move citizen-card authentication and validation (Security-layer communication) to discrete module

11 files changed, 0 insertions, 1515 deletions

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/DefaultAuthModuleImpl.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/DefaultAuthModuleImpl.java
deleted file mode 100644
index 8ae4a9999..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/DefaultAuthModuleImpl.java
+++ /dev/null
@@ -1,28 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal;
-
-import org.apache.commons.lang3.StringUtils;
-
-import at.gv.egovernment.moa.id.auth.modules.AuthModule;
-import at.gv.egovernment.moa.id.process.api.ExecutionContext;
-
-/**
- * Module descriptor
- */
-public class DefaultAuthModuleImpl implements AuthModule {
-
-	@Override
-	public int getPriority() {
-		return 0;
-	}
-
-	@Override
-	public String selectProcess(ExecutionContext context) {
-		return StringUtils.isBlank((String) context.get("ccc")) ? "DefaultAuthentication" : null;
-	}
-
-	@Override
-	public String[] getProcessDefinitions() {
-		return new String[] { "classpath:at/gv/egovernment/moa/id/auth/modules/internal/DefaultAuthentication.process.xml" };
-	}
-
-}
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CertificateReadRequestTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CertificateReadRequestTask.java
deleted file mode 100644
index 0cfd16262..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CertificateReadRequestTask.java
+++ /dev/null
@@ -1,103 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-

-import java.io.IOException;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-

-import org.apache.commons.lang.StringEscapeUtils;

-import org.apache.commons.lang3.BooleanUtils;

-

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;

-import at.gv.egovernment.moa.id.auth.builder.InfoboxReadRequestBuilderCertificate;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.id.util.ServletUtils;

-import at.gv.egovernment.moa.logging.Logger;

-

-/**

- * Creates {@code InfoBoxReadRequest} in order to read the subject's certificates.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Creates {@code InfoBoxReadRequest} in order to read the subject's certificates.</li>

- * <li>Responds with {@code InfoBoxReadRequest} (for CCE), {@code DataURL} is {@code /VerifyCertificate}</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Responds with {@code InfoBoxReadRequest} (for CCE), {@code DataURL} is {@code /VerifyCertificate}</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class CertificateReadRequestTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		// TODO[branch]: Foreign citizen or mandate mode; respond with IRR for certificates, dataURL = "/VerifyCertificate"

-		Logger.info("Send InfoboxReadRequest to BKU to get signer certificate.");

-

-		setNoCachingHeaders(resp);		

-		try {

-		

-			String sessionID = StringEscapeUtils.escapeHtml(req.getParameter(PARAM_SESSIONID));

-			

-			// check parameter

-			if (!ParamValidatorUtils.isValidSessionID(sessionID)) {

-				throw new WrongParametersException("CertificateReadRequestTask", PARAM_SESSIONID, "auth.12");

-			}

-

-			AuthenticationSession session = AuthenticationServer.getSession(sessionID);

-

-			boolean useMandate = session.getUseMandate();

-			boolean identityLinkAvailable = BooleanUtils.isTrue((Boolean) executionContext.get("identityLinkAvailable"));

-			

-			if (!identityLinkAvailable && useMandate) {

-				Logger.error("Online-Mandate Mode for foreign citizencs not supported.");

-				throw new AuthenticationException("auth.13", null);

-			}

-

-			// change MOASessionID

-			AuthenticationSessionStoreage.changeSessionID(session);

-			

-			// create the InfoboxReadRequest to get the certificate

-			String infoboxReadRequest = new InfoboxReadRequestBuilderCertificate().build(true);

-

-			// build dataurl (to the VerifyCertificateSerlvet)

-			String dataurl = new DataURLBuilder().buildDataURL(session.getAuthURL(), REQ_VERIFY_CERTIFICATE,

-					session.getSessionID());

-

-			ServletUtils.writeCreateXMLSignatureRequest(resp, infoboxReadRequest,

-					AuthenticationServer.REQ_PROCESS_VALIDATOR_INPUT, "VerifyIdentityLink", dataurl);

-		

-		} catch (MOAIDException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-					

-		} catch (IOException e) {

-			throw new TaskExecutionException(e.getMessage(), e);

-			

-		} finally {

-			

-		}		

-

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CreateIdentityLinkFormTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CreateIdentityLinkFormTask.java
deleted file mode 100644
index df3d90aab..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/CreateIdentityLinkFormTask.java
+++ /dev/null
@@ -1,138 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-

-import java.io.PrintWriter;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-

-import org.apache.commons.lang.StringEscapeUtils;

-import org.apache.commons.lang3.BooleanUtils;

-import org.apache.commons.lang3.ObjectUtils;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.advancedlogging.TransactionIDUtils;

-import at.gv.egovernment.moa.id.auth.builder.StartAuthenticationBuilder;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-import at.gv.egovernment.moa.id.auth.servlet.GenerateIFrameTemplateServlet;

-

-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.logging.Logger;

-import at.gv.egovernment.moa.util.MiscUtil;

-import at.gv.egovernment.moa.util.StringUtils;

-

-/**

- * Creates a http form including an embedded {@code InfoBoxReadRequest} for reading the identity link.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Removes ExecutionContext property {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}.</li>

- * <li>Creates the http form mentioned above.</li>

- * <li>Returns the http form via HttpServletResponse.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID} <strong>or</strong></li>

- * <li>ExecutionContext property {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID} (in case of legacy authentication without CCE selection, where the moa session is not provided by request parameter).</li>

- * </ul>

- * Result:

- * <ul>

- * <li>The identity link form via HttpServletResponse.</li>

- * </ul>

- * Possible branches:

- * <ul>

- * <li>In case of STORK authentication

- * <ul>

- * <li>Creates STORK auth SAML request.</li>

- * <li>Creates and returns a form for submitting the SAML request to the CPEPS (post binding).</li>

- * <li>Returns the form via HttpServletResponse.</li>

- * </ul>

- * </li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.GenerateIFrameTemplateServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class CreateIdentityLinkFormTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		String moasessionid = StringEscapeUtils.escapeHtml(ObjectUtils.defaultIfNull(req.getParameter(PARAM_SESSIONID), (String) executionContext.get(PARAM_SESSIONID)));

-		AuthenticationSession moasession = null;

-		try {

-			

-			if (MiscUtil.isEmpty(moasessionid)) {

-				Logger.warn("MOASessionID is empty.");

-				throw new MOAIDException("auth.18", new Object[] {});

-			}

-			

-			try {			

-				moasession = AuthenticationSessionStoreage.getSession(moasessionid);

-

-				AuthenticationSessionStoreage.changeSessionID(moasession);

-				executionContext.remove(PARAM_SESSIONID);

-			

-			} catch (MOADatabaseException e) {

-				Logger.info("MOASession with SessionID=" + moasessionid + " is not found in Database");

-				throw new MOAIDException("init.04", new Object[] { moasessionid });

-

-			} catch (Throwable e) {

-				Logger.info("No HTTP Session found!");

-				throw new MOAIDException("auth.18", new Object[] {});

-			}

-

-			StartAuthenticationBuilder startauth = StartAuthenticationBuilder.getInstance();

-			String getIdentityLinkForm = startauth.build(moasession, req, resp);

-

-			IRequest pendingReq = RequestStorage.getPendingRequest(

-					(String) executionContext.get("pendingRequestID"));

-			

-			if (BooleanUtils.isTrue((Boolean) executionContext.get("useMandate")))

-				MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-						pendingReq, MOAIDEventConstants.AUTHPROCESS_MANDATES_REQUESTED);			

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_BKU_URL, moasession.getBkuURL());

-			

-			if (!StringUtils.isEmpty(getIdentityLinkForm)) {

-				resp.setContentType("text/html;charset=UTF-8");

-				PrintWriter out = new PrintWriter(resp.getOutputStream());

-				out.print(getIdentityLinkForm);

-				out.flush();

-				Logger.debug("Finished GET " + GenerateIFrameTemplateServlet.class);

-			}

-			

-		} catch (WrongParametersException ex) {

-//			handleWrongParameters(ex, req, resp);

-			throw new TaskExecutionException(ex.getMessage(), ex);

-		}

-

-		catch (MOAIDException ex) {

-//			handleError(null, ex, req, resp, pendingRequestID);

-			throw new TaskExecutionException(ex.getMessage(), ex);

-

-		} catch (Exception e) {

-			Logger.error("CreateIdentityLinkFormTask has an interal Error.", e);

-			throw new TaskExecutionException(e.getMessage(), e);

-

-		}

-

-		finally {

-			

-			TransactionIDUtils.removeTransactionId();

-			TransactionIDUtils.removeSessionId();

-		}

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/FinalizeAuthenticationTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/FinalizeAuthenticationTask.java
deleted file mode 100644
index 28bed7713..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/FinalizeAuthenticationTask.java
+++ /dev/null
@@ -1,118 +0,0 @@
-/*
- * Copyright 2014 Federal Chancellery Austria
- * MOA-ID has been developed in a cooperation between BRZ, the Federal
- * Chancellery Austria - ICT staff unit, and Graz University of Technology.
- *
- * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
- * the European Commission - subsequent versions of the EUPL (the "Licence");
- * You may not use this work except in compliance with the Licence.
- * You may obtain a copy of the Licence at:
- * http://www.osor.eu/eupl/
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the Licence is distributed on an "AS IS" basis,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the Licence for the specific language governing permissions and
- * limitations under the Licence.
- *
- * This product combines work with different licenses. See the "NOTICE" text
- * file for details on the various modules and licenses.
- * The "NOTICE" text file is part of the distribution. Any derivative works
- * that you distribute must include a readable copy of the "NOTICE" text file.
- */
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;
-
-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.PARAM_SESSIONID;
-
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-
-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;
-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;
-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;
-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;
-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;
-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
-import at.gv.egovernment.moa.id.moduls.IRequest;
-import at.gv.egovernment.moa.id.moduls.ModulUtils;
-import at.gv.egovernment.moa.id.moduls.RequestStorage;
-import at.gv.egovernment.moa.id.process.api.ExecutionContext;
-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;
-import at.gv.egovernment.moa.logging.Logger;
-import at.gv.egovernment.moa.util.MiscUtil;
-
-/**
- * @author tlenz
- *
- */
-public class FinalizeAuthenticationTask extends AbstractAuthServletTask {
-
-	/* (non-Javadoc)
-	 * @see at.gv.egovernment.moa.id.process.springweb.MoaIdTask#execute(at.gv.egovernment.moa.id.process.api.ExecutionContext, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
-	 */
-	@Override
-	public void execute(ExecutionContext executionContext,
-			HttpServletRequest request, HttpServletResponse response)
-			throws TaskExecutionException {
-		
-		try {
-			IRequest pendingReq = RequestStorage.getPendingRequest(
-					(String) executionContext.get("pendingRequestID"));	
-		
-			//get Session from context
-			String moasessionid = (String) executionContext.get(PARAM_SESSIONID);
-			AuthenticationSession session = null;				
-			if (MiscUtil.isEmpty(moasessionid)) {
-				Logger.warn("MOASessionID is empty.");
-				throw new MOAIDException("auth.18", new Object[] {});
-			}
-			
-			try {			
-				session = AuthenticationSessionStoreage.getSession(moasessionid);
-				AuthenticationSessionStoreage.changeSessionID(session);
-							
-			} catch (MOADatabaseException e) {
-				Logger.info("MOASession with SessionID=" + moasessionid + " is not found in Database");
-				throw new MOAIDException("init.04", new Object[] { moasessionid });
-
-			} catch (Throwable e) {
-				Logger.info("No HTTP Session found!");
-				throw new MOAIDException("auth.18", new Object[] {});
-			
-			} finally {
-				executionContext.remove(PARAM_SESSIONID);
-			
-			}
-		
-		
-			session.setAuthenticatedUsed(false);
-			session.setAuthenticated(true);
-
-
-			String oldsessionID = session.getSessionID();
-
-			//Session is implicte stored in changeSessionID!!!
-			String newMOASessionID = AuthenticationSessionStoreage.changeSessionID(session);
-		
-			Logger.info("AuthProcess finished. Redirect to Protocol Dispatcher.");
-			
-			String redirectURL = new DataURLBuilder().buildDataURL(session.getAuthURL(), 
-					ModulUtils.buildAuthURL(session.getModul(), session.getAction(), pendingReq.getRequestID()), newMOASessionID);
-				
-			response.setContentType("text/html");
-			response.setStatus(302);
-			response.addHeader("Location", redirectURL);		
-			Logger.debug("REDIRECT TO: " + redirectURL);
-			
-		} catch (MOAIDException e) {
-			throw new TaskExecutionException(e.getMessage(), e);
-			
-		} catch (Exception e) {
-			Logger.warn("FinalizeAuthenticationTask has an internal error", e);
-			throw new TaskExecutionException(e.getMessage(), e);
-			
-		}
-
-	}
-
-}
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetForeignIDTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetForeignIDTask.java
deleted file mode 100644
index 215a7a809..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetForeignIDTask.java
+++ /dev/null
@@ -1,191 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-

-import java.io.ByteArrayInputStream;

-import java.io.IOException;

-import java.security.cert.CertificateException;

-import java.util.Map;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-import javax.xml.transform.TransformerException;

-

-import org.apache.commons.fileupload.FileUploadException;

-import org.apache.commons.lang.StringEscapeUtils;

-import org.w3c.dom.Element;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.data.CreateXMLSignatureResponse;

-import at.gv.egovernment.moa.id.auth.data.IdentityLink;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.ParseException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-import at.gv.egovernment.moa.id.auth.parser.CreateXMLSignatureResponseParser;

-import at.gv.egovernment.moa.id.auth.parser.IdentityLinkAssertionParser;

-import at.gv.egovernment.moa.id.client.SZRGWClientException;

-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.ModulUtils;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.protocols.pvp2x.PVPConstants;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.logging.Logger;

-import at.gv.egovernment.moa.util.DOMUtils;

-import at.gv.util.xsd.srzgw.CreateIdentityLinkResponse;

-

-/**

- * Evaluates the {@code CreateXMLSignatureResponse}, extracts signature and certificate and asks the SZR Gateway for an identity link.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Parses the CreateXMLSignatureResponse retrieved from POST parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE}.</li>

- * <li>Extracts signature and signer certificate.</li>

- * <li>Send request to SZR Gateway in order to get an identity link.</li>

- * <li>Updates moa session (sets identity link, QAA level 4, authentication data and foreigner flag).</li>

- * <li>Redirects back to {@code /dispatcher} in order to finalize authentication.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE} containing a {@code CreateXMLSignatureResponse}.</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Identity link, QAA level 4 and foreigner flag put into moa session.</li>

- * <li>Redirect to {@code /dispatcher}.</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.GetForeignIDServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class GetForeignIDTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		Logger.debug("POST GetForeignIDServlet");

-

-		setNoCachingHeaders(resp);

-

-		Map<String, String> parameters;

-

-		try {

-			parameters = getParameters(req);

-			

-		} catch (FileUploadException | IOException e) {

-			Logger.error("Parsing mulitpart/form-data request parameters failed: " + e.getMessage());

-			throw new TaskExecutionException("Parsing mulitpart/form-data request parameters failed", new IOException(e.getMessage()));

-		}

-		

-		String sessionID = StringEscapeUtils.escapeHtml(req.getParameter(PARAM_SESSIONID));

-		String pendingRequestID = null;

-		String redirectURL = null;

-		AuthenticationSession session = null;

-		try {

-			// check parameter

-			if (!ParamValidatorUtils.isValidSessionID(sessionID)) {

-				throw new WrongParametersException("GetForeignID", PARAM_SESSIONID, "auth.12");

-			}

-			String xmlCreateXMLSignatureResponse = (String) parameters.get(PARAM_XMLRESPONSE);

-			if (!ParamValidatorUtils.isValidXMLDocument(xmlCreateXMLSignatureResponse)) {

-				throw new WrongParametersException("GetForeignID", PARAM_XMLRESPONSE, "auth.12");

-			}

-			pendingRequestID = AuthenticationSessionStoreage.getPendingRequestID(sessionID);

-			session = AuthenticationServer.getSession(sessionID);

-

-			IRequest pendingReq = RequestStorage.getPendingRequest(

-					(String) executionContext.get("pendingRequestID"));			

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_BKU_DATAURL_IP, req.getRemoteHost());

-			

-			// change MOASessionID

-			sessionID = AuthenticationSessionStoreage.changeSessionID(session);

-

-			Logger.debug(xmlCreateXMLSignatureResponse);

-

-			CreateXMLSignatureResponse csresp = new CreateXMLSignatureResponseParser(xmlCreateXMLSignatureResponse)

-					.parseResponseDsig();

-

-			try {

-				String serializedAssertion = DOMUtils.serializeNode(csresp.getDsigSignature());

-				session.setAuthBlock(serializedAssertion);

-

-			} catch (TransformerException e) {

-				throw new ParseException("parser.04", new Object[] { REQ_VERIFY_AUTH_BLOCK, PARAM_XMLRESPONSE });

-

-			} catch (IOException e) {

-				throw new ParseException("parser.04", new Object[] { REQ_VERIFY_AUTH_BLOCK, PARAM_XMLRESPONSE });

-

-			}

-			

-			Element signature = csresp.getDsigSignature();

-

-			try {

-				session.setSignerCertificate(AuthenticationServer.getCertificateFromXML(signature));

-			} catch (CertificateException e) {

-				Logger.error("Could not extract certificate from CreateXMLSignatureResponse");

-				throw new MOAIDException("auth.14", null);

-			}

-

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_FOREIGN_SZRGW_CONNECTED);

-			

-			// make SZR request to the identity link

-			CreateIdentityLinkResponse response = AuthenticationServer.getInstance().getIdentityLink(signature);

-

-			if (null != response.getErrorResponse()) {

-				// TODO fix exception parameter

-				throw new SZRGWClientException("service.08", (String) response.getErrorResponse().getErrorCode(),

-						(String) response.getErrorResponse().getInfo());

-			} else {

-				IdentityLinkAssertionParser ilParser = new IdentityLinkAssertionParser(new ByteArrayInputStream(

-						response.getIdentityLink()));

-				IdentityLink identitylink = ilParser.parseIdentityLink();

-				session.setIdentityLink(identitylink);

-

-				// set QAA Level four in case of card authentifcation

-				session.setQAALevel(PVPConstants.STORK_QAA_1_4);

-

-				AuthenticationServer.getInstance().getForeignAuthenticationData(session);

-

-				// session is implicit stored in changeSessionID!!!!

-				String newMOASessionID = AuthenticationSessionStoreage.changeSessionID(session);

-

-				Logger.info("Changed MOASession " + sessionID + " to Session " + newMOASessionID);

-				Logger.info("Daten angelegt zu MOASession " + newMOASessionID);

-				

-				MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-						pendingReq, MOAIDEventConstants.AUTHPROCESS_FOREIGN_SZRGW_RECEIVED);

-				

-				try {

-					AuthenticationSessionStoreage.storeSession(session);

-				} catch (MOADatabaseException e) {

-					throw new MOAIDException("Session store error", null);

-				}

-

-				//put session to context 

-				executionContext.put(PARAM_SESSIONID, session.getSessionID());

-			}

-

-		} catch (MOAIDException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-

-		} catch (Exception e) {

-			Logger.error("GetForeignIDServlet has an interal Error.", e);

-			throw new TaskExecutionException(e.getMessage(), e);

-

-		}

-

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetMISSessionIDTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetMISSessionIDTask.java
deleted file mode 100644
index 4951dcab8..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/GetMISSessionIDTask.java
+++ /dev/null
@@ -1,184 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-import iaik.pki.PKIException;

-

-import java.security.GeneralSecurityException;

-import java.util.List;

-

-import javax.net.ssl.SSLSocketFactory;

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-import javax.xml.parsers.ParserConfigurationException;

-

-import org.apache.commons.lang.StringEscapeUtils;

-import org.xml.sax.SAXException;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.config.ConnectionParameter;

-import at.gv.egovernment.moa.id.config.auth.AuthConfiguration;

-import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProviderFactory;

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.ModulUtils;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.protocols.pvp2x.PVPConstants;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.id.util.SSLUtils;

-import at.gv.egovernment.moa.id.util.client.mis.simple.MISMandate;

-import at.gv.egovernment.moa.id.util.client.mis.simple.MISSimpleClient;

-import at.gv.egovernment.moa.logging.Logger;

-import at.gv.egovernment.moa.util.DOMUtils;

-

-/**

- * Retrieves a mandate from the online mandate issuing service.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Retrieves the mandate referenced within the moa session from the online (external) mandate issuing service.</li>

- * <li>Verifies the mandate.</li>

- * <li>Puts mandate into moa session.</li>

- * <li>Redirects back to {@code /dispatcher} in order to finalize the authentication.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Mandate put into moa session.</li>

- * <li>Redirect to {@code /dispatcher}.</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.GetMISSessionIDServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class GetMISSessionIDTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-		

-		Logger.debug("POST GetMISSessionIDServlet");

-

-		String sessionID = req.getParameter(PARAM_SESSIONID);

-

-		// escape parameter strings

-		sessionID = StringEscapeUtils.escapeHtml(sessionID);

-

-		AuthenticationSession session = null;

-		String pendingRequestID = null;

-		try {

-			// check parameter

-			if (!ParamValidatorUtils.isValidSessionID(sessionID))

-				throw new WrongParametersException("VerifyCertificate",

-						PARAM_SESSIONID, "auth.12");

-

-			pendingRequestID = AuthenticationSessionStoreage.getPendingRequestID(sessionID);

-			

-			session = AuthenticationServer.getSession(sessionID);

-

-			IRequest pendingReq = RequestStorage.getPendingRequest(

-					(String) executionContext.get("pendingRequestID"));			

-			

-			//change MOASessionID

-		    sessionID = AuthenticationSessionStoreage.changeSessionID(session);

-			

-			String misSessionID = session.getMISSessionID();

-

-			AuthConfiguration authConf = AuthConfigurationProviderFactory

-					.getInstance();

-			ConnectionParameter connectionParameters = authConf

-					.getOnlineMandatesConnectionParameter();

-			SSLSocketFactory sslFactory = SSLUtils.getSSLSocketFactory(

-					AuthConfigurationProviderFactory.getInstance(),

-					connectionParameters);

-

-			List<MISMandate> list = MISSimpleClient.sendGetMandatesRequest(

-					connectionParameters.getUrl(), misSessionID, sslFactory);

-

-			if (list == null || list.size() == 0) {

-				Logger.error("Keine Vollmacht gefunden.");

-				throw new AuthenticationException("auth.15", null);

-			}

-

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_MANDATE_RECEIVED);

-

-			

-			// for now: list contains only one element

-			MISMandate mandate = (MISMandate) list.get(0);

-

-			// TODO[tlenz]: UTF-8 ?

-			String sMandate = new String(mandate.getMandate());

-			if (sMandate == null || sMandate.compareToIgnoreCase("") == 0) {

-				Logger.error("Mandate is empty.");

-				throw new AuthenticationException("auth.15",

-						new Object[] { GET_MIS_SESSIONID });

-			}

-						

-			//check if it is a parsable XML

-			byte[] byteMandate = mandate.getMandate();

-			// TODO[tlenz]: UTF-8 ?

-			String stringMandate = new String(byteMandate);

-			DOMUtils.parseDocument(stringMandate, false,

-					null, null).getDocumentElement();

-			

-			// extract RepresentationType

-			AuthenticationServer.getInstance().verifyMandate(session, mandate);

-			

-			session.setMISMandate(mandate);

-			

-			//log mandate specific set of events

-			MOAReversionLogger.getInstance().logMandateEventSet(pendingReq, mandate);

-						

-			String oldsessionID = session.getSessionID();

-			

-			//Session is implicite stored in changeSessionID!!!

-			String newMOASessionID = AuthenticationSessionStoreage.changeSessionID(session);

-			

-			Logger.info("Changed MOASession " + oldsessionID + " to Session " + newMOASessionID);

-			Logger.info("Daten angelegt zu MOASession " + newMOASessionID);

-

-			//put session to context 

-			executionContext.put(PARAM_SESSIONID, session.getSessionID());

-			

-

-		} catch (MOAIDException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-			

-		} catch (GeneralSecurityException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-			

-		} catch (PKIException e) {

-			throw new TaskExecutionException(e.getMessage(), e);

-			

-		} catch (SAXException e) {

-			throw new TaskExecutionException(e.getMessage(), e);

-			

-		} catch (ParserConfigurationException e) {

-			throw new TaskExecutionException(e.getMessage(), e);

-			

-	    } catch (Exception e) {

-	    	Logger.error("MISMandateValidation has an interal Error.", e);

-	    	throw new TaskExecutionException(e.getMessage(), e);

-	       

-	    }

-	    finally {

-	    	

-	    }

-		

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareAuthBlockSignatureTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareAuthBlockSignatureTask.java
deleted file mode 100644
index 4dcd48f57..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareAuthBlockSignatureTask.java
+++ /dev/null
@@ -1,101 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-

-import org.apache.commons.lang.StringEscapeUtils;

-

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.config.auth.AuthConfiguration;

-import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProviderFactory;

-import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.id.util.ServletUtils;

-import at.gv.egovernment.moa.logging.Logger;

-

-/**

- * Creates {@code CreateXMLSignatureRequest} for auth block signature.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Creates {@code CreateXMLSignatureRequest} for auth block signature.</li>

- * <li>Responds with {@code CreateXMLSignatureRequest} (for CCE), {@code DataURL} is {@code /VerifyAuthBlock}</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Responds with {@code CreateXMLSignatureRequest} (for CCE), {@code DataURL} is {@code /VerifyAuthBlock}</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class PrepareAuthBlockSignatureTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-		// note: code taken from at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet

-

-		Logger.debug("Process IdentityLink");

-

-		setNoCachingHeaders(resp);

-		

-		String pendingRequestID = null;

-

-		try {

-			

-			String sessionID = StringEscapeUtils.escapeHtml(req.getParameter(PARAM_SESSIONID));

-			

-			// check parameter

-			if (!ParamValidatorUtils.isValidSessionID(sessionID)) {

-				throw new WrongParametersException("VerifyIdentityLink", PARAM_SESSIONID, "auth.12");

-			}

-

-			pendingRequestID = AuthenticationSessionStoreage.getPendingRequestID(sessionID);

-

-			AuthenticationSession session = AuthenticationServer.getSession(sessionID);

-

-			// change MOASessionID

-			sessionID = AuthenticationSessionStoreage.changeSessionID(session);

-				

-			OAAuthParameter oaParam = AuthConfigurationProviderFactory.getInstance().getOnlineApplicationParameter(

-					session.getPublicOAURLPrefix());

-			AuthConfiguration authConf = AuthConfigurationProviderFactory.getInstance();

-

-			String createXMLSignatureRequest = AuthenticationServer.getInstance()

-					.getCreateXMLSignatureRequestAuthBlockOrRedirect(session, authConf, oaParam);

-

-			AuthenticationSessionStoreage.storeSession(session);

-			

-			ServletUtils.writeCreateXMLSignatureRequestOrRedirect(resp, session,

-					createXMLSignatureRequest, AuthenticationServer.REQ_PROCESS_VALIDATOR_INPUT,

-					"VerifyIdentityLink");

-

-		} catch (MOAIDException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-

-		} catch (Exception e) {

-			Logger.error("IdentityLinkValidation has an interal Error.", e);

-			throw new TaskExecutionException(e.getMessage(), e);

-		}

-

-		finally {

-			

-		}

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareGetMISMandateTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareGetMISMandateTask.java
deleted file mode 100644
index 099bc085c..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/PrepareGetMISMandateTask.java
+++ /dev/null
@@ -1,207 +0,0 @@
-/*
- * Copyright 2014 Federal Chancellery Austria
- * MOA-ID has been developed in a cooperation between BRZ, the Federal
- * Chancellery Austria - ICT staff unit, and Graz University of Technology.
- *
- * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
- * the European Commission - subsequent versions of the EUPL (the "Licence");
- * You may not use this work except in compliance with the Licence.
- * You may obtain a copy of the Licence at:
- * http://www.osor.eu/eupl/
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the Licence is distributed on an "AS IS" basis,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the Licence for the specific language governing permissions and
- * limitations under the Licence.
- *
- * This product combines work with different licenses. See the "NOTICE" text
- * file for details on the various modules and licenses.
- * The "NOTICE" text file is part of the distribution. Any derivative works
- * that you distribute must include a readable copy of the "NOTICE" text file.
- */
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;
-
-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.GET_MIS_SESSIONID;
-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.PARAM_SESSIONID;
-
-import java.util.List;
-
-import javax.net.ssl.SSLSocketFactory;
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-import org.w3c.dom.Element;
-
-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;
-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;
-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;
-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;
-import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;
-import at.gv.egovernment.moa.id.auth.exception.BuildException;
-import at.gv.egovernment.moa.id.auth.exception.MISSimpleClientException;
-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;
-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;
-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;
-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
-import at.gv.egovernment.moa.id.config.ConnectionParameter;
-import at.gv.egovernment.moa.id.config.auth.AuthConfiguration;
-import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProviderFactory;
-import at.gv.egovernment.moa.id.config.auth.IOAAuthParameters;
-import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;
-import at.gv.egovernment.moa.id.moduls.IRequest;
-import at.gv.egovernment.moa.id.moduls.RequestStorage;
-import at.gv.egovernment.moa.id.process.api.ExecutionContext;
-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;
-import at.gv.egovernment.moa.id.util.SSLUtils;
-import at.gv.egovernment.moa.id.util.client.mis.simple.MISSessionId;
-import at.gv.egovernment.moa.id.util.client.mis.simple.MISSimpleClient;
-import at.gv.egovernment.moa.logging.Logger;
-import at.gv.egovernment.moa.util.DOMUtils;
-import at.gv.egovernment.moa.util.MiscUtil;
-
-/**
- * @author tlenz
- *
- */
-public class PrepareGetMISMandateTask extends AbstractAuthServletTask {
-
-	/* (non-Javadoc)
-	 * @see at.gv.egovernment.moa.id.process.springweb.MoaIdTask#execute(at.gv.egovernment.moa.id.process.api.ExecutionContext, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
-	 */
-	@Override
-	public void execute(ExecutionContext executionContext,
-			HttpServletRequest request, HttpServletResponse response)
-			throws TaskExecutionException {
-
-		//mandate Mode
-		try {
-			IRequest pendingReq = RequestStorage.getPendingRequest(
-					(String) executionContext.get("pendingRequestID"));	
-			
-			//get Session from context
-			String moasessionid = (String) executionContext.get(PARAM_SESSIONID);
-			AuthenticationSession session = null;				
-			if (MiscUtil.isEmpty(moasessionid)) {
-				Logger.warn("MOASessionID is empty.");
-				throw new MOAIDException("auth.18", new Object[] {});
-			}
-				
-			try {			
-				session = AuthenticationSessionStoreage.getSession(moasessionid);
-				AuthenticationSessionStoreage.changeSessionID(session);
-								
-			} catch (MOADatabaseException e) {
-				Logger.info("MOASession with SessionID=" + moasessionid + " is not found in Database");
-				throw new MOAIDException("init.04", new Object[] { moasessionid });
-
-			} catch (Throwable e) {
-				Logger.info("No HTTP Session found!");
-				throw new MOAIDException("auth.18", new Object[] {});
-				
-			} finally {
-				executionContext.remove(PARAM_SESSIONID);
-				
-			}
-
-			
-		  AuthConfiguration authConf= AuthConfigurationProviderFactory.getInstance();
-			ConnectionParameter connectionParameters = authConf.getOnlineMandatesConnectionParameter();	
-			SSLSocketFactory sslFactory = SSLUtils.getSSLSocketFactory(AuthConfigurationProviderFactory.getInstance(), connectionParameters);
-			
-			// get identitity link as byte[]
-			Element elem = session.getIdentityLink().getSamlAssertion();
-			String s = DOMUtils.serializeNode(elem);
-			
-			//System.out.println("IDL: " + s);
-			
-			byte[] idl = s.getBytes("UTF-8");
-			
-			// redirect url
-			// build redirect(to the GetMISSessionIdSerlvet)
-			
-			//change MOASessionID before MIS request
-			String newMOASessionID = AuthenticationSessionStoreage.changeSessionID(session);
-			
-	        String redirectURL = new DataURLBuilder().buildDataURL(
-			    session.getAuthURL(),
-			    GET_MIS_SESSIONID,
-			    newMOASessionID);
-			
-	        String oaURL = session.getOAURLRequested();
-	        IOAAuthParameters oaParam = pendingReq.getOnlineApplicationConfiguration();
-	        if (oaParam == null) {
-	        	oaParam = authConf.getOnlineApplicationParameter(oaURL);
-	        	Logger.info("No Service info in PendingRequest --> load service info from configuration");
-	        	
-	        }
-	        
-	        List<String> profiles = oaParam.getMandateProfiles();
-
-	        if (profiles == null) {
-	      	  Logger.error("No Mandate/Profile for OA configured.");
-	      	  throw new AuthenticationException("config.21", new Object[] { GET_MIS_SESSIONID});
-	        }
-	        
-	        String oaFriendlyName = oaParam.getFriendlyName();
-	        String mandateReferenceValue = session.getMandateReferenceValue();
-	        byte[] cert = session.getEncodedSignerCertificate();
-	        byte[] authBlock = session.getAuthBlock().getBytes("UTF-8");
-	        
-	        //TODO: check in case of SSO!!!
-	        String targetType = null;  
-	        if(oaParam.getBusinessService()) {
-	        	String id = oaParam.getIdentityLinkDomainIdentifier();
-	        	if (id.startsWith(AuthenticationSession.REGISTERANDORDNR_PREFIX_))
-	        		targetType = id;
-	        	else
-	        		targetType = AuthenticationSession.REGISTERANDORDNR_PREFIX_+session.getDomainIdentifier();
-	        	
-	        } else {
-	        	targetType = AuthenticationSession.TARGET_PREFIX_ + oaParam.getTarget();
-	        }
-	        
-	        MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 
-					pendingReq, MOAIDEventConstants.AUTHPROCESS_MANDATE_SERVICE_REQUESTED, mandateReferenceValue);
-	        
-	        MISSessionId misSessionID = MISSimpleClient.sendSessionIdRequest(
-	        		connectionParameters.getUrl(), 
-	        		idl, 
-	        		cert, 
-	        		oaFriendlyName, 
-	        		redirectURL, 
-	        		mandateReferenceValue, 
-	        		profiles, 
-	        		targetType,
-	        		authBlock,
-	        		sslFactory);
-	        
-	        if (misSessionID == null) {
-	      	  Logger.error("Fehler bei Anfrage an Vollmachten Service. MIS Session ID ist null.");
-	      	  throw new MISSimpleClientException("Fehler bei Anfrage an Vollmachten Service.");
-	        }
-	        
-	        String redirectMISGUI = misSessionID.getRedirectURL();
-	        session.setMISSessionID(misSessionID.getSessiondId());
-		
-			try {
-				AuthenticationSessionStoreage.storeSession(session);
-				
-			} catch (MOADatabaseException | BuildException e) {
-				throw new MOAIDException("Session store error", null);
-				
-			}
-	        			
-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 
-					pendingReq, MOAIDEventConstants.AUTHPROCESS_MANDATE_REDIRECT);
-			
-	        response.setStatus(302);
-	    	response.addHeader("Location", redirectMISGUI);
-	    	Logger.debug("REDIRECT TO: " + redirectMISGUI);
-	    	
-		} catch (Exception e ) {
-			throw new TaskExecutionException(e.getMessage(), e);
-			
-		} 
-	}
-
-}
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyAuthenticationBlockTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyAuthenticationBlockTask.java
deleted file mode 100644
index da464ba68..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyAuthenticationBlockTask.java
+++ /dev/null
@@ -1,160 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-import iaik.pki.PKIException;

-

-import java.io.IOException;

-import java.security.GeneralSecurityException;

-import java.util.List;

-import java.util.Map;

-

-import javax.net.ssl.SSLSocketFactory;

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-import javax.xml.transform.TransformerException;

-

-import org.apache.commons.fileupload.FileUploadException;

-import org.apache.commons.lang.StringEscapeUtils;

-import org.w3c.dom.Element;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;

-import at.gv.egovernment.moa.id.auth.exception.MISSimpleClientException;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;

-import at.gv.egovernment.moa.id.config.ConnectionParameter;

-import at.gv.egovernment.moa.id.config.auth.AuthConfiguration;

-import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProviderFactory;

-import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.ModulUtils;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.id.util.SSLUtils;

-import at.gv.egovernment.moa.id.util.client.mis.simple.MISSessionId;

-import at.gv.egovernment.moa.id.util.client.mis.simple.MISSimpleClient;

-import at.gv.egovernment.moa.logging.Logger;

-import at.gv.egovernment.moa.util.DOMUtils;

-

-/**

- * Verifies the signed authentication block (provided as {@code CreateXMLSignatureResponse}).<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Takes the {@code CreateXMLSignatureResponse} from POST parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE}.</li>

- * <li>Verifies the {@code CreateXMLSignatureResponse}.</li>

- * <li>Updates moa session.</li>

- * <li>Redirects back to {@code /dispatcher} in order to finalize the authentication.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE} containing a {@code CreateXMLSignatureResponse}.</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Authentication data put into moa session.</li>

- * <li>Redirect to {@code /dispatcher}.</li>

- * </ul>

- * Possible branches:

- * <ul>

- * <li>In case of mandate mode

- * <ul>

- * <li>Creates a mandate session at the external mandate issuing service.</li>

- * <li>Redirects the user's browser to the online mandate issuing service GUI.</li>

- * </ul>

- * </li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.VerifyAuthenticationBlockServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class VerifyAuthenticationBlockTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		// note: code taken from at.gv.egovernment.moa.id.auth.servlet.VerifyAuthenticationBlockServlet

-		

-		Logger.debug("POST VerifyAuthenticationBlock");

-		

-		String pendingRequestID = null;		

-		

-	    Map<String, String> parameters;

-	    try 

-	    {

-	      parameters = getParameters(req);

-	      

-	    } catch (FileUploadException | IOException e) 

-	    {

-	      Logger.error("Parsing mulitpart/form-data request parameters failed: " + e.getMessage());

-	      throw new TaskExecutionException("Parsing mulitpart/form-data request parameters failed", new IOException(e.getMessage()));

-	    }

-	      

-			String sessionID = req.getParameter(PARAM_SESSIONID);

-			String createXMLSignatureResponse = (String)parameters.get(PARAM_XMLRESPONSE);

-

-			// escape parameter strings

-			sessionID = StringEscapeUtils.escapeHtml(sessionID);

-			pendingRequestID = AuthenticationSessionStoreage.getPendingRequestID(sessionID);

-		   		

-			String redirectURL = null;

-			try {

-	         // check parameter

-	         if (!ParamValidatorUtils.isValidSessionID(sessionID))

-	            throw new WrongParametersException("VerifyAuthenticationBlock", PARAM_SESSIONID, "auth.12");

-	         if (!ParamValidatorUtils.isValidXMLDocument(createXMLSignatureResponse))

-	            throw new WrongParametersException("VerifyAuthenticationBlock", PARAM_XMLRESPONSE, "auth.12");

-

-				AuthenticationSession session = AuthenticationServer.getSession(sessionID);

-

-				IRequest pendingReq = RequestStorage.getPendingRequest(

-						(String) executionContext.get("pendingRequestID"));			

-				MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-						pendingReq, MOAIDEventConstants.AUTHPROCESS_BKU_DATAURL_IP, req.getRemoteHost());

-								

-				//change MOASessionID

-			    sessionID = AuthenticationSessionStoreage.changeSessionID(session);

-				

-				AuthenticationServer.getInstance().verifyAuthenticationBlock(pendingReq, session, createXMLSignatureResponse);

-				

-				//store all changes in session DAO

-				AuthenticationSessionStoreage.storeSession(session);

-				

-				//put session to context 

-				executionContext.put(PARAM_SESSIONID, session.getSessionID());

-				

-			}

-	    

-			catch (MOAIDException ex) {

-				throw new TaskExecutionException(ex.getMessage(), ex);

-				

-			

-				

-		    } catch (Exception e) {

-		    	Logger.error("AuthBlockValidation has an interal Error.", e);

-		    	throw new TaskExecutionException(e.getMessage(), e);

-		    	

-		    }

-		       

-			

-		    finally {

-		    	

-		    }		

-		

-		

-		

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyCertificateTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyCertificateTask.java
deleted file mode 100644
index 5e0be0f2c..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyCertificateTask.java
+++ /dev/null
@@ -1,174 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-import iaik.x509.X509Certificate;

-

-import java.io.IOException;

-import java.util.Map;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-

-import org.apache.commons.fileupload.FileUploadException;

-import org.apache.commons.lang.StringEscapeUtils;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.builder.DataURLBuilder;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.id.util.ServletUtils;

-import at.gv.egovernment.moa.logging.Logger;

-import at.gv.egovernment.moa.spss.util.CertificateUtils;

-

-/**

- * Parses the certificate from {@code InfoBoxReadResponse} (via POST parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE}), creates the auth block to be signed and returns a {@code CreateXMLSignatureRequest} for auth block signature.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Retrieves the certificate via {@code InfoBoxReadResponse} from POST parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE}.</li>

- * <li>Verifies the certificate.</li>

- * <li>Creates the auth block to be signed using information from the certificate (Organwalter, foreign citizen.</li>

- * <li>Puts it in a {@code CreateXMLSignatureRequest}.</li>

- * <li>Updates moa session.</li>

- * <li>Responds with {@code CreateXMLSignatureRequest}.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_SESSIONID} containing a {@code InfoBoxReadResponse}.</li>

- * </ul>

- * Result:

- * <ul>

- * <li>{@code CreateXMLSignatureRequest} send as HttpServletResponse (for CCE).</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.VerifyCertificateServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class VerifyCertificateTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		// note: code taken from at.gv.egovernment.moa.id.auth.servlet.VerifyCertificateServlet

-

-		Logger.debug("POST VerifyCertificateServlet");

-				

-		Map<String, String> parameters;

-	    try 

-	    {

-	      parameters = getParameters(req);

-	    } catch (FileUploadException | IOException e) 

-	    {

-	      Logger.error("Parsing mulitpart/form-data request parameters failed: " + e.getMessage());

-	      throw new TaskExecutionException("Parsing mulitpart/form-data request parameters failed", new IOException(e.getMessage()));

-	     }

-	    String sessionID = req.getParameter(PARAM_SESSIONID);

-	    

-	    // escape parameter strings

-		sessionID = StringEscapeUtils.escapeHtml(sessionID);

-				

-	    AuthenticationSession session = null;

-	    try {

-	       // check parameter

-	       if (!ParamValidatorUtils.isValidSessionID(sessionID))

-	          throw new WrongParametersException("VerifyCertificate", PARAM_SESSIONID, "auth.12");

-	       

-	    	session = AuthenticationServer.getSession(sessionID);

-	    	

-			IRequest pendingReq = RequestStorage.getPendingRequest(

-					(String) executionContext.get("pendingRequestID"));			

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_BKU_DATAURL_IP, req.getRemoteHost());

-	    		    	

-	        //change MOASessionID

-	        sessionID = AuthenticationSessionStoreage.changeSessionID(session);

-	    	

-    		X509Certificate cert = AuthenticationServer.getInstance().getCertificate(pendingReq, sessionID, parameters);

-    		if (cert == null) {

-    			Logger.error("Certificate could not be read.");

-    			throw new AuthenticationException("auth.14", null);    		

-    		}

-    		

-	    	boolean useMandate = session.getUseMandate();

-	    	

-	    	if (useMandate) {

-

-	    		// verify certificate for OrganWalter

-	    		String createXMLSignatureRequestOrRedirect = AuthenticationServer.getInstance().verifyCertificate(session, cert);

-	    		

-		    	try {

-					AuthenticationSessionStoreage.storeSession(session);

-				} catch (MOADatabaseException e) {

-					throw new MOAIDException("session store error", null);

-				}

-	    		

-		    	// TODO[branch]: Mandate; respond with CXSR for authblock signature, dataURL "/VerifyAuthBlock"

-		    	ServletUtils.writeCreateXMLSignatureRequestOrRedirect(resp, session, createXMLSignatureRequestOrRedirect, AuthenticationServer.REQ_PROCESS_VALIDATOR_INPUT, "VerifyCertificate");

-	    		

-	    	}

-	    	else {

-	    					    	

-	    		String countrycode = CertificateUtils.getIssuerCountry(cert);

-	    		if (countrycode != null) {

-	    			if (countrycode.compareToIgnoreCase("AT") == 0) {

-	    				Logger.error("Certificate issuer country code is \"AT\". Login not support in foreign identities mode.");

-	    				throw new AuthenticationException("auth.22", null);

-	    			}

-	    		}

-	    		

-	    		// Foreign Identities Modus	

-	    		MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-						pendingReq, MOAIDEventConstants.AUTHPROCESS_FOREIGN_FOUND);

-	    		

-		    	String createXMLSignatureRequest = AuthenticationServer.getInstance().createXMLSignatureRequestForeignID(session, cert);

-		      // build dataurl (to the GetForeignIDSerlvet)

-		    	String dataurl =

-	             new DataURLBuilder().buildDataURL(

-	               session.getAuthURL(),

-	               REQ_GET_FOREIGN_ID,

-	               session.getSessionID());

-	       

-		    	try {

-					AuthenticationSessionStoreage.storeSession(session);

-				} catch (MOADatabaseException e) {

-					throw new MOAIDException("session store error", null);

-				}

-		    	

-	    		// TODO[branch]: Foreign citizen; respond with CXSR for authblock signature, dataURL "/GetForeignID"

-		    	ServletUtils.writeCreateXMLSignatureRequest(resp, createXMLSignatureRequest, AuthenticationServer.REQ_PROCESS_VALIDATOR_INPUT, "GetForeignID", dataurl);

-		    	

-		    	Logger.debug("Send CreateXMLSignatureRequest to BKU");

-	    	}	    		    	 

-	    }

-	    catch (MOAIDException ex) {

-	    	throw new TaskExecutionException(ex.getMessage(), ex);

-	      

-	    } catch (Exception e) {

-	    	Logger.error("CertificateValidation has an interal Error.", e);

-	    	throw new TaskExecutionException(e.getMessage(), e);

-	    	

-	    }

-	       

-	    

-	    finally {

-	    	

-	    }

-

-	}

-

-}

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyIdentityLinkTask.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyIdentityLinkTask.java
deleted file mode 100644
index f0a0024e5..000000000
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/modules/internal/tasks/VerifyIdentityLinkTask.java
+++ /dev/null
@@ -1,111 +0,0 @@
-package at.gv.egovernment.moa.id.auth.modules.internal.tasks;

-

-import static at.gv.egovernment.moa.id.auth.MOAIDAuthConstants.*;

-

-import java.io.IOException;

-import java.util.Map;

-

-import javax.servlet.http.HttpServletRequest;

-import javax.servlet.http.HttpServletResponse;

-

-import org.apache.commons.lang.StringEscapeUtils;

-

-import at.gv.egovernment.moa.id.advancedlogging.MOAIDEventConstants;

-import at.gv.egovernment.moa.id.advancedlogging.MOAReversionLogger;

-import at.gv.egovernment.moa.id.auth.AuthenticationServer;

-import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;

-import at.gv.egovernment.moa.id.auth.exception.MOAIDException;

-import at.gv.egovernment.moa.id.auth.exception.ParseException;

-import at.gv.egovernment.moa.id.auth.exception.WrongParametersException;

-import at.gv.egovernment.moa.id.auth.modules.AbstractAuthServletTask;

-import at.gv.egovernment.moa.id.auth.modules.TaskExecutionException;

-

-import at.gv.egovernment.moa.id.moduls.IRequest;

-import at.gv.egovernment.moa.id.moduls.RequestStorage;

-import at.gv.egovernment.moa.id.process.api.ExecutionContext;

-import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;

-import at.gv.egovernment.moa.id.util.ParamValidatorUtils;

-import at.gv.egovernment.moa.logging.Logger;

-

-/**

- * Verifies the identity link.<p/>

- * In detail:

- * <ul>

- * <li>Renames the moa session id.</li>

- * <li>Parses the identity link retrieved as {@code InfoBoxReadResponse} from POST parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE}.</li>

- * <li>Verifies the identity link.</li>

- * <li>Updates moa session.</li>

- * <li>Puts boolean flag {@code identityLinkAvailable} into {@code ExecutionContext}.</li>

- * </ul>

- * Expects:

- * <ul>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_SESSIONID PARAM_SESSIONID}</li>

- * <li>HttpServletRequest parameter {@linkplain at.gv.egovernment.moa.id.auth.MOAIDAuthConstants#PARAM_XMLRESPONSE PARAM_XMLRESPONSE} containing a {@code InfoBoxReadResponse}.</li>

- * </ul>

- * Result:

- * <ul>

- * <li>Identity link put into moa session.</li>

- * <li>Boolean flag {@code identityLinkAvailable} into {@code ExecutionContext}.</li>

- * </ul>

- * Code taken from {@link at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet}.

- * @see #execute(ExecutionContext, HttpServletRequest, HttpServletResponse)

- *

- */

-public class VerifyIdentityLinkTask extends AbstractAuthServletTask {

-

-	@Override

-	public void execute(ExecutionContext executionContext, HttpServletRequest req, HttpServletResponse resp)

-			throws TaskExecutionException {

-

-		// note: code taken from at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet

-

-		Logger.debug("POST VerifyIdentityLink");

-

-		setNoCachingHeaders(resp);

-		

-		Map<String, String> parameters;

-

-		try {

-			parameters = getParameters(req);

-		} catch (Exception e) {

-			Logger.error("Parsing mulitpart/form-data request parameters failed: " + e.getMessage());

-			throw new TaskExecutionException("Parsing mulitpart/form-data request parameters failed", new IOException(e.getMessage()));

-		}

-		

-		try {

-			

-			String sessionID = StringEscapeUtils.escapeHtml(req.getParameter(PARAM_SESSIONID));

-			// check parameter

-			if (!ParamValidatorUtils.isValidSessionID(sessionID)) {

-				throw new WrongParametersException("VerifyIdentityLink", PARAM_SESSIONID, "auth.12");

-			}

-			AuthenticationSession session = AuthenticationServer.getSession(sessionID);

-

-			IRequest pendingReq = RequestStorage.getPendingRequest(

-					(String) executionContext.get("pendingRequestID"));			

-			MOAReversionLogger.getInstance().logEvent(pendingReq.getOnlineApplicationConfiguration(), 

-					pendingReq, MOAIDEventConstants.AUTHPROCESS_BKU_DATAURL_IP, req.getRemoteHost());

-			

-			boolean identityLinkAvailable = AuthenticationServer.getInstance().verifyIdentityLink(pendingReq, session, parameters) != null;

-			AuthenticationSessionStoreage.storeSession(session);

-

-			executionContext.put("identityLinkAvailable", identityLinkAvailable);

-

-		} catch (ParseException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-

-		} catch (MOAIDException ex) {

-			throw new TaskExecutionException(ex.getMessage(), ex);

-

-		} catch (Exception e) {

-			Logger.error("IdentityLinkValidation has an interal Error.", e);

-			throw new TaskExecutionException(e.getMessage(), e);

-			

-		}

-

-		finally {

-			

-		}

-	}

-

-}