configuration.", e);
+      throw new RuntimeException("Can NOT build PVP metadata configuration.");
+
+    }
+
+  }
+
+  @Override
+  public String getIdpWebSsoRedirectBindingUrl() {
+    try {
+      return pvpBasicConfig.getIdpSsoRedirectService(authUrl);
+
+    } catch (final EaafException e) {
+      log.error("Can NOT build PVP metadata configuration.", e);
+      throw new RuntimeException("Can NOT build PVP metadata configuration.");
+
+    }
+  }
+
+  @Override
+  public String getIdpSloPostBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getIdpSloRedirectBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getSpAssertionConsumerServicePostBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getSpAssertionConsumerServiceRedirectBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getSpSloPostBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getSpSloRedirectBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public String getSpSloSoapBindingUrl() {
+    return null;
+
+  }
+
+  @Override
+  public List<Attribute> getIdpPossibleAttributes() {
+    return PvpAttributeBuilder.buildSupportedEmptyAttributes();
+
+  }
+
+  @Override
+  public List<String> getIdpPossibleNameIdTypes() {
+    return Arrays.asList(NameIDType.PERSISTENT,
+        NameIDType.TRANSIENT,
+        NameIDType.UNSPECIFIED);
+  }
+
+  @Override
+  public List<RequestedAttribute> getSpRequiredAttributes() {
+    return null;
+
+  }
+
+  @Override
+  public List<String> getSpAllowedNameIdTypes() {
+    return null;
+
+  }
+
+  @Override
+  public boolean wantAssertionSigned() {
+    return false;
+
+  }
+
+  @Override
+  public boolean wantAuthnRequestSigned() {
+    return true;
+
+  }
+
+}