package at.gv.egovernment.moa.id.protocols.pvp2x.validation;

import org.opensaml.common.SignableSAMLObject;
import org.opensaml.saml2.core.RequestAbstractType;
import org.opensaml.security.SAMLSignatureProfileValidator;
import org.opensaml.xml.validation.ValidationException;

import at.gv.egovernment.moa.id.MOAIDException;
import at.gv.egovernment.moa.id.protocols.pvp2x.exceptions.SAMLRequestNotSignedException;

public class SAMLSignatureValidator implements ISAMLValidator {

	public void validateRequest(RequestAbstractType request)
			throws MOAIDException {
		if (request.getSignature() == null) {
			throw new SAMLRequestNotSignedException();
		}

		try {
			SAMLSignatureProfileValidator sigValidator = new SAMLSignatureProfileValidator();
			sigValidator.validate(request.getSignature());
		} catch (ValidationException e) {
			e.printStackTrace();
			throw new SAMLRequestNotSignedException(e);
		}
	}

	public static void validateSignable(SignableSAMLObject signableObject)
			throws MOAIDException {
		if (signableObject.getSignature() == null) {
			throw new SAMLRequestNotSignedException();
		}

		try {
			SAMLSignatureProfileValidator sigValidator = new SAMLSignatureProfileValidator();
			sigValidator.validate(signableObject.getSignature());
		} catch (ValidationException e) {
			e.printStackTrace();
			throw new SAMLRequestNotSignedException(e);
		}
	}
}