From 1626ac9867cd5406b83e73651080e33c11fb98d1 Mon Sep 17 00:00:00 2001 From: kstranacher_eGovL Date: Thu, 12 Jul 2012 11:27:13 +0000 Subject: Integration of STORK git-svn-id: https://joinup.ec.europa.eu/svn/moa-idspss/trunk@1285 d688527b-c9ab-4aba-bd8d-4036d912da1d --- .../validation/StorkStatusCodeValidator.java | 139 +++++++++++++++++++++ 1 file changed, 139 insertions(+) create mode 100644 id/server/stork-saml-engine/src/main/java/eu/stork/vidp/messages/validation/StorkStatusCodeValidator.java (limited to 'id/server/stork-saml-engine/src/main/java/eu/stork/vidp/messages/validation/StorkStatusCodeValidator.java') diff --git a/id/server/stork-saml-engine/src/main/java/eu/stork/vidp/messages/validation/StorkStatusCodeValidator.java b/id/server/stork-saml-engine/src/main/java/eu/stork/vidp/messages/validation/StorkStatusCodeValidator.java new file mode 100644 index 000000000..3ee214c46 --- /dev/null +++ b/id/server/stork-saml-engine/src/main/java/eu/stork/vidp/messages/validation/StorkStatusCodeValidator.java @@ -0,0 +1,139 @@ +/* + * Copyright 2011 by Graz University of Technology, Austria + * The Austrian STORK Modules have been developed by the E-Government + * Innovation Center EGIZ, a joint initiative of the Federal Chancellery + * Austria and Graz University of Technology. + * + * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by + * the European Commission - subsequent versions of the EUPL (the "Licence"); + * You may not use this work except in compliance with the Licence. + * You may obtain a copy of the Licence at: + * http://www.osor.eu/eupl/ + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the Licence is distributed on an "AS IS" basis, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the Licence for the specific language governing permissions and + * limitations under the Licence. + * + * This product combines work with different licenses. See the "NOTICE" text + * file for details on the various modules and licenses. + * The "NOTICE" text file is part of the distribution. Any derivative works + * that you distribute must include a readable copy of the "NOTICE" text file. + */ + + +package eu.stork.vidp.messages.validation; + +import org.opensaml.saml2.core.Status; +import org.opensaml.saml2.core.StatusCode; +import org.opensaml.saml2.core.validator.StatusCodeSchemaValidator; +import org.opensaml.xml.validation.ValidationException; + +public class StorkStatusCodeValidator extends StatusCodeSchemaValidator { + + // supported values according to SAML v2.0 specification + private static String[] ALLOWED_FIRST_LEVEL_STATUS_CODE_VALUES = new String[] { + "urn:oasis:names:tc:SAML:2.0:status:Success", + "urn:oasis:names:tc:SAML:2.0:status:Requester", + "urn:oasis:names:tc:SAML:2.0:status:Responder", + "urn:oasis:names:tc:SAML:2.0:status:VersionMismatch"}; + + private static String[] ALLOWED_SECOND_LEVEL_STATUS_CODE_VALUES = new String[] { + "urn:oasis:names:tc:SAML:2.0:status:AuthnFailed", + "urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue", + "urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy", + "urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext", + "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP", + "urn:oasis:names:tc:SAML:2.0:status:NoPassive", + "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP", + "urn:oasis:names:tc:SAML:2.0:status:PartialLogout", + "urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded", + "urn:oasis:names:tc:SAML:2.0:status:RequestDenied", + "urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported", + "urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated", + "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh", + "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow", + "urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized", + "urn:oasis:names:tc:SAML:2.0:status:TooManyResponses", + "urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile", + "urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal", + "urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding", + "http://www.stork.gov.eu/saml20/statusCodes/QAANotSupported" + }; + + /** + * Constructor + * + */ + public StorkStatusCodeValidator() { + + super(); + } + + @Override + public void validate(StatusCode statusCode) throws ValidationException { + + super.validate(statusCode); + + + if(statusCode.getValue() == null) { + + throw new ValidationException("StatusCode is required"); + } + + boolean valid = false; + + if (statusCode.getParent() instanceof Status) { + //first level Status Codes + + String value = statusCode.getValue(); + + + + + for(String allowedVal : ALLOWED_FIRST_LEVEL_STATUS_CODE_VALUES) { + + if(value.equals(allowedVal)) { + + valid = true; + break; + } + } + + if(!valid) { + + throw new ValidationException("First Level StatusCode has an invalid value."); + } + } else { + //parent is status code + //second level Status Codes + + if(statusCode != null) { + + valid = false; + + String subVal = statusCode.getValue(); + + for(String allowedVal : ALLOWED_SECOND_LEVEL_STATUS_CODE_VALUES) { + + if(subVal.equals(allowedVal)) { + + valid = true; + break; + } + } + + if(!valid) { + + throw new ValidationException("Second Level StatusCode has an invalid value."); + } + + } + + } + } + + + +} -- cgit v1.2.3