org.opengis.cite.securityclient10.httpServer

Class EmulatedServer

java.lang.Object

org.opengis.cite.securityclient10.httpServer.EmulatedServer

Direct Known Subclasses:

ServerWms111, ServerWms13, ServerWps20

public class EmulatedServer
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
protected DocumentBuilder	documentBuilder
protected DocumentBuilderFactory	documentFactory
protected ServerOptions	options Test Run Properties for this emulated server
protected String	relayState RelayState token for SAML2

Constructor Summary

Constructors

Constructor and Description
EmulatedServer()

Method Summary

Modifier and Type	Method and Description
protected String	buildSamlAuthRequest(String href) Generate a deflated and base64-encoded representation of a SAML authentication request document.
protected void	buildSecurityContext(org.opengis.cite.servlet.http.HttpServletRequest request, org.opengis.cite.servlet.http.HttpServletResponse response) Create a security context for the client, returning a response that sets a cookie.
protected void	enableCors(org.opengis.cite.servlet.http.HttpServletResponse response) Enable Cross Origin Resource Sharing (CORS).
protected boolean	getAuthenticationEnabled() Return true if authentication has been set to SAML2 or another valid value in the test server options.
protected static String	getUri(org.opengis.cite.servlet.http.HttpServletRequest request, Boolean contextOnly) Extract the uri from a request object.
protected PrintWriter	getWriterForResponse(org.opengis.cite.servlet.http.HttpServletResponse response) Get the writer for a HttpServletResponse, so we can send back a body
void	handleRequest(org.opengis.cite.servlet.http.HttpServletRequest request, org.opengis.cite.servlet.http.HttpServletResponse response) Subclasses must override this.
protected boolean	validateSamlAuthenticationResponse(org.opengis.cite.servlet.http.HttpServletRequest request, org.opengis.cite.servlet.http.HttpServletResponse response) Check if the request body has a valid SAML 2.0 Authentication Response document.
protected boolean	validateSecureRequest(org.opengis.cite.servlet.http.HttpServletRequest request, org.opengis.cite.servlet.http.HttpServletResponse response) Validate a request to a secure resource has a valid Security Context.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

documentFactory

protected DocumentBuilderFactory documentFactory

documentBuilder

protected DocumentBuilder documentBuilder

options

protected ServerOptions options

Test Run Properties for this emulated server

relayState

protected String relayState

RelayState token for SAML2

Constructor Detail

EmulatedServer

public EmulatedServer()

Method Detail

enableCors

protected void enableCors(org.opengis.cite.servlet.http.HttpServletResponse response)

Enable Cross Origin Resource Sharing (CORS). This allows web-based clients to connect to this test server from their web browser security environment.

Parameters:

response - Reponse on which to enable CORS headers

getAuthenticationEnabled

protected boolean getAuthenticationEnabled()

Return true if authentication has been set to SAML2 or another valid value in the test server options. Returns false if no authentication method has been enabled.

Returns:

Boolean

getWriterForResponse

protected PrintWriter getWriterForResponse(org.opengis.cite.servlet.http.HttpServletResponse response)

Get the writer for a HttpServletResponse, so we can send back a body

Parameters:

response - HttpServletResponse for the client

Returns:

PrintWriter for response body

getUri

protected static String getUri(org.opengis.cite.servlet.http.HttpServletRequest request,
                               Boolean contextOnly)

Extract the uri from a request object. If contextOnly is true, then any path segments after the context path are excluded.

Parameters:

request - The request to extract

contextOnly - Only include up to the context path

Returns:

The uri

handleRequest

public void handleRequest(org.opengis.cite.servlet.http.HttpServletRequest request,
                          org.opengis.cite.servlet.http.HttpServletResponse response)
                   throws IOException,
                          TransformerException

Subclasses must override this.

Parameters:

request - Request from client

response - Response to build to send back to client

Throws:

IOException - Exception raised when a response writer could not be created

TransformerException - Exception if transformer could not convert document to stream

buildSamlAuthRequest

protected String buildSamlAuthRequest(String href)
                               throws TransformerException

Generate a deflated and base64-encoded representation of a SAML authentication request document. This is meant to be used as a query parameter for clients to use when authenticating to a SAML 2 Identity Provider. The base path of the request handler is necessary to include the SAML callback URL that is sent to the Identity Provider.

Parameters:

href - The base path of the request handler

Returns:

String of auth request

Throws:

TransformerException - Exception if transformer could not convert document to stream

buildSecurityContext

protected void buildSecurityContext(org.opengis.cite.servlet.http.HttpServletRequest request,
                                    org.opengis.cite.servlet.http.HttpServletResponse response)
                             throws TransformerException

Create a security context for the client, returning a response that sets a cookie.

Parameters:

request - The request from the client

response - The response that will be modified

Throws:

TransformerException - Exception if transformer could not convert document to stream

validateSamlAuthenticationResponse

protected boolean validateSamlAuthenticationResponse(org.opengis.cite.servlet.http.HttpServletRequest request,
                                                     org.opengis.cite.servlet.http.HttpServletResponse response)

Check if the request body has a valid SAML 2.0 Authentication Response document. For the test suite, no check is actually done and "true" can always be returned.

Parameters:

request - The request from the client

response - The response to send to the client

Returns:

If the SAML Authentication response is valid

validateSecureRequest

protected boolean validateSecureRequest(org.opengis.cite.servlet.http.HttpServletRequest request,
                                        org.opengis.cite.servlet.http.HttpServletResponse response)
                                 throws TransformerException

Validate a request to a secure resource has a valid Security Context. In this case, a security context is defined using an HTTP cookie. If the cookie is invalid or missing, then respond with a redirect to the Identity Provider (if using SAML2) or Service Exception (if no authentication defined). If the cookie is valid, then simply return true, leaving the response alone.

Parameters:

request - The request from the client

response - The response to send to the client

Returns:

If the request has a valid security context

Throws:

TransformerException - Exception if transformer could not convert document to stream