Package org.keycloak.adapters.saml.profile

Class AbstractSamlAuthenticationHandler

java.lang.Object

org.keycloak.adapters.saml.profile.AbstractSamlAuthenticationHandler

All Implemented Interfaces:

SamlAuthenticationHandler

Direct Known Subclasses:

EcpAuthenticationHandler, WebBrowserSsoAuthenticationHandler

public abstract class AbstractSamlAuthenticationHandler
extends Object
implements SamlAuthenticationHandler

Author:

Bill Burke

Field Summary

Fields

Modifier and Type	Field	Description
protected AuthChallenge	challenge
protected final SamlDeployment	deployment
protected final HttpFacade	facade
protected static org.jboss.logging.Logger	log
protected final SamlSessionStore	sessionStore

Constructor Summary

Constructors

Constructor	Description
AbstractSamlAuthenticationHandler(HttpFacade facade, SamlDeployment deployment, SamlSessionStore sessionStore)

Method Summary

Modifier and Type	Method	Description
protected AbstractInitiateLogin	createChallenge(boolean saveRequestUri)
AuthOutcome	doHandle(SamlInvocationContext context, OnSessionCreated onCreateSession)
protected SAMLDocumentHolder	extractPostBindingResponse(String response)
protected SAMLDocumentHolder	extractRedirectBindingResponse(String response)
AuthChallenge	getChallenge()
protected AuthOutcome	handleLoginResponse(SAMLDocumentHolder responseHolder, boolean postBinding, OnSessionCreated onCreateSession)
protected AuthOutcome	handleLogoutResponse(SAMLDocumentHolder holder, StatusResponseType responseType, String relayState)
protected AuthOutcome	handleRequest()
protected AuthOutcome	handleSamlRequest(String samlRequest, String relayState)
protected AuthOutcome	handleSamlResponse(String samlResponse, String relayState, OnSessionCreated onCreateSession)
protected AuthOutcome	initiateLogin(boolean saveRequestUri)
protected boolean	isAutodetectedBearerOnly(HttpFacade.Request request)
protected boolean	isRole(AttributeType attribute)
protected abstract AuthOutcome	logoutRequest(LogoutRequestType request, String relayState)
void	verifyPostBindingSignature(Document document, KeyLocator keyLocator)
protected boolean	verifySSL()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.adapters.saml.profile.SamlAuthenticationHandler

handle

Field Details

log

protected static org.jboss.logging.Logger log

facade

protected final HttpFacade facade

sessionStore

protected final SamlSessionStore sessionStore

deployment

protected final SamlDeployment deployment

challenge

protected AuthChallenge challenge

Constructor Details

AbstractSamlAuthenticationHandler

public AbstractSamlAuthenticationHandler(HttpFacade facade,
 SamlDeployment deployment,
 SamlSessionStore sessionStore)

Method Details

doHandle

public AuthOutcome doHandle(SamlInvocationContext context,
 OnSessionCreated onCreateSession)

handleRequest

protected AuthOutcome handleRequest()

getChallenge

public AuthChallenge getChallenge()

Specified by:

getChallenge in interface SamlAuthenticationHandler

handleSamlRequest

protected AuthOutcome handleSamlRequest(String samlRequest,
 String relayState)

logoutRequest

protected abstract AuthOutcome logoutRequest(LogoutRequestType request,
 String relayState)

handleSamlResponse

protected AuthOutcome handleSamlResponse(String samlResponse,
 String relayState,
 OnSessionCreated onCreateSession)

handleLoginResponse

protected AuthOutcome handleLoginResponse(SAMLDocumentHolder responseHolder,
 boolean postBinding,
 OnSessionCreated onCreateSession)

isRole

protected boolean isRole(AttributeType attribute)

handleLogoutResponse

protected AuthOutcome handleLogoutResponse(SAMLDocumentHolder holder,
 StatusResponseType responseType,
 String relayState)

extractRedirectBindingResponse

protected SAMLDocumentHolder extractRedirectBindingResponse(String response)

extractPostBindingResponse

protected SAMLDocumentHolder extractPostBindingResponse(String response)

initiateLogin

protected AuthOutcome initiateLogin(boolean saveRequestUri)

createChallenge

protected AbstractInitiateLogin createChallenge(boolean saveRequestUri)

verifySSL

protected boolean verifySSL()

verifyPostBindingSignature

public void verifyPostBindingSignature(Document document,
 KeyLocator keyLocator)
                                throws VerificationException

Throws:

VerificationException

isAutodetectedBearerOnly

protected boolean isAutodetectedBearerOnly(HttpFacade.Request request)