/*
* Copyright 2003 Federal Chancellery Austria
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package at.gv.egovernment.moa.id.auth.parser;
import iaik.x509.X509Certificate;
import java.io.ByteArrayInputStream;
import java.io.InputStream;
import java.security.cert.CertificateException;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.parsers.ParserConfigurationException;
import javax.xml.transform.TransformerException;
import org.apache.axis.encoding.Base64;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
import at.gv.egovernment.moa.id.AuthenticationException;
import at.gv.egovernment.moa.id.ParseException;
import at.gv.egovernment.moa.id.auth.data.IdentityLink;
import at.gv.egovernment.moa.id.auth.validator.parep.client.szrgw.SZRGWConstants;
import at.gv.egovernment.moa.util.Constants;
import at.gv.egovernment.moa.util.DOMUtils;
import at.gv.egovernment.moa.util.XPathUtils;
import com.sun.org.apache.xpath.internal.XPathAPI;
/**
* Parses an <InfoboxReadResponse>
.
*
* @author Stefan Knirsch
* @version $Id$
*/
public class InfoboxReadResponseParser {
/** This is the root element of the XML-Document provided by the Security Layer Card*/
private Element infoBoxElem_;
/**
* Parses and validates the document given as string and extracts the
* root element.
*
* @param xmlResponse <InfoboxReadResponse>
as String
* @throws ParseException If an element cannot be parsed
* @throws AuthenticationException If any authentication error occurs
*/
public InfoboxReadResponseParser(String xmlResponse) throws ParseException, AuthenticationException {
try {
InputStream s = new ByteArrayInputStream(xmlResponse.getBytes("UTF-8"));
init(s);
}
catch (Throwable t) {
throw new ParseException("parser.01", new Object[] { t.toString()}, t);
}
}
/**
* Parses and validates the document given as stream and extracts the
* root element.
*
* @param is <InfoboxReadResponse>
as InputStream
* @throws ParseException If an element cannot be parsed
* @throws AuthenticationException If any authentication error occurs
*/
public InfoboxReadResponseParser(InputStream is) throws ParseException, AuthenticationException {
init(is);
}
/**
* Initializes the parser.
* Parses and validates the document given as stream and extracts the
* root element.
*
* @param is The InfoBoxReadResponse as stream.
* @throws AuthenticationException If an authentication error occurs.
* @throws ParseException If an error occurs on parsing the the document.
*/
private void init(InputStream is) throws AuthenticationException, ParseException {
try {
Element responseElem = DOMUtils.parseXmlValidating(is);
if ("InfoboxReadResponse".equals(responseElem.getLocalName())) {
infoBoxElem_ = responseElem;
} else {
ErrorResponseParser erp = new ErrorResponseParser(responseElem);
throw new AuthenticationException("auth.08", new Object[] { erp.getErrorCode(), erp.getErrorInfo()});
}
} catch (Throwable t) {
throw new ParseException("parser.01", new Object[] { t.toString()}, t);
}
}
/**
* Parses the embedded <saml:Assertion>
element from <InfoboxReadResponse>
* @return <saml:Assertion>
as String
* @throws ParseException on any parsing error
*/
// public String parseSAMLAssertion() throws ParseException {
// try {
//
// String slPrefix = XPathUtils.getSlPrefix(infoBoxElem_);
// StringBuffer sb = new StringBuffer("/");
// sb.append(slPrefix);
// sb.append(":InfoboxReadResponse/");
// sb.append(slPrefix);
// sb.append(":BinaryFileData/");
// sb.append(slPrefix);
// sb.append(":XMLContent/");
// sb.append(Constants.SAML_PREFIX);
// sb.append(":Assertion");
// String samlAssertionXPath = sb.toString();
// Element samlAssertion = (Element) XPathUtils.selectSingleNode(infoBoxElem_, samlAssertionXPath);
// return DOMUtils.serializeNode(samlAssertion);
//
// }
// catch (Throwable t) {
// throw new ParseException("parser.01", new Object[] { t.toString()}, t);
// }
// }
/**
* Parses the embedded <saml:Assertion>
element from <InfoboxReadResponse>
* @return <saml:Assertion>
as String
* @throws ParseException on any parsing error
*/
public Element parseSAMLAssertion() throws ParseException {
try {
String slPrefix = XPathUtils.getSlPrefix(infoBoxElem_);
StringBuffer sb = new StringBuffer("/");
sb.append(slPrefix);
sb.append(":InfoboxReadResponse/");
sb.append(slPrefix);
sb.append(":BinaryFileData/");
sb.append(slPrefix);
sb.append(":XMLContent/");
sb.append(Constants.SAML_PREFIX);
sb.append(":Assertion");
String samlAssertionXPath = sb.toString();
Element samlAssertion = (Element) XPathUtils.selectSingleNode(infoBoxElem_, samlAssertionXPath);
return samlAssertion;
}
catch (Throwable t) {
throw new ParseException("parser.01", new Object[] { t.toString()}, t);
}
}
/**
* Parses the identity link from the <saml:Assertion>
* @return Identity link
* @throws ParseException on any parsing error
*/
// public IdentityLink parseIdentityLink() throws ParseException {
// String samlAssertionString = parseSAMLAssertion();
// IdentityLinkAssertionParser ilParser = new IdentityLinkAssertionParser(samlAssertionString);
// return ilParser.parseIdentityLink();
// }
/**
* Parses the identity link from the <saml:Assertion>
* @return Identity link
* @throws ParseException on any parsing error
*/
public IdentityLink parseIdentityLink() throws ParseException {
Element samlAssertion = parseSAMLAssertion();
IdentityLinkAssertionParser ilParser = new IdentityLinkAssertionParser(samlAssertion);
return ilParser.parseIdentityLink();
}
/**
* Returns the certificate given in the InfoboxReadResponse
* @return
* @throws ParseException
*/
public X509Certificate parseCertificate() throws ParseException {
try {
DocumentBuilder builder = DocumentBuilderFactory.newInstance().newDocumentBuilder();
Document doc = builder.newDocument();
Element nameSpaceNode = doc.createElement("NameSpaceNode");
nameSpaceNode.setAttribute("xmlns:" + Constants.PD_PREFIX, Constants.PD_NS_URI);
nameSpaceNode.setAttribute("xmlns:" + Constants.DSIG_PREFIX, Constants.DSIG_NS_URI);
nameSpaceNode.setAttribute("xmlns:" + Constants.SL12_PREFIX, Constants.SL12_NS_URI);
Element base64ContentElement = (Element)XPathAPI.selectSingleNode(infoBoxElem_.getParentNode(), "//sl:Base64Content[1]", nameSpaceNode);
if (base64ContentElement == null) {
throw new ParseException("parser.01", new Object[] { "Could not find Base64Content for X509Certificate."});
}
String base64Content = DOMUtils.getText(base64ContentElement);
// Decode Base64 value to X509Certificate
byte[] content = Base64.decode(base64Content);
return new X509Certificate(content);
} catch (ParserConfigurationException e) {
throw new ParseException("parser.01", new Object[] { "Could not parse X509Certificate from InfoboxReadRequest."}, e);
} catch (TransformerException e) {
throw new ParseException("parser.01", new Object[] { "Could not parse X509Certificate from InfoboxReadRequest."}, e);
} catch (CertificateException e) {
throw new ParseException("parser.01", new Object[] { "Could not parse X509Certificate from InfoboxReadRequest."}, e);
}
}
}