diff options
44 files changed, 1315 insertions, 823 deletions
| diff --git a/id/ConfigWebTool/ConfigurationInterface.iml b/id/ConfigWebTool/ConfigurationInterface.iml index bb7e047b2..20f45337e 100644 --- a/id/ConfigWebTool/ConfigurationInterface.iml +++ b/id/ConfigWebTool/ConfigurationInterface.iml @@ -57,7 +57,7 @@      <orderEntry type="library" name="Maven: iaik.prod:iaik_moa:1.5" level="project" />      <orderEntry type="library" name="Maven: jaxen:jaxen:1.0-FCS" level="project" />      <orderEntry type="library" name="Maven: saxpath:saxpath:1.0-FCS" level="project" /> -    <orderEntry type="library" name="Maven: joda-time:joda-time:1.6.2" level="project" /> +    <orderEntry type="library" name="Maven: joda-time:joda-time:2.2" level="project" />      <orderEntry type="library" name="Maven: org.jvnet.hyperjaxb3:hyperjaxb3-ejb-runtime:0.5.6" level="project" />      <orderEntry type="library" name="Maven: commons-lang:commons-lang:2.6" level="project" />      <orderEntry type="library" name="Maven: org.jvnet.jaxb2_commons:jaxb2-basics-runtime:0.6.2" level="project" /> diff --git a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralMOAIDConfig.java b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralMOAIDConfig.java index e16020782..08ea9f233 100644 --- a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralMOAIDConfig.java +++ b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralMOAIDConfig.java @@ -113,6 +113,7 @@ public class GeneralMOAIDConfig {  	private static Map<String, String> chainigmodelist;  	private String trustedCACerts = null; +  	private String defaultBKUOnline = "";  	private String defaultBKULocal = "https://127.0.0.1:3496/https-security-layer-request"; diff --git a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralStorkConfig.java b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralStorkConfig.java index 980aa4731..8b78c62a3 100644 --- a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralStorkConfig.java +++ b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/GeneralStorkConfig.java @@ -31,14 +31,18 @@ import at.gv.egovernment.moa.id.commons.db.dao.config.ForeignIdentities;  import at.gv.egovernment.moa.id.commons.db.dao.config.MOAIDConfiguration;  import at.gv.egovernment.moa.id.commons.db.dao.config.STORK;  import at.gv.egovernment.moa.id.commons.db.dao.config.StorkAttribute; +import org.apache.log4j.Logger;  public class GeneralStorkConfig {  	private List<CPEPS> cpepslist;  	private List<StorkAttribute> attributes;  	private int qaa; +    private static final Logger log = Logger.getLogger(GeneralStorkConfig.class); + +    public void parse(MOAIDConfiguration config) { +        log.error("STARTED STORK CONFIG"); -	public void parse(MOAIDConfiguration config) {  		if (config != null) {  			AuthComponentGeneral auth = config.getAuthComponentGeneral(); diff --git a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/oa/OASTORKConfig.java b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/oa/OASTORKConfig.java index 9a65e4ab5..929a3673c 100644 --- a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/oa/OASTORKConfig.java +++ b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/data/oa/OASTORKConfig.java @@ -24,6 +24,7 @@ package at.gv.egovernment.moa.id.configuration.data.oa;  import java.util.ArrayList;  import java.util.List; +  import at.gv.egovernment.moa.id.commons.db.ConfigurationDBRead;  import at.gv.egovernment.moa.id.commons.db.dao.config.AttributeProviderPlugin;  import at.gv.egovernment.moa.id.commons.db.dao.config.AuthComponentOA; @@ -31,6 +32,7 @@ import at.gv.egovernment.moa.id.commons.db.dao.config.OASTORK;  import at.gv.egovernment.moa.id.commons.db.dao.config.OAStorkAttribute;  import at.gv.egovernment.moa.id.commons.db.dao.config.OnlineApplication;  import at.gv.egovernment.moa.id.commons.db.dao.config.StorkAttribute; +import at.gv.egovernment.moa.logging.Logger;  import at.gv.egovernment.moa.id.protocols.stork2.AttributeProviderFactory;  public class OASTORKConfig { @@ -66,6 +68,7 @@ public class OASTORKConfig {  				// prepare attribute helper list  				attributes = new ArrayList<AttributeHelper>(); +                try {  				for(StorkAttribute current : ConfigurationDBRead.getMOAIDConfiguration().getAuthComponentGeneral().getForeignIdentities().getSTORK().getAttributes()) {  					AttributeHelper tmp = null; @@ -89,6 +92,9 @@ public class OASTORKConfig {  				// Sorry.  				if (attributeProviderPlugins.isEmpty())  					attributeProviderPlugins.add(new AttributeProviderPlugin()); +				} catch (NullPointerException ex) { +                    Logger.error("Nullpointerexception encountered in Configurationinterface"); +                }  			}  		}  	} diff --git a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/struts/action/EditGeneralConfigAction.java b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/struts/action/EditGeneralConfigAction.java index c9e834662..989641f36 100644 --- a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/struts/action/EditGeneralConfigAction.java +++ b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/struts/action/EditGeneralConfigAction.java @@ -23,12 +23,7 @@  package at.gv.egovernment.moa.id.configuration.struts.action;  import java.math.BigInteger; -import java.util.ArrayList; -import java.util.Arrays; -import java.util.Date; -import java.util.List; -import java.util.Map; -import java.util.Set; +import java.util.*;  import javax.servlet.http.HttpServletRequest;  import javax.servlet.http.HttpServletResponse; @@ -96,7 +91,8 @@ public class EditGeneralConfigAction extends ActionSupport  	private String formID;  	public String loadConfig() { -		HttpSession session = request.getSession(); + +        HttpSession session = request.getSession();  		if (session == null) {  			log.info("No http Session found.");  			return Constants.STRUTS_ERROR; @@ -113,8 +109,16 @@ public class EditGeneralConfigAction extends ActionSupport  			moaconfig.parse(dbconfig);  			storkconfig = new GeneralStorkConfig();  			storkconfig.parse(dbconfig); -			 -			ConfigurationDBUtils.closeSession(); + +            if (moaconfig == null) { +                log.error("MOA configuration is null"); +            } + +            if (storkconfig == null) { +                log.error("Stork configuration is null"); +            } + +            ConfigurationDBUtils.closeSession();  			formID = Random.nextRandom();  			session.setAttribute(Constants.SESSION_FORMID, formID); @@ -133,7 +137,7 @@ public class EditGeneralConfigAction extends ActionSupport  			log.info("No http Session found.");  			return Constants.STRUTS_ERROR;  		} -		 +  		Object authUserObj = session.getAttribute(Constants.SESSION_AUTH);  		authUser = (AuthenticatedUser) authUserObj; @@ -161,7 +165,7 @@ public class EditGeneralConfigAction extends ActionSupport  			errors.addAll(new StorkConfigValidator().validate(storkconfig));   			if (errors.size() > 0) { -				log.info("General MOA-ID configuration has some erros."); +				log.info("General MOA-ID configuration has some errors.");  				for (String el : errors)  					addActionError(el);	 @@ -198,7 +202,24 @@ public class EditGeneralConfigAction extends ActionSupport  	}  	private String saveFormToDatabase() { -		 + +        log.debug("Saving form to database"); +        log.error("Saving form to db"); +        log.info("SV frm db"); + +        for (Object obj : Collections.list(request.getParameterNames())) { +            log.error(" PARAM: " + obj.toString()); +        } +        for (Object obj : Collections.list(request.getSession().getAttributeNames())) { +            log.error(" SES PARAM: " + obj.toString()); +        } + +        try { +            log.error(" ASSERTION " + moaconfig.getTimeoutAssertion()); +        } catch (Exception ex) { +            ex.printStackTrace(); +        } +  		MOAIDConfiguration oldconfig = ConfigurationDBRead.getMOAIDConfiguration();  		AuthComponentGeneral oldauth = null;  		if (oldconfig != null) { @@ -269,7 +290,8 @@ public class EditGeneralConfigAction extends ActionSupport  		dbauthgeneral.setTrustManagerRevocationChecking(moaconfig.isTrustmanagerrevocationcheck()); -		 + +  		Protocols dbprotocols = dbauth.getProtocols();  		if (dbprotocols == null) {  			dbprotocols = new Protocols(); @@ -412,6 +434,7 @@ public class EditGeneralConfigAction extends ActionSupport  //		}  		DefaultBKUs dbbkus = dbconfig.getDefaultBKUs(); +  		if (dbbkus == null) {  			dbbkus = new DefaultBKUs();  			dbconfig.setDefaultBKUs(dbbkus); @@ -475,16 +498,28 @@ public class EditGeneralConfigAction extends ActionSupport  		//TODO: Set STORK Config!!!  		if (oldauth != null) { -			ForeignIdentities oldforeign = oldauth.getForeignIdentities(); +            ForeignIdentities oldforeign = oldauth.getForeignIdentities();  			if (oldforeign != null) {  				STORK oldstork = oldforeign.getSTORK(); -				if (oldstork != null) -					oldstork = new STORK(); +                if (oldstork == null) +                    oldstork = new STORK(); +                try { +                log.error("QAAAA " + storkconfig.getDefaultQaa());  				oldstork.setQualityAuthenticationAssuranceLevel(storkconfig.getDefaultQaa());  				oldstork.setAttributes(storkconfig.getAttributes());  				oldstork.setCPEPS(storkconfig.getCpepslist());  				dbforeign.setSTORK(oldstork); +                } catch (Exception e) { +                    e.printStackTrace(); +                } + +                try{ +                   log.error("CPEPS LIST: " + storkconfig.getCpepslist().size() ); +                    log.error("CPEPS 1:" + storkconfig.getCpepslist().get(0).getCountryCode() +storkconfig.getCpepslist().get(0).getURL()); +                }   catch (Exception ex) { +                    ex.printStackTrace(); +                }  			}  		} @@ -626,6 +661,7 @@ public class EditGeneralConfigAction extends ActionSupport  	 */  	public void setMoaconfig(GeneralMOAIDConfig moaconfig) {  		this.moaconfig = moaconfig; +        log.error("MOA CONFIG SET");  	}  	/** @@ -644,6 +680,7 @@ public class EditGeneralConfigAction extends ActionSupport  	 */  	public void setStorkconfig(GeneralStorkConfig storkconfig) {  		this.storkconfig = storkconfig; +        log.error("STORK CONFIG SET");  	}  	/** @@ -659,8 +696,8 @@ public class EditGeneralConfigAction extends ActionSupport  	public void setFormID(String formID) {  		this.formID = formID;  	} -	 -	 + +  } diff --git a/id/ConfigWebTool/src/main/webapp/js/common.js b/id/ConfigWebTool/src/main/webapp/js/common.js index 45f40f5b8..5fbbdafd1 100644 --- a/id/ConfigWebTool/src/main/webapp/js/common.js +++ b/id/ConfigWebTool/src/main/webapp/js/common.js @@ -221,7 +221,12 @@ function oaOnLoad() {  function newPeps() {  	var target = $(document.getElementById("stork_pepslist").getElementsByTagName("tr")).last()[0];  	var clone = target.cloneNode(true); -	var lastindex = parseInt(clone.innerHTML.match(/name="storkconfig.cpepslist\[(\d)/)[1]); +	try { +        var lastindex = parseInt(clone.innerHTML.match(/name="storkconfig.cpepslist\[(\d)/)[1]); +    } catch (err) { + +        var lastindex = 1; +    }  	var nextindex = lastindex + 1;  	clone.innerHTML = clone.innerHTML.replace(/name="storkconfig.cpepslist\[\d/g, 'name="storkconfig.cpepslist[' + nextindex);  	clone.innerHTML = clone.innerHTML.replace(/(.*" value=").*?(".*)/g, '$1$2'); diff --git a/id/ConfigWebTool/src/main/webapp/jsp/editMOAConfig.jsp b/id/ConfigWebTool/src/main/webapp/jsp/editMOAConfig.jsp index de5e4841b..bdafdd40a 100644 --- a/id/ConfigWebTool/src/main/webapp/jsp/editMOAConfig.jsp +++ b/id/ConfigWebTool/src/main/webapp/jsp/editMOAConfig.jsp @@ -242,14 +242,19 @@  								key="webpages.moaconfig.stork.qaa.default"  								labelposition="left" />  							<h4><%=LanguageHelper.getGUIString("webpages.moaconfig.stork.pepslist", request) %></h4> -							<table id="stork_pepslist"> +                            <table id="stork_pepslist">  								<tr><th>Country Shortcode</th><th>PEPS URL</th>  								<s:iterator value="storkconfig.cpepslist" status="stat">  								  <tr><td><s:textfield name="storkconfig.cpepslist[%{#stat.index}].countryCode" value="%{countryCode}" cssClass="textfield_short"/></td>  								      <td><s:textfield name="storkconfig.cpepslist[%{#stat.index}].URL" value="%{URL}" cssClass="textfield_long"/></td>  								      <td><input type="button" value="<%=LanguageHelper.getGUIString("webpages.moaconfig.stork.removepeps", request) %>" onclick='this.parentNode.parentNode.parentNode.removeChild(this.parentNode.parentNode);'/></td></tr>  								</s:iterator> -							</table> +                                <s:if test="%{storkconfig.cpepslist == null}"> +                                    <tr><td><s:textfield name="storkconfig.cpepslist[0].countryCode" value="CC" cssClass="textfield_short"/></td> +                                        <td><s:textfield name="storkconfig.cpepslist[0].URL" value="http://" cssClass="textfield_long"/></td> +                                        <td><input type="button" value="<%=LanguageHelper.getGUIString("webpages.moaconfig.stork.removepeps", request) %>" onclick='this.parentNode.parentNode.parentNode.removeChild(this.parentNode.parentNode);'/></td></tr> +                                </s:if> +                            </table>  							<input type="button" value="<%=LanguageHelper.getGUIString("webpages.moaconfig.stork.newpeps", request) %>" onclick='newPeps();' />  							<h4><%=LanguageHelper.getGUIString("webpages.moaconfig.stork.attributes.heading", request) %></h4>  							<table id="stork_attributelist"> diff --git a/id/oa/moa-id-oa.iml b/id/oa/moa-id-oa.iml index 0b7bf00de..6d9905e25 100644 --- a/id/oa/moa-id-oa.iml +++ b/id/oa/moa-id-oa.iml @@ -13,8 +13,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <sourceFolder url="file://$MODULE_DIR$/src/main/resources" type="java-resource" /> diff --git a/id/server/auth/moa-id-auth.iml b/id/server/auth/moa-id-auth.iml index d0aa970fc..f61dfa171 100644 --- a/id/server/auth/moa-id-auth.iml +++ b/id/server/auth/moa-id-auth.iml @@ -14,8 +14,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/resources" type="java-resource" />        <excludeFolder url="file://$MODULE_DIR$/target" /> diff --git a/id/server/auth/src/main/webapp/WEB-INF/urlrewrite.xml b/id/server/auth/src/main/webapp/WEB-INF/urlrewrite.xml index 563ee04dd..59d6d6cce 100644 --- a/id/server/auth/src/main/webapp/WEB-INF/urlrewrite.xml +++ b/id/server/auth/src/main/webapp/WEB-INF/urlrewrite.xml @@ -64,9 +64,13 @@          <from>^/stork2/SendPEPSAuthnRequest$</from>          <to type="forward">/dispatcher?mod=id_stork2&action=AuthenticationRequest&%{query-string}</to>      </rule> +    <rule match-type="regex"> +        <from>^/moa-id-auth/SendPEPSAuthnRequest$</from> +        <to type="forward">/dispatcher?mod=id_stork2&action=AuthenticationRequest&%{query-string}</to> +    </rule> -	<rule match-type="regex"> +    <rule match-type="regex">  		<from>^/oauth2/auth\\?(.*)$</from>  		<to type="forward">/dispatcher?mod=id_oauth20&action=AUTH&%{query-string}</to>  	</rule> diff --git a/id/server/data/deploy/conf/moa-id/stork/SamlEngine.xml b/id/server/data/deploy/conf/moa-id/stork/SamlEngine.xml index e6a29ea18..75245d8f0 100644 --- a/id/server/data/deploy/conf/moa-id/stork/SamlEngine.xml +++ b/id/server/data/deploy/conf/moa-id/stork/SamlEngine.xml @@ -33,5 +33,21 @@                  </configuration>          </instance> +        <instance name="VIDP"> +                <!-- Configurations parameters StorkSamlEngine  --> +                <configuration name="SamlEngineConf"> +                        <parameter name="fileConfiguration" value="StorkSamlEngine_VIDP.xml" /> +                </configuration> + +                <!-- Settings module signature--> +                <configuration name="SignatureConf"> +                        <!-- Specific signature module --> +                        <parameter name="class" value="eu.stork.peps.auth.engine.core.impl.SignSW" /> +                        <!-- Settings specific module --> +                        <parameter name="fileConfiguration" value="SignModule_incoming.xml" /> +                </configuration> +        </instance> + +  </instances> diff --git a/id/server/data/deploy/conf/moa-id/stork/StorkSamlEngine_VIDP.xml b/id/server/data/deploy/conf/moa-id/stork/StorkSamlEngine_VIDP.xml new file mode 100644 index 000000000..fb786529a --- /dev/null +++ b/id/server/data/deploy/conf/moa-id/stork/StorkSamlEngine_VIDP.xml @@ -0,0 +1,93 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd"> + +<properties> +	<comment>SAML constants for AuthnRequests and Responses.</comment> + +	<!-- +		Types of consent obtained from the user for this authentication and +		data transfer. +		Allow values: 'unspecified'. +	--> +	<entry key="consentAuthnRequest">unspecified</entry> +	 +	<!-- +	Allow values: 'obtained', 'prior', 'current-implicit', 'current-explicit', 'unspecified'. +	--> +	<entry key="consentAuthnResponse">obtained</entry> + +	<!--URI representing the classification of the identifier +		Allow values: 'entity'. +	--> +	<entry key="formatEntity">entity</entry> + +	<!--Only HTTP-POST binding is only supported for inter PEPS--> +	<!--The SOAP binding is only supported for direct communication between SP-MW and VIdP--> +	<entry key="protocolBinding">HTTP-POST</entry> +	 +	 +	 +	 +	<!--URI representing the classification of the identifier +		Allow values: 'entity'. +		<entry key="eIDSectorShare">true</entry> +		<entry key="eIDCrossSectorShare">true</entry> +		<entry key="eIDCrossBorderShare">true</entry> +	--> +	 +	 +	 +	<!-- A friendly name for the attribute that can be displayed to a user --> +	<entry key="friendlyName">false</entry> +	 +	<!-- A friendly name for the attribute that can be displayed to a user --> +	<entry key="isRequired">true</entry> +	 +	<!--PEPS in the Service Provider's country--> +	<entry key="requester">http://S-PEPS.gov.xx</entry> + +	<!--PEPS in the citizen's origin country--> +	<entry key="responder">http://C-PEPS.gov.xx</entry> + +	<!--Subject cannot be confirmed on or after this seconds time (positive number)--> +	<entry key="timeNotOnOrAfter">300</entry> +	 +	<!--Validation IP of the response--> +	<entry key="ipAddrValidation">false</entry> +	 +	 +	<!--Subject Attribute Definitions--> +	<entry key="eIdentifier">http://www.stork.gov.eu/1.0/eIdentifier</entry> +	<entry key="givenName">http://www.stork.gov.eu/1.0/givenName</entry> +	<entry key="surname">http://www.stork.gov.eu/1.0/surname</entry> +	<entry key="inheritedFamilyName">http://www.stork.gov.eu/1.0/inheritedFamilyName</entry> +	<entry key="adoptedFamilyName">http://www.stork.gov.eu/1.0/adoptedFamilyName</entry> +	<entry key="gender">http://www.stork.gov.eu/1.0/gender</entry> +	<entry key="dateOfBirth">http://www.stork.gov.eu/1.0/dateOfBirth</entry> +	<entry key="countryCodeOfBirth">http://www.stork.gov.eu/1.0/countryCodeOfBirth</entry> +	<entry key="nationalityCode">http://www.stork.gov.eu/1.0/nationalityCode</entry> +	<entry key="maritalStatus">http://www.stork.gov.eu/1.0/maritalStatus</entry> +	<entry key="residenceAddress">http://www.stork.gov.eu/1.0/residenceAddress</entry> +	<entry key="eMail">http://www.stork.gov.eu/1.0/eMail</entry> +	<entry key="academicTitle">http://www.stork.gov.eu/1.0/academicTitle</entry> +	<entry key="pseudonym">http://www.stork.gov.eu/1.0/pseudonym</entry> +	<entry key="age">http://www.stork.gov.eu/1.0/age</entry> +	<entry key="isAgeOver">http://www.stork.gov.eu/1.0/isAgeOver</entry> + +	<entry key="textResidenceAddress">http://www.stork.gov.eu/1.0/textResidenceAddress</entry> +	<entry key="canonicalResidenceAddress">http://www.stork.gov.eu/1.0/canonicalResidenceAddress</entry> + +	<entry key="title">http://www.stork.gov.eu/1.0/title</entry> +	<entry key="residencePermit">http://www.stork.gov.eu/1.0/residencePermit</entry> + +	<entry key="signedDoc">http://www.stork.gov.eu/1.0/signedDoc</entry> +	<entry key="citizen509Certificate">http://www.stork.gov.eu/1.0/citizen509Certificate</entry> +	 +	<entry key="newAttribute1">http://www.stork.gov.eu/1.0/newAttribute1</entry> +	<entry key="newAttribute2">http://www.stork.gov.eu/1.0/newAttribute2</entry> +	<entry key="hasDegree">http://www.stork.gov.eu/1.0/hasDegree</entry> +	<entry key="mandateContent">http://www.stork.gov.eu/1.0/mandateContent</entry> +	<entry key="representative">http://www.stork.gov.eu/1.0/representative</entry> +	<entry key="represented">http://www.stork.gov.eu/1.0/represented</entry> +	 +</properties> diff --git a/id/server/idserverlib/moa-id-lib.iml b/id/server/idserverlib/moa-id-lib.iml index 1c04295d7..cf1b34b4b 100644 --- a/id/server/idserverlib/moa-id-lib.iml +++ b/id/server/idserverlib/moa-id-lib.iml @@ -1,8 +1,8 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <sourceFolder url="file://$MODULE_DIR$/src/test/java" isTestSource="true" /> diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/AuthenticationServer.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/AuthenticationServer.java index ce5aa15c3..6f6d9611a 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/AuthenticationServer.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/AuthenticationServer.java @@ -125,7 +125,7 @@ import at.gv.util.xsd.srzgw.MISType;  import at.gv.util.xsd.srzgw.MISType.Filters;  import eu.stork.oasisdss.api.AdditionalProfiles;  import eu.stork.oasisdss.api.ApiUtils; -import eu.stork.oasisdss.api.ApiUtilsException; +import eu.stork.oasisdss.api.exceptions.ApiUtilsException;  import eu.stork.oasisdss.api.Profiles;  import eu.stork.oasisdss.api.QualityLevels;  import eu.stork.oasisdss.api.SignatureTypes; diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/config/stork/STORKConfig.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/config/stork/STORKConfig.java index d655dc7f2..4dec2c32e 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/config/stork/STORKConfig.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/config/stork/STORKConfig.java @@ -68,6 +68,12 @@ public class STORKConfig {  		//List<at.gv.egovernment.moa.id.commons.db.dao.config.CPEPS> cpeps = stork.getCPEPS();
          List<at.gv.egovernment.moa.id.commons.db.dao.config.CPEPS> cpeps = new ArrayList<at.gv.egovernment.moa.id.commons.db.dao.config.CPEPS>();   // TODO Change this
 +        try {
 +            cpeps = stork.getCPEPS();
 +        }   catch (NullPointerException ex) {
 +            Logger.error("CPEPS not configured!");
 +        }
 +
  		cpepsMap = new HashMap<String, CPEPS>();
  		if (cpeps != null) {
 diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/iaik/config/CertStoreConfigurationImpl.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/iaik/config/CertStoreConfigurationImpl.java index 65634bed3..b6fe20a61 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/iaik/config/CertStoreConfigurationImpl.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/iaik/config/CertStoreConfigurationImpl.java @@ -2,19 +2,19 @@   * Copyright 2014 Federal Chancellery Austria   * MOA-ID has been developed in a cooperation between BRZ, the Federal   * Chancellery Austria - ICT staff unit, and Graz University of Technology. - *  + *   * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by   * the European Commission - subsequent versions of the EUPL (the "Licence");   * You may not use this work except in compliance with the Licence.   * You may obtain a copy of the Licence at:   * http://www.osor.eu/eupl/ - *  + *   * Unless required by applicable law or agreed to in writing, software   * distributed under the Licence is distributed on an "AS IS" basis,   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   * See the Licence for the specific language governing permissions and   * limitations under the Licence. - *  + *   * This product combines work with different licenses. See the "NOTICE" text   * file for details on the various modules and licenses.   * The "NOTICE" text file is part of the distribution. Any derivative works @@ -46,98 +46,120 @@  package at.gv.egovernment.moa.id.iaik.config; -import java.io.File; -  import at.gv.egovernment.moa.id.config.ConfigurationException;  import at.gv.egovernment.moa.id.config.ConfigurationProvider;  import at.gv.egovernment.moa.id.iaik.servertools.observer.ObservableImpl; -import at.gv.egovernment.moa.util.FileUtils; +import at.gv.egovernment.moa.logging.Logger;  import iaik.pki.store.certstore.CertStoreConfiguration;  import iaik.pki.store.certstore.CertStoreParameters;  import iaik.pki.store.certstore.CertStoreTypes;  import iaik.pki.store.certstore.directory.DirectoryCertStoreParameters; +import java.io.File; +  /**   * Implementation of interface needed to initialize an IAIK JSSE <code>TrustManager</code> + *   * @author Paul Ivancsics   * @version $Id$   */ -public class CertStoreConfigurationImpl extends ObservableImpl  -  implements CertStoreConfiguration, DirectoryCertStoreParameters { -  /** identifies the rootDirectory */ -  private String rootDirectory; -  /** ConfigurationProvider */ -  private ConfigurationProvider conf; -  /** Array for storing all CertStoreParameters */ -  private CertStoreParameters[] parameters; - -  /** -   * Create a new <code>CertStoreConfigurationImpl</code>. -   *  -   * @param conf The MOA configuration from which the configuration data is -   * @throws ConfigurationException an any config-error -   * being read. -   */ -  public CertStoreConfigurationImpl(ConfigurationProvider conf) throws ConfigurationException { -    this.conf=conf; -     -    String certStoreRootDirParam = conf.getCertstoreDirectory(); -     -    if (certStoreRootDirParam == null) -      throw new ConfigurationException( -        "config.08", new Object[] {"CertStoreDirectory"}); - -		rootDirectory = FileUtils.makeAbsoluteURL(certStoreRootDirParam, conf.getRootConfigFileDir()); -		if(rootDirectory.startsWith("file:")) rootDirectory = rootDirectory.substring(6); -		File f = new File(rootDirectory); -				if (!f.isDirectory()) -					throw new ConfigurationException( -						"config.05", new Object[] {"CertStoreDirectory"}); -     -    parameters = new CertStoreParameters[] { this }; -  } - -  /** -   * @see iaik.pki.store.certstore.CertStoreConfiguration#getParameters() -   */ -  public CertStoreParameters[] getParameters() { -    return parameters; -  } - -  /** -   * @see iaik.pki.store.certstore.directory.DirectoryCertStoreParameters#getRootDirectory() -   */ -  public String getRootDirectory() { -    return rootDirectory; -  } - -  /** -   * @see iaik.pki.store.certstore.directory.DirectoryCertStoreParameters#createNew() -   */ -  public boolean createNew() { -    return false; -  } - -  /** -   * @see iaik.pki.store.certstore.CertStoreParameters#getId() -   */ -  public String getId() { -    return "MOA ID Directory CertStore"; -  } - -  /** -   * @see iaik.pki.store.certstore.CertStoreParameters#isReadOnly() -   */ -  public boolean isReadOnly() { -    return false; -  } - -  /** -   * @return <code>CertStoreTypes.DIRECTORY</code> -   * @see iaik.pki.store.certstore.CertStoreParameters#getType() -   */ -  public String getType() { -    return CertStoreTypes.DIRECTORY; -  } +public class CertStoreConfigurationImpl extends ObservableImpl +        implements CertStoreConfiguration, DirectoryCertStoreParameters { +    /** +     * identifies the rootDirectory +     */ +    private String rootDirectory; +    /** +     * ConfigurationProvider +     */ +    private ConfigurationProvider conf; +    /** +     * Array for storing all CertStoreParameters +     */ +    private CertStoreParameters[] parameters; + +    /** +     * Create a new <code>CertStoreConfigurationImpl</code>. +     * +     * @param conf The MOA configuration from which the configuration data is +     * @throws ConfigurationException an any config-error +     *                                being read. +     */ +    public CertStoreConfigurationImpl(ConfigurationProvider conf) throws ConfigurationException { +        this.conf = conf; + +        String certStoreRootDirParam = conf.getCertstoreDirectory(); + +        if (certStoreRootDirParam == null) +            throw new ConfigurationException( +                    "config.08", new Object[]{"CertStoreDirectory"}); + +        //rootDirectory = FileUtils.makeAbsoluteURL(certStoreRootDirParam, conf.getRootConfigFileDir()); +        rootDirectory = certStoreRootDirParam; +        Logger.error("Using file: " + rootDirectory); +        if (rootDirectory.startsWith("file:")) rootDirectory = rootDirectory.substring(5); +        Logger.error("Using file2: " + rootDirectory); + +        File f = new File(rootDirectory); +        //Logger.error("Using file: " + certStoreRootDirParam + " param: " + conf.getRootConfigFileDir()); + +        if (!f.exists()) { +            Logger.error("File does not exists: " + f.getAbsolutePath()); +            throw new ConfigurationException( +                    "config.05", new Object[]{"CertStoreDirectory"}); +        } + +        if (!f.isDirectory()) { +            Logger.error("File is not a directory: " + f.getAbsolutePath()); +            throw new ConfigurationException( +                    "config.05", new Object[]{"CertStoreDirectory"}); +        } + + +        parameters = new CertStoreParameters[]{this}; +    } + +    /** +     * @see iaik.pki.store.certstore.CertStoreConfiguration#getParameters() +     */ +    public CertStoreParameters[] getParameters() { +        return parameters; +    } + +    /** +     * @see iaik.pki.store.certstore.directory.DirectoryCertStoreParameters#getRootDirectory() +     */ +    public String getRootDirectory() { +        return rootDirectory; +    } + +    /** +     * @see iaik.pki.store.certstore.directory.DirectoryCertStoreParameters#createNew() +     */ +    public boolean createNew() { +        return false; +    } + +    /** +     * @see iaik.pki.store.certstore.CertStoreParameters#getId() +     */ +    public String getId() { +        return "MOA ID Directory CertStore"; +    } + +    /** +     * @see iaik.pki.store.certstore.CertStoreParameters#isReadOnly() +     */ +    public boolean isReadOnly() { +        return false; +    } + +    /** +     * @return <code>CertStoreTypes.DIRECTORY</code> +     * @see iaik.pki.store.certstore.CertStoreParameters#getType() +     */ +    public String getType() { +        return CertStoreTypes.DIRECTORY; +    }  } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AttributeCollector.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AttributeCollector.java index b7fa37757..288e71f58 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AttributeCollector.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AttributeCollector.java @@ -1,11 +1,9 @@  package at.gv.egovernment.moa.id.protocols.stork2; -import java.util.ArrayList; -import java.util.List; -  import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;  import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;  import at.gv.egovernment.moa.id.auth.exception.MOAIDException; +import at.gv.egovernment.moa.id.auth.stork.VelocityProvider;  import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;  import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProvider;  import at.gv.egovernment.moa.id.config.auth.OAAuthParameter; @@ -13,144 +11,256 @@ import at.gv.egovernment.moa.id.moduls.IAction;  import at.gv.egovernment.moa.id.moduls.IRequest;  import at.gv.egovernment.moa.id.storage.AssertionStorage;  import at.gv.egovernment.moa.logging.Logger; +import eu.stork.peps.auth.commons.IPersonalAttributeList; +import eu.stork.peps.auth.commons.PersonalAttribute; +import eu.stork.peps.auth.commons.STORKAuthnRequest; +import eu.stork.peps.auth.commons.STORKAuthnResponse; +import eu.stork.peps.auth.engine.STORKSAMLEngine; +import eu.stork.peps.exceptions.STORKSAMLEngineException; +import org.apache.commons.io.IOUtils; +import org.apache.velocity.Template; +import org.apache.velocity.VelocityContext; +import org.apache.velocity.app.VelocityEngine; +import org.opensaml.common.impl.SecureRandomIdentifierGenerator;  import javax.servlet.http.HttpServletRequest;  import javax.servlet.http.HttpServletResponse; - -import org.opensaml.common.impl.SecureRandomIdentifierGenerator; - -import eu.stork.peps.auth.commons.IPersonalAttributeList; -import eu.stork.peps.auth.commons.PersonalAttribute; +import javax.servlet.http.HttpSession; +import java.io.IOException; +import java.io.StringWriter; +import java.util.ArrayList; +import java.util.List;  /**   * the AttributeCollector Action tries to get all requested attributes from a set of {@link AttributeProvider} Plugins.   * The class is called whenever the {@link AuthenticationRequest} Action is invoked and checks for missing attributes.   * Furthermore, the class can handle direct posts. That is when the class triggers an attribute query which needs user   * interaction, redirect to another portal, etc. The redirect will hit here and the class can continue to fetch attributes. - *  + * <p/>   * TODO how do we treat mandatory and optional attributes? - *    */  public class AttributeCollector implements IAction { -	 -	/** The Constant ARTIFACT_ID. */ -	private static final String ARTIFACT_ID = "artifactId"; -	 + +    /** +     * The Constant ARTIFACT_ID. +     */ +    private static final String ARTIFACT_ID = "artifactId"; +    private DataContainer container; +    private HttpServletResponse httpResp; + +      /* (non-Javadoc)       * @see at.gv.egovernment.moa.id.moduls.IAction#processRequest(at.gv.egovernment.moa.id.moduls.IRequest, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, at.gv.egovernment.moa.id.auth.data.AuthenticationSession)       */      public String processRequest(IRequest req, HttpServletRequest httpReq, HttpServletResponse httpResp, AuthenticationSession moasession) throws MOAIDException { -		// read configuration parameters of OA -		OAAuthParameter oaParam = AuthConfigurationProvider.getInstance().getOnlineApplicationParameter(moasession.getPublicOAURLPrefix()); -		if (oaParam == null) -			throw new AuthenticationException("stork.12", new Object[] { moasession.getPublicOAURLPrefix() }); - -    	// find the attribute provider plugin that can handle the response -		IPersonalAttributeList newAttributes = null; -		for (AttributeProvider current : AttributeProviderFactory.getConfiguredPlugins(oaParam.getStorkAPs())) -			try { -				newAttributes = current.parse(httpReq); -			} catch (UnsupportedAttributeException e1) { -				// the current provider cannot find anything familiar within the -				// provided httpreq. Try the next one. -			} - -		if (null == newAttributes) { -			// we do not have a provider which is capable of fetching something -			// from the received httpreq. -			// TODO should we continue with the next attribute? -			Logger.error("No attribute could be retrieved from the response the attribute provider gave us."); -			throw new MOAIDException("stork.11", null); -		} - -    	// - fetch the container -		String artifactId = (String) httpReq.getAttribute(ARTIFACT_ID); -		DataContainer container; -		try { -			container = AssertionStorage.getInstance().get(artifactId, DataContainer.class); -		} catch (MOADatabaseException e) { -			Logger.error("Error fetching incomplete Stork response from temporary storage. Most likely a timeout occured.", e); -			throw new MOAIDException("stork.11", null); -		} - -    	// - insert the embedded attribute(s) into the container -		for(PersonalAttribute current : newAttributes) -			container.getResponse().getPersonalAttributeList().add(current); -    	 -    	// see if we need some more attributes -    	return processRequest(container, httpReq, httpResp, moasession, oaParam); +        this.httpResp = httpResp; + +        // read configuration parameters of OA +        OAAuthParameter oaParam = AuthConfigurationProvider.getInstance().getOnlineApplicationParameter(moasession.getPublicOAURLPrefix()); +        if (oaParam == null) +            throw new AuthenticationException("stork.12", new Object[]{moasession.getPublicOAURLPrefix()}); + +        // find the attribute provider plugin that can handle the response +        IPersonalAttributeList newAttributes = null; +        for (AttributeProvider current : AttributeProviderFactory.getConfiguredPlugins(oaParam.getStorkAPs())) +            try { +                newAttributes = current.parse(httpReq); +            } catch (UnsupportedAttributeException e1) { +                // the current provider cannot find anything familiar within the +                // provided httpreq. Try the next one. +                // TODO check the loop +            } + +        if (null == newAttributes) { +            // we do not have a provider which is capable of fetching something +            // from the received httpreq. +            // TODO should we continue with the next attribute? +            Logger.error("No attribute could be retrieved from the response the attribute provider gave us."); +            throw new MOAIDException("stork.11", null); +        } + +        // - fetch the container +        String artifactId = (String) httpReq.getAttribute(ARTIFACT_ID); +        DataContainer container; +        try { +            container = AssertionStorage.getInstance().get(artifactId, DataContainer.class); +        } catch (MOADatabaseException e) { +            Logger.error("Error fetching incomplete Stork response from temporary storage. Most likely a timeout occured.", e); +            throw new MOAIDException("stork.11", null); +        } + + + +        // - insert the embedded attribute(s) into the container +        for (PersonalAttribute current : newAttributes) +            container.getResponse().getPersonalAttributeList().add(current); + +        // see if we need some more attributes +        return processRequest(container, httpReq, httpResp, moasession, oaParam);      } -     +      /**       * Checks if there are missing attributes and tries to fetch them. If there are no more attribute to fetch,       * this very method creates and sends the protocol result to the asking S-PEPS.       *       * @param container the {@link DataContainer} representing the status of the overall query.       * @return the string -     * @throws MOAIDException  +     * @throws MOAIDException       */      public String processRequest(DataContainer container, HttpServletRequest request, HttpServletResponse response, AuthenticationSession moasession, OAAuthParameter oaParam) throws MOAIDException { -    	// check if there are attributes we need to fetch -    	IPersonalAttributeList requestAttributeList = container.getRequest().getPersonalAttributeList(); -    	IPersonalAttributeList responseAttributeList = container.getResponse().getPersonalAttributeList(); -    	List<PersonalAttribute> missingAttributes = new ArrayList<PersonalAttribute>(); -    	for(PersonalAttribute current : requestAttributeList) -    		if(!responseAttributeList.containsKey(current)) -    			missingAttributes.add(current); -    	 -    	try { -	    	// for each attribute still missing -	    	for(PersonalAttribute currentAttribute : missingAttributes) { -	    	// - check if we can find a suitable AttributeProvider Plugin -				for (AttributeProvider currentProvider : AttributeProviderFactory.getConfiguredPlugins(oaParam.getStorkAPs())) { -					try { -						// - hand over control to the suitable plugin -						IPersonalAttributeList aquiredAttributes = currentProvider.acquire(currentAttribute, moasession); - -						// - add the aquired attribute to the container -						for(PersonalAttribute current : aquiredAttributes) -							container.getResponse().getPersonalAttributeList().add(current); -					} catch(UnsupportedAttributeException e) { -						// ok, try the next attributeprovider -					} catch(MOAIDException e) { -						// the current plugin had an error. Try the next one. -						// TODO we might want to add the non-fetchable attribute as "NotAvailable" to prevent an infinite loop -					} -	 -	    		} -	    	} -		} catch (ExternalAttributeRequestRequiredException e) { -			// the attribute request is ongoing and requires an external service. -			try { -				// memorize the container again -				// - generate new key -				String newArtifactId = new SecureRandomIdentifierGenerator() -						.generateIdentifier(); - -				// - put container in temporary store. -				AssertionStorage.getInstance().put(newArtifactId, container); - -				// add container-key to redirect embedded within the return URL -				e.getAp().performRedirect(AuthConfigurationProvider.getInstance().getPublicURLPrefix() + "?" + ARTIFACT_ID + "=" + newArtifactId, container.getRequest().getCitizenCountryCode(), request, response, oaParam); -			} catch (Exception e1) { -				// TODO should we return the response as is to the PEPS? -				Logger.error("Error putting incomplete Stork response into temporary storage", e); -				throw new MOAIDException("stork.11", null); -			} - -			return "12345"; // TODO what to do here? -		} -    	// build response -    	// done -    	return "12345"; // AssertionId +        // check if there are attributes we need to fetch +        this.httpResp = response; +        this.container = container; + +        IPersonalAttributeList requestAttributeList = container.getRequest().getPersonalAttributeList(); +        IPersonalAttributeList responseAttributeList = container.getResponse().getPersonalAttributeList(); +        List<PersonalAttribute> missingAttributes = new ArrayList<PersonalAttribute>(); +        for (PersonalAttribute current : requestAttributeList) +            if (!responseAttributeList.containsKey(current)) +                missingAttributes.add(current); + +        // Try to get all missing attributes +        try { +            // for each attribute still missing +            for (PersonalAttribute currentAttribute : missingAttributes) { +                // - check if we can find a suitable AttributeProvider Plugin +                for (AttributeProvider currentProvider : AttributeProviderFactory.getConfiguredPlugins(oaParam.getStorkAPs())) { +                    try { +                        // - hand over control to the suitable plugin +                        IPersonalAttributeList aquiredAttributes = currentProvider.acquire(currentAttribute, moasession); + +                        // - add the aquired attribute to the container +                        for (PersonalAttribute current : aquiredAttributes) +                            container.getResponse().getPersonalAttributeList().add(current); +                        //TODO: return after first AP  +                         +                    } catch (UnsupportedAttributeException e) { +                        // ok, try the next attributeprovider +                    } catch (MOAIDException e) { +                        // the current plugin had an error. Try the next one. +                        // TODO we might want to add the non-fetchable attribute as "NotAvailable" to prevent an infinite loop +                    } + +                } +            } + +            // build response +            generateSTORKResponse(); + +            // set new http response +            generateRedirectResponse(); +            response = httpResp; + +            return "12345"; // AssertionId + +        } catch (ExternalAttributeRequestRequiredException e) { +            // the attribute request is ongoing and requires an external service. +            try { +                // memorize the container again +                // - generate new key +                String newArtifactId = new SecureRandomIdentifierGenerator() +                        .generateIdentifier(); +                // - put container in temporary store. +                AssertionStorage.getInstance().put(newArtifactId, container); + +                // add container-key to redirect embedded within the return URL +                e.getAp().performRedirect(AuthConfigurationProvider.getInstance().getPublicURLPrefix() + "?" + ARTIFACT_ID + "=" + newArtifactId, container.getRequest().getCitizenCountryCode(), request, response, oaParam); + + +            } catch (Exception e1) { +                // TODO should we return the response as is to the PEPS? +                Logger.error("Error putting incomplete Stork response into temporary storage", e); +                throw new MOAIDException("stork.11", null); +            } + +            return "12345"; // TODO what to do here? +        } + + +    } + + +    private void generateSTORKResponse() throws MOAIDException { +        STORKAuthnResponse authnResponse = container.getResponse(); +        STORKAuthnRequest authnRequest = container.getRequest(); + +        try { +            //Get SAMLEngine instance +            STORKSAMLEngine engine = STORKSAMLEngine.getInstance("VIDP"); +            Logger.debug("Starting generation of SAML response"); +            authnResponse = engine.generateSTORKAuthnResponse(authnRequest, authnResponse, container.getRemoteAddress(), false); + +            //generateSAML Token +            Logger.info("SAML response succesfully generated!"); +        } catch (STORKSAMLEngineException e) { +            Logger.error("Failed to generate STORK SAML Response", e); +            throw new MOAIDException("stork.05", null); +        } + +        Logger.info("STORK SAML Response message succesfully generated "); +        String statusCodeValue = authnResponse.getStatusCode(); + +        try { +            Logger.debug("authn saml plain:" + authnResponse.getTokenSaml()); +            Logger.debug("authn saml string:" + new String(authnResponse.getTokenSaml())); // works +            Logger.debug("authn saml encodedx: " + new String(org.bouncycastle.util.encoders.Base64.encode(IOUtils.toString(authnResponse.getTokenSaml()).getBytes()))); + +        } catch (IOException e) { +            e.printStackTrace(); +        } + +        container.setResponse(authnResponse); + +    } + + +    private void generateRedirectResponse() { +        STORKAuthnResponse authnResponse = container.getResponse(); +        STORKAuthnRequest authnRequest = container.getRequest(); + + +        // preparing redirection for the client + +        try { +            VelocityEngine velocityEngine = VelocityProvider.getClassPathVelocityEngine(); +            Template template = velocityEngine.getTemplate("/resources/templates/stork2_postbinding_template.html"); +            VelocityContext context = new VelocityContext(); + +            context.put("SAMLResponse", new String(org.bouncycastle.util.encoders.Base64.encode(IOUtils.toString(authnResponse.getTokenSaml()).getBytes()))); +            Logger.debug("SAMLResponse original: " + new String(org.bouncycastle.util.encoders.Base64.encode(IOUtils.toString(authnResponse.getTokenSaml()).getBytes()))); + +            Logger.debug("Putting assertion consumer url as action: " + authnRequest.getAssertionConsumerServiceURL()); +            context.put("action", authnRequest.getAssertionConsumerServiceURL()); +            Logger.debug("Starting template merge"); +            StringWriter writer = new StringWriter(); + +            Logger.debug("Doing template merge"); +            template.merge(context, writer); +            Logger.debug("Template merge done"); + +            Logger.debug("Sending html content: " + writer.getBuffer().toString()); +            Logger.debug("Sending html content2  : " + new String(writer.getBuffer())); + + +            httpResp.getOutputStream().write(writer.getBuffer().toString().getBytes()); + +        } catch (Exception e) { +            Logger.error("Velocity error: " + e.getMessage()); +        } + +        //HttpSession httpSession = this.httpResp.getSession(); +        //httpSession.setAttribute("STORKSessionID", "12345"); +        //Logger.info("Status code again: " + authnResponse.getStatusCode()); + +        //return "12345"; // AssertionId      }      /* (non-Javadoc)       * @see at.gv.egovernment.moa.id.moduls.IAction#needAuthentication(at.gv.egovernment.moa.id.moduls.IRequest, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)       */      public boolean needAuthentication(IRequest req, HttpServletRequest httpReq, HttpServletResponse httpResp) { -    	// this action does not need any authentication. The authentication is already done by the preceding AuthenticationRequest-Action. +        // this action does not need any authentication. The authentication is already done by the preceding AuthenticationRequest-Action.          return false;      } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AuthenticationRequest.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AuthenticationRequest.java index 1f6ffaa9a..d4996c26a 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AuthenticationRequest.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/AuthenticationRequest.java @@ -1,11 +1,22 @@  package at.gv.egovernment.moa.id.protocols.stork2;  import at.gv.egovernment.moa.id.auth.data.AuthenticationSession; +import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;  import at.gv.egovernment.moa.id.auth.exception.MOAIDException; +import at.gv.egovernment.moa.id.auth.stork.VelocityProvider; +import at.gv.egovernment.moa.id.commons.db.dao.config.StorkAttribute; +import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProvider; +import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;  import at.gv.egovernment.moa.id.moduls.IAction;  import at.gv.egovernment.moa.id.moduls.IRequest;  import at.gv.egovernment.moa.id.storage.AssertionStorage;  import at.gv.egovernment.moa.logging.Logger; +import edu.emory.mathcs.backport.java.util.Collections; +import eu.stork.peps.auth.commons.*; +import eu.stork.peps.auth.engine.STORKSAMLEngine; +import eu.stork.peps.exceptions.STORKSAMLEngineException; +import org.apache.commons.io.IOUtils; +import org.apache.velocity.Template;  import org.apache.velocity.VelocityContext;  import org.apache.velocity.app.VelocityEngine;  import org.apache.velocity.runtime.RuntimeConstants; @@ -15,13 +26,11 @@ import javax.servlet.ServletOutputStream;  import javax.servlet.http.HttpServletRequest;  import javax.servlet.http.HttpServletResponse;  import javax.servlet.http.HttpSession; -import java.io.ByteArrayOutputStream; -import java.io.IOException; -import java.io.OutputStreamWriter; -import java.io.Writer; +import java.io.*;  import java.util.HashMap;  import eu.stork.peps.auth.engine.SAMLEngine; +  /**   * @author bsuzic   *         Date: 12/3/13, Time: 2:08 PM @@ -35,127 +44,107 @@ public class AuthenticationRequest implements IAction {      private VelocityEngine velocityEngine; +    private AuthenticationSession moaSession; +    private MOASTORKAuthnRequest moaStorkAuthnRequest;      public String processRequest(IRequest req, HttpServletRequest httpReq, HttpServletResponse httpResp, AuthenticationSession moasession) throws MOAIDException { + +        this.moaSession = moasession; +        this.moaStorkAuthnRequest = (MOASTORKAuthnRequest)req; +          Logger.debug("Starting AuthenticationRequest");          //AuthenticationServer.getInstance().startSTORKAuthentication(httpReq, httpResp, moasession);          Logger.debug("Http Response: " + httpResp.toString() + ", "); +        Logger.debug("Remote user: " + httpReq.getRemoteAddr());          Logger.debug("Moa session: " + moasession.toString() + " " + moasession.getOAURLRequested() + " " + moasession.getPublicOAURLPrefix() + " " + moasession.getAction() + " " + moasession.getIdentityLink().getName() + " " + moasession.getTarget());          httpResp.reset(); -        //httpResp.addHeader("Location", "http:/www.google.com"); -        if (req instanceof STORKAuthnRequestDEL) { -          /* -            Logger.debug("STORK QAA 2 :" + ((STORKAuthnRequestDEL) req).getStorkAuthnRequest().getQAALevel()); -            StartAuthResponse startAuthResponse = getStartAuthResponse(((STORKAuthnRequestDEL) req).getStorkAuthnRequest()); - -            HttpSession httpSession = httpReq.getSession(); -            httpSession.setAttribute("STORKSessionID", "12345"); -            httpResp.setStatus(startAuthResponse.getHttpStatusCode()); -            try { -                ServletOutputStream os = httpResp.getOutputStream(); -                String html = new String(startAuthResponse.getContent()); - - -                if (html.contains("<![CDATA[")) { -                    Logger.info("-------- content contains <![CDATA[-----------------"); -                    Logger.info("-------- content contains html -----------------"); -                    Logger.info("HTML : " + html); -                    int beginIndex = html.indexOf("<![CDATA["); -                    int endIndex = html.indexOf("]]>"); -                    html = html.substring(beginIndex + 9, endIndex); -                    startAuthResponse.setContent(html.getBytes()); -                } -                Logger.info("HTML : " + html); -                os.write(startAuthResponse.getContent()); -                Logger.info("Response sent to client"); -            } catch (IOException e) { -                Logger.error("ERROR MOA"); -                throw new MOAIDException("error response sending", new Object[]{}); +        STORKAuthnResponse authnResponse = new STORKAuthnResponse(); +        authnResponse.setCountry("AT"); + +        OAAuthParameter oaParam = AuthConfigurationProvider.getInstance().getOnlineApplicationParameter(moasession.getPublicOAURLPrefix()); +        if (oaParam == null) +            throw new AuthenticationException("stork.12", new Object[] { moasession.getPublicOAURLPrefix() }); + + +        // Prepare basic AT attributes +        try { +            IPersonalAttributeList moaAttrList =  moasession.getStorkAttributes(); +            Logger.info("Found number of moa personal attributes: " + moasession.getStorkAttributes().size()); + + +            for (PersonalAttribute personalAttribute : moaAttrList) { +                Logger.info("Personal attribute found: " + personalAttribute.getName() + personalAttribute.getStatus()); +                if (personalAttribute.getValue().size() > 0) { +                    for (String value : personalAttribute.getValue()) { +                        Logger.info("     Value found: " + value); +                    } +                }              } -            //httpSession.setAttribute("CCC", ccc); -          */ +        } catch (Exception e) { +            Logger.error("Exception, attributes: " + e.getMessage());          } +        // Get personal attributtes from MOA/IdentityLink +        authnResponse.setPersonalAttributeList(populateAttributes()); + +        // Prepare extended attributes +        Logger.debug("Preparing data container"); -        //httpResp.setStatus(200); -        //VPEPSInboundPostHandler -                  // create fresh container          DataContainer container = new DataContainer(); -         +          // - fill in the request we extracted above -        container.setRequest(request); +        container.setRequest(((MOASTORKAuthnRequest) req).getStorkAuthnRequest());          // - fill in the partial response created above -        container.setResponse(response); +        container.setResponse(authnResponse);          // - memorize the target url were we have to return the result -        container.setTarget(target); -         -        // see if we need to fetch further attributes -        return (new AttributeCollector()).processRequest(container); -    } +        container.setTarget(((MOASTORKAuthnRequest) req).getStorkAuthnRequest().getAssertionConsumerServiceURL()); -    public boolean needAuthentication(IRequest req, HttpServletRequest httpReq, HttpServletResponse httpResp) { -        return true; -    } +        container.setRemoteAddress(httpReq.getRemoteAddr()); -    /* - -    public StartAuthResponse getStartAuthResponse(STORKAuthnRequest authnRequest) { +        Logger.debug("Data container prepared"); -        StartAuthResponse authResponse = new StartAuthResponse(500, null, new HashMap<String, String>()); +        return (new AttributeCollector()).processRequest(container, httpReq, httpResp, moasession, oaParam); -        if (authnRequest.getSPID() != null) { -            Logger.debug("SP id: " + authnRequest.getSPID()); -        } else { -            SpInstitution spInstitution = (SpInstitution)authnRequest.getExtensions().getUnknownXMLObjects(SpInstitution.DEFAULT_ELEMENT_NAME).get(0); -            Logger.debug("SP institution: " + spInstitution.getValue()); -        } +    } -        Logger.debug("SPEPS issuer: " + authnRequest.getIssuer().getValue()); -        Logger.debug("SPEPS Consumer URL: " + authnRequest.getAssertionConsumerServiceURL()); +    public boolean needAuthentication(IRequest req, HttpServletRequest httpReq, HttpServletResponse httpResp) { +        return true; +    } +    public PersonalAttributeList populateAttributes() { -        try { +        IPersonalAttributeList attrLst = moaStorkAuthnRequest.getStorkAuthnRequest().getPersonalAttributeList(); +        Logger.info("Found " + attrLst.size() + " personal attributes in the request." ); -            initVelocityEngine(); -            VelocityContext velocityContext = new VelocityContext(); +        // Define attribute list to be populated +        PersonalAttributeList attributeList = new PersonalAttributeList(); +        MOAAttributeProvider moaAttributeProvider = new MOAAttributeProvider(moaSession.getIdentityLink()); -            velocityContext.put("action", authnRequest.getDestination()); -            if (authnRequest.getDOM() == null) { -                SAMLUtil.marshallMessage(authnRequest); +        try { +            for (PersonalAttribute personalAttribute : attrLst) { +                Logger.debug("Personal attribute found in request: " + personalAttribute.getName() + " isRequired: " + personalAttribute.isRequired()); +                moaAttributeProvider.populateAttribute(attributeList, personalAttribute);              } - -            String messageXML = XMLHelper.nodeToString(authnRequest.getDOM()); -            String encodedMessage = Base64.encodeBytes(messageXML.getBytes("UTF-8"), Base64.DONT_BREAK_LINES); -            velocityContext.put("SAMLRequest", encodedMessage); -            ByteArrayOutputStream outStream = new ByteArrayOutputStream(); - -            Writer out = new OutputStreamWriter(outStream, "UTF-8"); -            velocityEngine.mergeTemplate("/templates/saml2-post-binding.vm", "UTF-8", velocityContext, out); -            out.flush(); -            authResponse.setContent(outStream.toByteArray()); - -            authResponse.addHeader("Content-Type", "text/html; charset=utf-8"); -            authResponse.addHeader("Cache-Control", "no-cache"); -            authResponse.setHttpStatusCode(200); - -        } catch (Exception e) { -            Logger.error("ERROR"); +        }  catch (Exception e) { +            Logger.error("Exception, attributes: " + e.getMessage());          } +        Logger.debug("AUTHBLOCK " + moaSession.getAuthBlock()); +        Logger.debug("TARGET " + moaSession.getTarget() + " " + moaSession.getTargetFriendlyName()); +        Logger.debug("SESSION IDENTIFIER " + moaSession.getCcc() + " " + moaSession.getDomainIdentifier()); +        Logger.debug("AUTHBLOCKTOKKEN" + moaSession.getAuthBlockTokken()); -        return authResponse; +        return attributeList;      } -    */ -      public String getDefaultActionName() {          return STORKProtocol.AUTHENTICATIONREQUEST;      } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DataContainer.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DataContainer.java index 40c827ef8..44ad0000a 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DataContainer.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DataContainer.java @@ -22,8 +22,9 @@ public class DataContainer implements Serializable {  	/** The target. */  	private String target; -	 -	/** +    private String remoteAddress; + +    /**  	 * Gets the request.  	 *  	 * @return the request @@ -76,4 +77,13 @@ public class DataContainer implements Serializable {  	public void setTarget(String target) {  		this.target = target;  	} +     +    /* +     Sets IP address +     */ +    public void setRemoteAddress(String address) { this.remoteAddress = address; } +    public String getRemoteAddress() { +        return this.remoteAddress; +    } +      } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoNoRedirectAttributeProvider.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoNoRedirectAttributeProvider.java index 669a9389b..9c0869d97 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoNoRedirectAttributeProvider.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoNoRedirectAttributeProvider.java @@ -20,7 +20,6 @@ public class DemoNoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#acquire(java.lang.String)  	 */ -	@Override  	public IPersonalAttributeList acquire(PersonalAttribute attributeName, AuthenticationSession moasession)  			throws UnsupportedAttributeException {  		PersonalAttributeList requestedAttributes = new PersonalAttributeList(1); @@ -31,7 +30,6 @@ public class DemoNoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#parse(javax.servlet.http.HttpServletRequest)  	 */ -	@Override  	public IPersonalAttributeList parse(HttpServletRequest httpReq) {  		// TODO Auto-generated method stub  		return null; @@ -40,7 +38,6 @@ public class DemoNoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#performRedirect(java.lang.String, java.lang.String, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)  	 */ -	@Override  	public void performRedirect(String url, String citizenCountyCode,  			HttpServletRequest req, HttpServletResponse resp, OAAuthParameter oaParam) {  		// we should not get here diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoRedirectAttributeProvider.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoRedirectAttributeProvider.java index 2f6b69075..26fc00406 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoRedirectAttributeProvider.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/DemoRedirectAttributeProvider.java @@ -20,7 +20,6 @@ public class DemoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#acquire(java.lang.String)  	 */ -	@Override  	public IPersonalAttributeList acquire(PersonalAttribute attributeName, AuthenticationSession moasession)  			throws UnsupportedAttributeException, ExternalAttributeRequestRequiredException {  		throw new ExternalAttributeRequestRequiredException(this); @@ -29,7 +28,6 @@ public class DemoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#parse(javax.servlet.http.HttpServletRequest)  	 */ -	@Override  	public IPersonalAttributeList parse(HttpServletRequest httpReq) {  		PersonalAttributeList requestedAttributes = new PersonalAttributeList(1);  		requestedAttributes.add(new PersonalAttribute("sepp", true, new ArrayList<String>(), "")); @@ -39,7 +37,6 @@ public class DemoRedirectAttributeProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#performRedirect(java.lang.String, java.lang.String, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)  	 */ -	@Override  	public void performRedirect(String url, String citizenCountyCode,  			HttpServletRequest req, HttpServletResponse resp, OAAuthParameter oaParam) {  		// we should not get here diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/EHvdAttributeProviderPlugin.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/EHvdAttributeProviderPlugin.java index 8b96e0d10..758b70f2d 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/EHvdAttributeProviderPlugin.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/EHvdAttributeProviderPlugin.java @@ -55,7 +55,6 @@ public class EHvdAttributeProviderPlugin implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#acquire(eu.stork.peps.auth.commons.PersonalAttribute)  	 */ -	@Override  	public IPersonalAttributeList acquire(PersonalAttribute attributes, AuthenticationSession moasession)  			throws UnsupportedAttributeException,  			ExternalAttributeRequestRequiredException, MOAIDException { @@ -203,7 +202,6 @@ public class EHvdAttributeProviderPlugin implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#performRedirect(java.lang.String, java.lang.String, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, at.gv.egovernment.moa.id.config.auth.OAAuthParameter)  	 */ -	@Override  	public void performRedirect(String url, String citizenCountyCode,  			HttpServletRequest req, HttpServletResponse resp,  			OAAuthParameter oaParam) throws MOAIDException { @@ -213,7 +211,6 @@ public class EHvdAttributeProviderPlugin implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#parse(javax.servlet.http.HttpServletRequest)  	 */ -	@Override  	public IPersonalAttributeList parse(HttpServletRequest httpReq)  			throws UnsupportedAttributeException, MOAIDException {  		// there is no redirect required, so we throw an exception when someone asks us to parse a response diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/MOAAttributeProvider.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/MOAAttributeProvider.java new file mode 100644 index 000000000..414e383fa --- /dev/null +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/MOAAttributeProvider.java @@ -0,0 +1,94 @@ +package at.gv.egovernment.moa.id.protocols.stork2; + +import at.gv.egovernment.moa.id.auth.data.IdentityLink; +import at.gv.egovernment.moa.logging.Logger; +import eu.stork.peps.auth.commons.PersonalAttribute; +import eu.stork.peps.auth.commons.PersonalAttributeList; + +import java.lang.reflect.InvocationTargetException; +import java.lang.reflect.Method; +import java.util.ArrayList; +import java.util.Collections; +import java.util.HashMap; +import java.util.Map; + +/** + * @author bsuzic + *         Date: 2/19/14, Time: 4:42 PM + */ +public class MOAAttributeProvider { +    private final IdentityLink identityLink; +    private static final Map<String, String> storkAttributeSimpleMapping; +    private static final Map<String, String> storkAttributeFunctionMapping; + +    static { +        Map<String, String> tempSimpleMap = new HashMap<String, String>(); +        tempSimpleMap.put("givenName", "getGivenName"); +        tempSimpleMap.put("surname", "getFamilyName"); +        tempSimpleMap.put("dateOfBirth", "getDateOfBirth"); +        storkAttributeSimpleMapping = Collections.unmodifiableMap(tempSimpleMap); +        Map<String, String> tempFunctionMap = new HashMap<String, String>(); +        tempFunctionMap.put("eIdentifier", "geteIdentifier"); +        storkAttributeFunctionMapping = Collections.unmodifiableMap(tempFunctionMap); +    } + +    public MOAAttributeProvider(IdentityLink identityLink) { +        this.identityLink = identityLink; +        Logger.debug("identity " + identityLink.getIdentificationType() + " " + identityLink.getIdentificationValue()); +    } + +    public void populateAttribute(PersonalAttributeList attributeList, PersonalAttribute requestedAttribute ) { +        String storkAttribute = requestedAttribute.getName(); + +        if (storkAttributeSimpleMapping.containsKey(storkAttribute)) { +            Logger.debug("Trying to get value for attribute using simple mapping [" + storkAttribute + "]"); +            try { +                Method method = identityLink.getClass().getDeclaredMethod(storkAttributeSimpleMapping.get(storkAttribute)); +                populateAttributeWithMethod(method, identityLink, attributeList, storkAttribute, requestedAttribute.isRequired()); +            } catch (NoSuchMethodException e) { +                Logger.error("Could not found MOA extraction method while getting attribute: " + storkAttribute); +                e.printStackTrace(); +            } + +        } else if (storkAttributeFunctionMapping.containsKey(storkAttribute)) { + +            Logger.debug("Trying to get value for attribute using function mapping [" + storkAttribute + "]"); +            try { +                Method method = this.getClass().getDeclaredMethod(storkAttributeFunctionMapping.get(storkAttribute)); +                populateAttributeWithMethod(method, this, attributeList, storkAttribute, requestedAttribute.isRequired()); +            } catch (NoSuchMethodException e) { +                Logger.error("Could not found MOA extraction method while getting attribute: " + storkAttribute); +                e.printStackTrace(); +            } +        } else { +            Logger.debug("MOA method for extraction of attribute " + storkAttribute + " not defined."); +        } +    } + +    private String geteIdentifier() { +        return "askdlaskdlaskdsds"; +    } + +    private void populateAttributeWithMethod(Method method, Object object, PersonalAttributeList attributeList, String storkAttribute, Boolean isRequired) { +        try { +            String attributeValue = method.invoke(object, new Class[]{}).toString(); +            PersonalAttribute newAttribute = new PersonalAttribute(); +            newAttribute.setName(storkAttribute); + +            newAttribute.setStatus("Available"); +            newAttribute.setIsRequired(isRequired); +            Logger.debug("Got attribute value: " + attributeValue); +            newAttribute.setValue(new ArrayList<String>(edu.emory.mathcs.backport.java.util.Collections.singletonList(attributeValue))); +            attributeList.add(newAttribute); +        } catch (InvocationTargetException e) { +            Logger.error("Invocation target exception while getting attribute: " + storkAttribute); +            e.printStackTrace(); +        } catch (IllegalAccessException e) { +            Logger.error("Illegal access exception while getting attribute: " + storkAttribute); +            e.printStackTrace(); +        } +    } + + +} + diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKAuthnRequestDEL.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/MOASTORKAuthnRequest.java index c8a5ac84d..cee64e16e 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKAuthnRequestDEL.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/MOASTORKAuthnRequest.java @@ -8,9 +8,8 @@ import org.opensaml.common.xml.SAMLConstants;   * @author bsuzic   *         Date: 12/4/13, Time: 6:31 PM   */ -//public class STORKAuthnRequestDEL extends STORKAuthnRequestImpl implements IRequest { -public class STORKAuthnRequestDEL implements IRequest { +public class MOASTORKAuthnRequest implements IRequest {      private String requestID;      private String target = null;      String module = null; @@ -26,6 +25,7 @@ public class STORKAuthnRequestDEL implements IRequest {      }      public String getOAURL() { +          return "https://sp:8889/SP";  //      } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKAuthnReq.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKAuthnReq.java deleted file mode 100644 index 54072b6a3..000000000 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKAuthnReq.java +++ /dev/null @@ -1,105 +0,0 @@ -package at.gv.egovernment.moa.id.protocols.stork2; - -import at.gv.egovernment.moa.id.moduls.IRequest; -import at.gv.egovernment.moa.id.protocols.pvp2x.binding.MOAURICompare; -import at.gv.egovernment.moa.logging.Logger; -import eu.stork.peps.auth.commons.STORKAuthnRequest; -import org.opensaml.common.binding.BasicSAMLMessageContext; -import org.opensaml.saml2.binding.decoding.HTTPPostDecoder; -import org.opensaml.ws.transport.http.HTTPInTransport; - - -/** - * @author bsuzic - *         Date: 1/22/14, Time: 5:30 PM - */ -public class STORKAuthnReq implements IRequest { -    private String requestID; -    private String target = null; -    String module = null; -    String action = null; -    private STORKAuthnRequest storkAuthnRequest; - -    public void setSTORKAuthnRequest(STORKAuthnRequest request) { -        this.storkAuthnRequest = request; -    } - -    public STORKAuthnRequest getStorkAuthnRequest() { -        return this.storkAuthnRequest; -    } - -    public void createStorkReq(HTTPInTransport profileReq) { -        Logger.debug("Generate stork request test..."); -        storkAuthnRequest = new STORKAuthnRequest(); - -        BasicSAMLMessageContext samlMessageContext = new BasicSAMLMessageContext(); -        samlMessageContext.setInboundMessageTransport(profileReq); - -        HTTPPostDecoder postDecoder = new HTTPPostDecoder(); -        postDecoder.setURIComparator(new MOAURICompare()); // TODO Abstract to use general comparator - -        try { -            Logger.debug("Attempting to decode request..."); -            postDecoder.decode(samlMessageContext); -        } catch (Exception e) { -            Logger.error("Error decoding STORKAuthnRequest", e); -        } - - - -        //storkAuthnRequest = (STORKAuthnRequest)samlMessageContext.getInboundSAMLMessage(); -        //samlMessageContext.getinbound -        //storkAuthnRequest.set - - - -    } - - - -    public String getOAURL() { -        return "https://sp:8889/SP";  // -    } - -    public boolean isPassiv() { -        return false;  // -    } - -    public boolean forceAuth() { -        return false;  // -    } - -    public boolean isSSOSupported() { -        return false;  // -    } - -    public String requestedModule() { -        return this.module;  // -    } - -    public String requestedAction() { -        return action;  // -    } - -    public void setModule(String module) { -        this.module = module; -    } - -    public void setAction(String action) { -        this.action = action; -    } - -    public String getTarget() { -        return this.target;  // -    } - -    public void setRequestID(String id) { -        this.requestID = id; -    } - -    public String getRequestID() { -        return this.requestID;  // -    } - - -} diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKProtocol.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKProtocol.java index 318a8fc9c..502925a2a 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKProtocol.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/STORKProtocol.java @@ -1,6 +1,5 @@  package at.gv.egovernment.moa.id.protocols.stork2; -import at.gv.egovernment.moa.id.auth.AuthenticationServer;  import at.gv.egovernment.moa.id.auth.MOAIDAuthConstants;  import at.gv.egovernment.moa.id.auth.exception.MOAIDException;  import at.gv.egovernment.moa.id.moduls.IAction; @@ -9,7 +8,6 @@ import at.gv.egovernment.moa.id.moduls.IRequest;  import at.gv.egovernment.moa.id.protocols.pvp2x.binding.MOAURICompare;  import at.gv.egovernment.moa.logging.Logger;  import eu.stork.peps.auth.commons.PEPSUtil; -import eu.stork.peps.auth.commons.STORKAuthnResponse;  import eu.stork.peps.auth.engine.STORKSAMLEngine;  import eu.stork.peps.exceptions.STORKSAMLEngineException;  import org.opensaml.common.binding.BasicSAMLMessageContext; @@ -109,8 +107,8 @@ public class STORKProtocol implements IModulInfo, MOAIDAuthConstants {          /*          STORKAuthnRequestImpl ST2Req = (STORKAuthnRequestImpl)samlMessageContext.getInboundSAMLMessage(); -        //STORKAuthnRequestDEL STORK2Request = (STORKAuthnRequestDEL)samlMessageContext.getInboundSAMLMessage(); -        STORKAuthnRequestDEL STORK2Request = new STORKAuthnRequestDEL(); +        //MOASTORKAuthnRequest STORK2Request = (MOASTORKAuthnRequest)samlMessageContext.getInboundSAMLMessage(); +        MOASTORKAuthnRequest STORK2Request = new MOASTORKAuthnRequest();          STORK2Request.setSTORKAuthnRequest(ST2Req);          Logger.debug("STORK2 Citizen code: " + ST2Req.getCitizenCountryCode()); @@ -118,10 +116,10 @@ public class STORKProtocol implements IModulInfo, MOAIDAuthConstants {          Logger.debug("STORK2 ISSUER: " + ST2Req.getIssuer().toString());          */ -        STORKAuthnReq storkAuthnReq = new STORKAuthnReq(); +        //STORKAuthnReq storkAuthnReq = new STORKAuthnReq(); -        STORKAuthnRequestDEL STORK2Request = new STORKAuthnRequestDEL(); +        MOASTORKAuthnRequest STORK2Request = new MOASTORKAuthnRequest();          //extract STORK Response from HTTP Request @@ -155,6 +153,8 @@ public class STORKProtocol implements IModulInfo, MOAIDAuthConstants {          Logger.error("spi " + authnRequest.getSpInstitution()); +        STORK2Request.setSTORKAuthnRequest(authnRequest); +          return STORK2Request;      } @@ -170,6 +170,11 @@ public class STORKProtocol implements IModulInfo, MOAIDAuthConstants {      public boolean validate(HttpServletRequest request, HttpServletResponse response, IRequest pending) {          return false;      } + +    public void checkPersonalAttributes() { + + +    }  } diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/SignedDocAttributeRequestProvider.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/SignedDocAttributeRequestProvider.java new file mode 100644 index 000000000..e7cd87e85 --- /dev/null +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/SignedDocAttributeRequestProvider.java @@ -0,0 +1,129 @@ +package at.gv.egovernment.moa.id.protocols.stork2; + +import java.io.StringWriter; +import java.io.UnsupportedEncodingException; +import java.util.ArrayList; +import java.util.List; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; + +import org.apache.commons.codec.binary.Base64; +import org.apache.velocity.Template; +import org.apache.velocity.VelocityContext; +import org.apache.velocity.app.VelocityEngine; + +import at.gv.egovernment.moa.id.auth.data.AuthenticationSession; +import at.gv.egovernment.moa.id.auth.exception.MOAIDException; +import at.gv.egovernment.moa.id.auth.stork.VelocityProvider; +import at.gv.egovernment.moa.id.config.auth.OAAuthParameter; +import at.gv.egovernment.moa.id.util.HTTPUtils; +import at.gv.egovernment.moa.logging.Logger; +import at.gv.egovernment.moa.util.StringUtils; + +import eu.stork.peps.auth.commons.IPersonalAttributeList; +import eu.stork.peps.auth.commons.PEPSUtil; +import eu.stork.peps.auth.commons.PersonalAttribute; +import eu.stork.peps.auth.commons.PersonalAttributeList; +import eu.stork.peps.auth.commons.STORKAttrQueryRequest; +import eu.stork.peps.auth.commons.STORKAttrQueryResponse; +import eu.stork.peps.auth.engine.STORKSAMLEngine; +import eu.stork.peps.exceptions.STORKSAMLEngineException; + +/** + * Forwards a signedDoc attribute request to the oasis-dss service instance + */ +public class SignedDocAttributeRequestProvider implements AttributeProvider { + +	private PersonalAttribute requestedAttribute; + +	/** +	 * The URL of the service listening for the oasis dss webform post request +	 */ +	private String oasisDssWebFormURL; + +	/** +	 * Instantiates a new signed doc attribute request provider. +	 *  +	 * @param oasisDssWebFormURL +	 *            the AP location +	 */ +	public SignedDocAttributeRequestProvider(String oasisDssWebFormURL) { +		this.oasisDssWebFormURL = oasisDssWebFormURL; +	} + +	/* +	 * (non-Javadoc) +	 *  +	 * @see +	 * at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#acquire(java +	 * .lang.String) +	 */ +	public IPersonalAttributeList acquire(PersonalAttribute attribute, AuthenticationSession moasession) throws UnsupportedAttributeException, +			ExternalAttributeRequestRequiredException { +		requestedAttribute = attribute; + +		throw new ExternalAttributeRequestRequiredException(this); +	} + +	/* +	 * (non-Javadoc) +	 *  +	 * @see +	 * at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#parse(javax +	 * .servlet.http.HttpServletRequest) +	 */ +	public IPersonalAttributeList parse(HttpServletRequest httpReq) throws MOAIDException, UnsupportedAttributeException { +		Logger.debug("Beginning to extract OASIS-DSS response out of HTTP Request"); + + +		STORKSAMLEngine engine = STORKSAMLEngine.getInstance("VIDP"); +		try { +			String signResponse = new String(Base64.decodeBase64(httpReq.getParameter("signresponse")), "UTF8"); +			List<String> values = new ArrayList<String>(); +			values.add(signResponse); + +			Logger.debug("Assembling signedDoc attribute"); +			PersonalAttribute signedDocAttribute = new PersonalAttribute(requestedAttribute.getName(), requestedAttribute.isRequired(), values, +					"Available"); + +			// pack and return the result +			PersonalAttributeList result = new PersonalAttributeList(); +			result.add(signedDocAttribute); +			return result; +		} catch (UnsupportedEncodingException e) { +			Logger.error("Failed to assemble signedDoc attribute"); +			throw new MOAIDException("stork.05", null); +		} +	} + +	/* +	 * (non-Javadoc) +	 *  +	 * @see +	 * at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#performRedirect +	 * (java.lang.String) +	 */ +	public void performRedirect(String url, String citizenCountryCode, HttpServletRequest req, HttpServletResponse resp, OAAuthParameter oaParam) +			throws MOAIDException { + +		try { +			Logger.trace("Initialize VelocityEngine..."); + +			VelocityEngine velocityEngine = VelocityProvider.getClassPathVelocityEngine(); +			Template template = velocityEngine.getTemplate("/resources/templates/oasis_dss_webform_binding.vm"); +			VelocityContext context = new VelocityContext(); +			context.put("signrequest", Base64.encodeBase64String(requestedAttribute.getValue().get(0).getBytes("UTF8"))); +			context.put("action", oasisDssWebFormURL); + +			StringWriter writer = new StringWriter(); +			template.merge(context, writer); + +			resp.getOutputStream().write(writer.toString().getBytes()); +		} catch (Exception e) { +			Logger.error("Error sending STORK SAML AttrRequest.", e); +			throw new MOAIDException("stork.11", null); +		} +	} + +} diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/StorkAttributeRequestProvider.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/StorkAttributeRequestProvider.java index bd6f192dc..4314e666e 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/StorkAttributeRequestProvider.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/stork2/StorkAttributeRequestProvider.java @@ -47,7 +47,6 @@ public class StorkAttributeRequestProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#acquire(java.lang.String)  	 */ -	@Override  	public IPersonalAttributeList acquire(PersonalAttribute attribute, AuthenticationSession moasession)  			throws UnsupportedAttributeException, ExternalAttributeRequestRequiredException {  		requestedAttributes = new PersonalAttributeList(1); @@ -58,7 +57,6 @@ public class StorkAttributeRequestProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#parse(javax.servlet.http.HttpServletRequest)  	 */ -	@Override  	public IPersonalAttributeList parse(HttpServletRequest httpReq) throws MOAIDException, UnsupportedAttributeException {  		Logger.debug("Beginning to extract SAMLResponse out of HTTP Request"); @@ -91,7 +89,6 @@ public class StorkAttributeRequestProvider implements AttributeProvider {  	/* (non-Javadoc)  	 * @see at.gv.egovernment.moa.id.protocols.stork2.AttributeProvider#performRedirect(java.lang.String)  	 */ -	@Override  	public void performRedirect(String url, String citizenCountryCode, HttpServletRequest req, HttpServletResponse resp, OAAuthParameter oaParam) throws MOAIDException {      	String spSector = "Business"; diff --git a/id/server/idserverlib/src/main/resources/resources/templates/oasis_dss_webform_binding.vm b/id/server/idserverlib/src/main/resources/resources/templates/oasis_dss_webform_binding.vm new file mode 100644 index 000000000..7fcc1bb36 --- /dev/null +++ b/id/server/idserverlib/src/main/resources/resources/templates/oasis_dss_webform_binding.vm @@ -0,0 +1,36 @@ +## +## Velocity Template for OASIS WEBFORM BINDING +## +## Velocity context may contain the following properties +## action - String - the action URL for the form +## signresponse - String - the Base64 encoded SAML Request +## verifyresponse - String - the Base64 encoded SAML Response +## clienturl - String - URL where the USer gets redirected after the signature process + +<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> + +    <body onload="document.forms[0].submit()"> +        <noscript> +            <p> +                <strong>Note:</strong> Since your browser does not support JavaScript, +                you must press the Continue button once to proceed. +            </p> +        </noscript> +         +        <form action="${action}" method="post"> +            <div> +                #if($signrequest)<input type="hidden" name="signrequest" value="${signrequest}"/>#end +                 +                #if($verifyrequest)<input type="hidden" name="verifyrequest" value="${verifyrequest}"/>#end +                #if($clienturl)<input type="hidden" name="clienturl" value="${clienturl}"/>#end +                 +            </div> +            <noscript> +                <div> +                    <input type="submit" value="Continue"/> +                </div> +            </noscript> +        </form> +         +    </body> +</html>
\ No newline at end of file diff --git a/id/server/idserverlib/src/main/resources/resources/templates/stork2_postbinding_template.html b/id/server/idserverlib/src/main/resources/resources/templates/stork2_postbinding_template.html new file mode 100644 index 000000000..f655caee0 --- /dev/null +++ b/id/server/idserverlib/src/main/resources/resources/templates/stork2_postbinding_template.html @@ -0,0 +1,42 @@ +<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> + +<body onload="document.forms[0].submit()"> +	<noscript> +		<p> +			<strong>Note:</strong> Since your browser does not support +			JavaScript, you must press the Continue button once to proceed. +		</p> +	</noscript> + + +	<div id="alert">Your login is being processed. Thank you for +		waiting.</div> + +	<style type="text/css"> +<!-- +#alert { +	margin: 100px 250px; +	font-family: Verdana, Arial, Helvetica, sans-serif; +	font-size: 14px; +	font-weight: normal; +} +--> +</style> + +	<form action="${action}" method="post" target="_parent"> +		<div> +			#if($RelayState)<input type="hidden" name="RelayState" +				value="${RelayState}" />#end #if($SAMLRequest)<input type="hidden" +				name="SAMLRequest" value="${SAMLRequest}" />#end #if($SAMLResponse)<input +				type="hidden" name="SAMLResponse" value="${SAMLResponse}" />#end + +		</div> +		<noscript> +			<div> +				<input type="submit" value="Continue" /> +			</div> +		</noscript> +	</form> + +</body> +</html> diff --git a/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/db/ConfigurationDBRead.java b/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/db/ConfigurationDBRead.java index e4e4ce98a..88220cded 100644 --- a/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/db/ConfigurationDBRead.java +++ b/id/server/moa-id-commons/src/main/java/at/gv/egovernment/moa/id/commons/db/ConfigurationDBRead.java @@ -22,366 +22,366 @@   *******************************************************************************/  package at.gv.egovernment.moa.id.commons.db; -import java.util.HashMap; -import java.util.List; -import java.util.Map; - -import javax.persistence.EntityManager; - -import org.apache.commons.lang.StringEscapeUtils; -  import at.gv.egovernment.moa.id.commons.db.dao.config.MOAIDConfiguration;  import at.gv.egovernment.moa.id.commons.db.dao.config.OnlineApplication;  import at.gv.egovernment.moa.id.commons.db.dao.config.UserDatabase; -  import at.gv.egovernment.moa.logging.Logger;  import at.gv.egovernment.moa.util.MiscUtil; +import org.apache.commons.lang.StringEscapeUtils; + +import javax.persistence.EntityManager; +import javax.persistence.PersistenceException; +import java.util.HashMap; +import java.util.List; +import java.util.Map;  @SuppressWarnings("rawtypes")  public class ConfigurationDBRead { -      private static Map<String, String> QUERIES = new HashMap<String, String>();    	 -      static { -    	  QUERIES.put("getActiveOnlineApplicationWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.publicURLPrefix = SUBSTRING(:id, 1, LENGTH(onlineapplication.publicURLPrefix)) and  onlineapplication.isActive = '1'"); -    	  QUERIES.put("getOnlineApplicationWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.publicURLPrefix = SUBSTRING(:id, 1, LENGTH(onlineapplication.publicURLPrefix))"); -    	  QUERIES.put("getOnlineApplicationWithDBID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.hjid = :id"); -    	  QUERIES.put("getAllOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication"); -    	  QUERIES.put("getAllActiveOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.isActive = '1'"); -    	  QUERIES.put("getAllNewOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.isActive = '0' and onlineapplication.isAdminRequired = '1'"); -    	  QUERIES.put("getMOAIDConfiguration", "select moaidconfiguration from MOAIDConfiguration moaidconfiguration"); -    	  QUERIES.put("getUserWithUserID", "select userdatabase from UserDatabase userdatabase where userdatabase.hjid = :id"); -    	  QUERIES.put("getNewUserWithUserTokken", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken = :tokken"); -    	  QUERIES.put("getAllNewUsers", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken is null and userdatabase.isAdminRequest = '1' and userdatabase.isMailAddressVerified = '1'"); -    	  QUERIES.put("getAllOpenUsersRequests", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken is not null and userdatabase.isAdminRequest = '1' and userdatabase.isMailAddressVerified = '0'"); -    	  QUERIES.put("getUserWithUserBPKWBPK", "select userdatabase from UserDatabase userdatabase where userdatabase.bpk = :bpk"); -    	  QUERIES.put("getUserWithUserUsername", "select userdatabase from UserDatabase userdatabase where userdatabase.username = :username"); -    	  QUERIES.put("getAllUsers", "select userdatabase from UserDatabase userdatabase"); -    	  QUERIES.put("getUsersWithOADBID", "select userdatabase from UserDatabase userdatabase inner join userdatabase.onlineApplication oa where oa.hjid = :id"); -    	  QUERIES.put("searchOnlineApplicationsWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.friendlyName like :id");      } -       -	  public static OnlineApplication getActiveOnlineApplication(String id) { -	  	MiscUtil.assertNotNull(id, "OnlineApplictionID"); -		Logger.trace("Getting OnlineApplication with ID " + id + " from database."); -		 -		List result; -  		EntityManager session = ConfigurationDBUtils.getCurrentSession(); -	  	 -  		javax.persistence.Query query = session.createQuery(QUERIES.get("getActiveOnlineApplicationWithID"));  	 -  		//query.setParameter("id", id+"%"); -  		query.setParameter("id", StringEscapeUtils.escapeHtml(id)); -  		result = query.getResultList(); -  	 -  		Logger.trace("Found entries: " + result.size()); -     -  		if (result.size() == 0) { -  			Logger.debug("No entries found."); -  			return null; -  		}  -  		 -  		if (result.size() > 1) { -  			Logger.warn("OAIdentifier match to more then one DB-entry!"); -  			return null; -  		} -  		  		 -  		return (OnlineApplication) result.get(0); -	  } -	 -	  public static OnlineApplication getOnlineApplication(String id) { -	  	MiscUtil.assertNotNull(id, "OnlineApplictionID"); -		Logger.trace("Getting OnlineApplication with ID " + id + " from database."); -		 -		List result; -  		EntityManager session = ConfigurationDBUtils.getCurrentSession(); -	  	 -  		javax.persistence.Query query = session.createQuery(QUERIES.get("getOnlineApplicationWithID"));  	 -  		//query.setParameter("id", id+"%"); -  		query.setParameter("id", id); -  		result = query.getResultList(); -  	 -  		Logger.trace("Found entries: " + result.size()); -     -  		if (result.size() == 0) { -  			Logger.trace("No entries found."); -  			return null; -  		} -  		 -  		if (result.size() > 1) { -  			Logger.warn("OAIdentifier match to more then one DB-entry!"); -  			return null; -  		} -  		 -  		return (OnlineApplication) result.get(0); -	  } -	   -	  public static OnlineApplication getOnlineApplication(long dbid) { -	  	MiscUtil.assertNotNull(dbid, "OnlineApplictionID"); -		Logger.trace("Getting OnlineApplication with DBID " + dbid + " from database."); -		 -		List result; -  		EntityManager session = ConfigurationDBUtils.getCurrentSession(); -	  	 -  		javax.persistence.Query query = session.createQuery(QUERIES.get("getOnlineApplicationWithDBID"));  	 -  		//query.setParameter("id", id+"%"); -  		query.setParameter("id", dbid); -  		result = query.getResultList(); -  	 -  		Logger.trace("Found entries: " + result.size()); -     -  		if (result.size() == 0) { -  			Logger.trace("No entries found."); -  			return null; -  		} -  		  		 -  		return (OnlineApplication) result.get(0); -	  } -	   -	public static MOAIDConfiguration getMOAIDConfiguration() { -		  Logger.trace("Load MOAID Configuration from database."); -			 -			List<MOAIDConfiguration> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -		 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getMOAIDConfiguration")); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    		     -		    return (MOAIDConfiguration) result.get(0); -	  } -	   -	  public static List<OnlineApplication> getAllOnlineApplications() { -			Logger.trace("Get All OnlineApplications from database."); -			 -			List<OnlineApplication> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllOnlineApplications"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } -	   -	  public static List<OnlineApplication> getAllNewOnlineApplications() { -			Logger.trace("Get All OnlineApplications from database."); -			 -			List<OnlineApplication> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllNewOnlineApplications"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } -	   -	  public static List<UserDatabase> getAllUsers() { -			Logger.trace("Get All OnlineApplications from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllUsers"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } -	   -	  public static List<OnlineApplication> getAllActiveOnlineApplications() { -			Logger.trace("Get All active OnlineApplications from database."); -			 -			List<OnlineApplication> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllActiveOnlineApplications"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } -	   -	  @SuppressWarnings("rawtypes") -	  public static List<OnlineApplication> searchOnlineApplications(String id) { -	  	MiscUtil.assertNotNull(id, "OnlineApplictionID"); -		Logger.trace("Getting OnlineApplication with ID " + id + " from database."); -		 -		List<OnlineApplication> result; -  		EntityManager session = ConfigurationDBUtils.getCurrentSession(); -	  	 -  		javax.persistence.Query query = session.createQuery(QUERIES.get("searchOnlineApplicationsWithID"));  	 -  		query.setParameter("id", "%"+id+"%"); -  		 -  		result = query.getResultList(); -  	 -  		Logger.trace("Found entries: " + result.size()); -     -  		if (result.size() == 0) { -  			Logger.trace("No entries found."); -  			return null; -  		} -  		  		 -  		return result; -	  } -	  	   -	  public static UserDatabase getUserWithID(long id) { -		  	MiscUtil.assertNotNull(id, "UserID"); -			Logger.trace("Getting Userinformation with ID " + id + " from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserID"));  	 -		  	query.setParameter("id", id); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return (UserDatabase) result.get(0); -	  } -	   -	  public static UserDatabase getUsersWithOADBID(long id) { -		  	MiscUtil.assertNotNull(id, "OADBID"); -			Logger.trace("Getting Userinformation with OADBID " + id + " from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getUsersWithOADBID"));  	 -		  	query.setParameter("id", id); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return (UserDatabase) result.get(0); -	  }  -	   -	  public static UserDatabase getUserWithUserName(String username) { -		  	MiscUtil.assertNotNull(username, "UserName"); -			Logger.trace("Getting Userinformation with ID " + username + " from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserUsername"));  	 -		  	query.setParameter("username", username); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return (UserDatabase) result.get(0); -	  } - -	  public static UserDatabase getUserWithUserBPKWBPK(String bpkwbpk) { -		  	MiscUtil.assertNotNull(bpkwbpk, "bpk/wbpk"); -			Logger.trace("Getting Userinformation with ID " +  bpkwbpk + " from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserBPKWBPK"));  	 -		  	query.setParameter("bpk",  bpkwbpk); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return (UserDatabase) result.get(0); -	  } -	   -	  public static UserDatabase getNewUserWithTokken(String tokken) { -		  	MiscUtil.assertNotNull(tokken, "bpk/wbpk"); -			Logger.trace("Getting Userinformation with Tokken " +  tokken + " from database."); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getNewUserWithUserTokken"));  	 -		  	query.setParameter("tokken",  tokken); -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return (UserDatabase) result.get(0); -	  } -	   -	  public static List<UserDatabase> getAllNewUsers() { -			Logger.trace("Get all new Users from Database"); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllNewUsers"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } -	   -	  public static List<UserDatabase> getAllOpenUsersRequests() { -			Logger.trace("Get all new Users from Database"); -			 -			List<UserDatabase> result; -		  	EntityManager session = ConfigurationDBUtils.getCurrentSession(); -			  	 -		  	javax.persistence.Query query = session.createQuery(QUERIES.get("getAllOpenUsersRequests"));  	 -			result = query.getResultList(); -		  	 -		    Logger.trace("Found entries: " + result.size()); -		     -		    if (result.size() == 0) { -		    	Logger.trace("No entries found."); -		    	return null; -		    } -		    return result; -	  } +    private static Map<String, String> QUERIES = new HashMap<String, String>(); + +    static { +        QUERIES.put("getActiveOnlineApplicationWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.publicURLPrefix = SUBSTRING(:id, 1, LENGTH(onlineapplication.publicURLPrefix)) and  onlineapplication.isActive = '1'"); +        QUERIES.put("getOnlineApplicationWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.publicURLPrefix = SUBSTRING(:id, 1, LENGTH(onlineapplication.publicURLPrefix))"); +        QUERIES.put("getOnlineApplicationWithDBID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.hjid = :id"); +        QUERIES.put("getAllOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication"); +        QUERIES.put("getAllActiveOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.isActive = '1'"); +        QUERIES.put("getAllNewOnlineApplications", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.isActive = '0' and onlineapplication.isAdminRequired = '1'"); +        QUERIES.put("getMOAIDConfiguration", "select moaidconfiguration from MOAIDConfiguration moaidconfiguration"); +        QUERIES.put("getUserWithUserID", "select userdatabase from UserDatabase userdatabase where userdatabase.hjid = :id"); +        QUERIES.put("getNewUserWithUserTokken", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken = :tokken"); +        QUERIES.put("getAllNewUsers", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken is null and userdatabase.isAdminRequest = '1' and userdatabase.isMailAddressVerified = '1'"); +        QUERIES.put("getAllOpenUsersRequests", "select userdatabase from UserDatabase userdatabase where userdatabase.userRequestTokken is not null and userdatabase.isAdminRequest = '1' and userdatabase.isMailAddressVerified = '0'"); +        QUERIES.put("getUserWithUserBPKWBPK", "select userdatabase from UserDatabase userdatabase where userdatabase.bpk = :bpk"); +        QUERIES.put("getUserWithUserUsername", "select userdatabase from UserDatabase userdatabase where userdatabase.username = :username"); +        QUERIES.put("getAllUsers", "select userdatabase from UserDatabase userdatabase"); +        QUERIES.put("getUsersWithOADBID", "select userdatabase from UserDatabase userdatabase inner join userdatabase.onlineApplication oa where oa.hjid = :id"); +        QUERIES.put("searchOnlineApplicationsWithID", "select onlineapplication from OnlineApplication onlineapplication where onlineapplication.friendlyName like :id"); +    } + +    public static OnlineApplication getActiveOnlineApplication(String id) { +        MiscUtil.assertNotNull(id, "OnlineApplictionID"); +        Logger.trace("Getting OnlineApplication with ID " + id + " from database."); + +        List result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getActiveOnlineApplicationWithID")); +        //query.setParameter("id", id+"%"); +        query.setParameter("id", StringEscapeUtils.escapeHtml(id)); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.debug("No entries found."); +            return null; +        } + +        if (result.size() > 1) { +            Logger.warn("OAIdentifier match to more then one DB-entry!"); +            return null; +        } + +        return (OnlineApplication) result.get(0); +    } + +    public static OnlineApplication getOnlineApplication(String id) { +        MiscUtil.assertNotNull(id, "OnlineApplictionID"); +        Logger.trace("Getting OnlineApplication with ID " + id + " from database."); + +        List result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getOnlineApplicationWithID")); +        //query.setParameter("id", id+"%"); +        query.setParameter("id", id); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } + +        if (result.size() > 1) { +            Logger.warn("OAIdentifier match to more then one DB-entry!"); +            return null; +        } + +        return (OnlineApplication) result.get(0); +    } + +    public static OnlineApplication getOnlineApplication(long dbid) { +        MiscUtil.assertNotNull(dbid, "OnlineApplictionID"); +        Logger.trace("Getting OnlineApplication with DBID " + dbid + " from database."); + +        List result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getOnlineApplicationWithDBID")); +        //query.setParameter("id", id+"%"); +        query.setParameter("id", dbid); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } + +        return (OnlineApplication) result.get(0); +    } + +    public static MOAIDConfiguration getMOAIDConfiguration() { +        Logger.trace("Load MOAID Configuration from database."); + +        List<MOAIDConfiguration> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getMOAIDConfiguration")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } + +        return (MOAIDConfiguration) result.get(0); +    } + +    public static List<OnlineApplication> getAllOnlineApplications() { +        Logger.trace("Get All OnlineApplications from database."); + +        List<OnlineApplication> result = null; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllOnlineApplications")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    } + +    public static List<OnlineApplication> getAllNewOnlineApplications() { +        Logger.trace("Get All OnlineApplications from database."); + +        List<OnlineApplication> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllNewOnlineApplications")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    } + +    public static List<UserDatabase> getAllUsers() { +        Logger.trace("Get All OnlineApplications from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllUsers")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    } + +    public static List<OnlineApplication> getAllActiveOnlineApplications() { +        Logger.trace("Get All active OnlineApplications from database."); + +        List<OnlineApplication> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllActiveOnlineApplications")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    } + +    @SuppressWarnings("rawtypes") +    public static List<OnlineApplication> searchOnlineApplications(String id) { +        MiscUtil.assertNotNull(id, "OnlineApplictionID"); +        Logger.trace("Getting OnlineApplication with ID " + id + " from database."); + +        List<OnlineApplication> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("searchOnlineApplicationsWithID")); +        query.setParameter("id", "%" + id + "%"); + +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } + +        return result; +    } + +    public static UserDatabase getUserWithID(long id) { +        MiscUtil.assertNotNull(id, "UserID"); +        Logger.trace("Getting Userinformation with ID " + id + " from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserID")); +        query.setParameter("id", id); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return (UserDatabase) result.get(0); +    } + +    public static UserDatabase getUsersWithOADBID(long id) { +        MiscUtil.assertNotNull(id, "OADBID"); +        Logger.trace("Getting Userinformation with OADBID " + id + " from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getUsersWithOADBID")); +        query.setParameter("id", id); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return (UserDatabase) result.get(0); +    } + +    public static UserDatabase getUserWithUserName(String username) { +        MiscUtil.assertNotNull(username, "UserName"); +        Logger.trace("Getting Userinformation with ID " + username + " from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserUsername")); +        query.setParameter("username", username); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return (UserDatabase) result.get(0); +    } + +    public static UserDatabase getUserWithUserBPKWBPK(String bpkwbpk) { +        MiscUtil.assertNotNull(bpkwbpk, "bpk/wbpk"); +        Logger.trace("Getting Userinformation with ID " + bpkwbpk + " from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getUserWithUserBPKWBPK")); +        query.setParameter("bpk", bpkwbpk); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return (UserDatabase) result.get(0); +    } + +    public static UserDatabase getNewUserWithTokken(String tokken) { +        MiscUtil.assertNotNull(tokken, "bpk/wbpk"); +        Logger.trace("Getting Userinformation with Tokken " + tokken + " from database."); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getNewUserWithUserTokken")); +        query.setParameter("tokken", tokken); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return (UserDatabase) result.get(0); +    } + +    public static List<UserDatabase> getAllNewUsers() { +        Logger.trace("Get all new Users from Database"); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllNewUsers")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    } + +    public static List<UserDatabase> getAllOpenUsersRequests() { +        Logger.trace("Get all new Users from Database"); + +        List<UserDatabase> result; +        EntityManager session = ConfigurationDBUtils.getCurrentSession(); + +        javax.persistence.Query query = session.createQuery(QUERIES.get("getAllOpenUsersRequests")); +        result = query.getResultList(); + +        Logger.trace("Found entries: " + result.size()); + +        if (result.size() == 0) { +            Logger.trace("No entries found."); +            return null; +        } +        return result; +    }  } diff --git a/id/server/mw-messages-api/.classpath b/id/server/mw-messages-api/.classpath index 8b5a9fa96..c15838fd0 100644 --- a/id/server/mw-messages-api/.classpath +++ b/id/server/mw-messages-api/.classpath @@ -6,11 +6,6 @@  			<attribute name="maven.pomderived" value="true"/>  		</attributes>  	</classpathentry> -	<classpathentry excluding="**" kind="src" output="target/classes" path="src/main/resources"> -		<attributes> -			<attribute name="maven.pomderived" value="true"/> -		</attributes> -	</classpathentry>  	<classpathentry kind="src" output="target/test-classes" path="src/test/java">  		<attributes>  			<attribute name="optional" value="true"/> diff --git a/id/server/proxy/moa-id-proxy.iml b/id/server/proxy/moa-id-proxy.iml index fb1a16d2e..86fa1b292 100644 --- a/id/server/proxy/moa-id-proxy.iml +++ b/id/server/proxy/moa-id-proxy.iml @@ -13,8 +13,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <excludeFolder url="file://$MODULE_DIR$/target" />      </content> diff --git a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/impl/SignSW.java b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/impl/SignSW.java index 4554a9586..6652560bd 100644 --- a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/impl/SignSW.java +++ b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/impl/SignSW.java @@ -426,16 +426,16 @@ public class SignSW implements SAMLEngineSignI {  	    final BasicX509Credential entityX509Cred = new BasicX509Credential();
  	    entityX509Cred.setEntityCertificate(cert);	    
 -	    try {
 -			cert.checkValidity();
 -		} 
 -	    catch (CertificateExpiredException exp) {
 -			throw new SAMLEngineException("Certificate expired.");
 -		}
 -		catch (CertificateNotYetValidException exp) {
 -			throw new SAMLEngineException("Certificate not yet valid.");
 -		}		
 -		
 +//	    try {
 +//			cert.checkValidity();
 +//		} 
 +//	    catch (CertificateExpiredException exp) {
 +//			throw new SAMLEngineException("Certificate expired.");
 +//		}
 +//		catch (CertificateNotYetValidException exp) {
 +//			throw new SAMLEngineException("Certificate not yet valid.");
 +//		}		
 +//		
  		boolean trusted = false;
  		for (final Enumeration<String> e = storkOwnKeyStore.aliases(); e.hasMoreElements();) 
 diff --git a/id/templates/moa-id-templates.iml b/id/templates/moa-id-templates.iml index 3b8b05541..0ecf962d0 100644 --- a/id/templates/moa-id-templates.iml +++ b/id/templates/moa-id-templates.iml @@ -13,8 +13,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../target/test-classes" />      <content url="file://$MODULE_DIR$">        <excludeFolder url="file://$MODULE_DIR$/target" />      </content> diff --git a/spss/handbook/clients/api/moa-spss-handbook-apiClient.iml b/spss/handbook/clients/api/moa-spss-handbook-apiClient.iml index 26b212283..c9c03b243 100644 --- a/spss/handbook/clients/api/moa-spss-handbook-apiClient.iml +++ b/spss/handbook/clients/api/moa-spss-handbook-apiClient.iml @@ -1,8 +1,8 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <excludeFolder url="file://$MODULE_DIR$/target" /> diff --git a/spss/handbook/clients/moa-spss-handbook-clients.iml b/spss/handbook/clients/moa-spss-handbook-clients.iml index 04a6248a2..3dda938d9 100644 --- a/spss/handbook/clients/moa-spss-handbook-clients.iml +++ b/spss/handbook/clients/moa-spss-handbook-clients.iml @@ -1,6 +1,6 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4"> -  <component name="NewModuleRootManager" inherit-compiler-output="false"> +  <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false">      <output url="file://$MODULE_DIR$/../../target/classes" />      <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$"> diff --git a/spss/handbook/clients/referencedData/moa-spss-handbook-referencedData.iml b/spss/handbook/clients/referencedData/moa-spss-handbook-referencedData.iml index 29685104a..678776d19 100644 --- a/spss/handbook/clients/referencedData/moa-spss-handbook-referencedData.iml +++ b/spss/handbook/clients/referencedData/moa-spss-handbook-referencedData.iml @@ -12,7 +12,7 @@        </configuration>      </facet>    </component> -  <component name="NewModuleRootManager" inherit-compiler-output="false"> +  <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false">      <output url="file://$MODULE_DIR$/../../../target/classes" />      <output-test url="file://$MODULE_DIR$/../../../target/test-classes" />      <content url="file://$MODULE_DIR$"> diff --git a/spss/handbook/clients/webservice/moa-spss-handbook-webserviceClient.iml b/spss/handbook/clients/webservice/moa-spss-handbook-webserviceClient.iml index 26b212283..c9c03b243 100644 --- a/spss/handbook/clients/webservice/moa-spss-handbook-webserviceClient.iml +++ b/spss/handbook/clients/webservice/moa-spss-handbook-webserviceClient.iml @@ -1,8 +1,8 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <excludeFolder url="file://$MODULE_DIR$/target" /> diff --git a/spss/handbook/moa-spss-handbook.iml b/spss/handbook/moa-spss-handbook.iml index ce921cbeb..deed935ed 100644 --- a/spss/handbook/moa-spss-handbook.iml +++ b/spss/handbook/moa-spss-handbook.iml @@ -9,7 +9,7 @@        </configuration>      </facet>    </component> -  <component name="NewModuleRootManager" inherit-compiler-output="false"> +  <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false">      <output url="file://$MODULE_DIR$/../target/classes" />      <output-test url="file://$MODULE_DIR$/../target/test-classes" />      <content url="file://$MODULE_DIR$"> diff --git a/spss/server/moa-spss.iml b/spss/server/moa-spss.iml index 4d170c8a3..567359474 100644 --- a/spss/server/moa-spss.iml +++ b/spss/server/moa-spss.iml @@ -1,6 +1,6 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4"> -  <component name="NewModuleRootManager" inherit-compiler-output="false"> +  <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false">      <output url="file://$MODULE_DIR$/../target/classes" />      <output-test url="file://$MODULE_DIR$/../target/test-classes" />      <content url="file://$MODULE_DIR$"> diff --git a/spss/server/serverlib/moa-spss-lib.iml b/spss/server/serverlib/moa-spss-lib.iml index 11dc743a9..7864354f4 100644 --- a/spss/server/serverlib/moa-spss-lib.iml +++ b/spss/server/serverlib/moa-spss-lib.iml @@ -45,8 +45,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <sourceFolder url="file://$MODULE_DIR$/src/test/java" isTestSource="true" /> diff --git a/spss/server/serverws/moa-spss-ws.iml b/spss/server/serverws/moa-spss-ws.iml index 45ebf8969..60f6d1803 100644 --- a/spss/server/serverws/moa-spss-ws.iml +++ b/spss/server/serverws/moa-spss-ws.iml @@ -15,8 +15,8 @@      </facet>    </component>    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <excludeFolder url="file://$MODULE_DIR$/target" />      </content> diff --git a/spss/server/tools/moa-spss-tools.iml b/spss/server/tools/moa-spss-tools.iml index a0c44cf2c..a880f50ab 100644 --- a/spss/server/tools/moa-spss-tools.iml +++ b/spss/server/tools/moa-spss-tools.iml @@ -1,8 +1,8 @@  <?xml version="1.0" encoding="UTF-8"?>  <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">    <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_5" inherit-compiler-output="false"> -    <output url="file://$MODULE_DIR$/target/classes" /> -    <output-test url="file://$MODULE_DIR$/target/test-classes" /> +    <output url="file://$MODULE_DIR$/../../target/classes" /> +    <output-test url="file://$MODULE_DIR$/../../target/test-classes" />      <content url="file://$MODULE_DIR$">        <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />        <sourceFolder url="file://$MODULE_DIR$/src/main/resources" type="java-resource" /> | 
