edu.wisc.cae.service.impl

Class CAEAuthServiceImpl

java.lang.Object

edu.wisc.cae.service.impl.CAEAuthServiceImpl

All Implemented Interfaces:

CAEAuthService

public class CAEAuthServiceImpl
extends Object
implements CAEAuthService

Constructor Summary

Constructors

Constructor and Description
CAEAuthServiceImpl()

Method Summary

Methods

Modifier and Type	Method and Description
String	getSAMLTokenFromShib(String base64String) Take a base64 + urlEncoded Shibboleth Assertion and use it as the authenticated basis to issue a CAE SAML Assertion.
String	getSAMLTokenFromUsernamePassword(String username, String password, String requestIP) Generate a token that represents a SAML Assertion for use in other CAE Web Services for Authentication.
CAESamlInfo	getVerificationInfo(String guid) This will return a CAESamlInfo about an issued CAE SAML Assertion
RevokeResponse	revokeSAMLToken(String guid) Revoke a SAML Assertion
void	setAllowedClockSkew(int seconds)
void	setCaeapiKeyDao(CaeapiKeyDao caeapiDao)
void	setCaeapiUserInfoDao(CaeapiUserInfoDao caeapiDao)
void	setIdpPublicCertificateFile(String certFile)
void	setKeystoreAlias(String keystoreAlias)
void	setKeystoreFilename(String keystoreFilename)
void	setKeystorePassword(String keystorePassword)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CAEAuthServiceImpl

public CAEAuthServiceImpl()

Method Detail

setKeystorePassword

public void setKeystorePassword(String keystorePassword)

setKeystoreFilename

public void setKeystoreFilename(String keystoreFilename)

setKeystoreAlias

public void setKeystoreAlias(String keystoreAlias)

setIdpPublicCertificateFile

public void setIdpPublicCertificateFile(String certFile)

setAllowedClockSkew

public void setAllowedClockSkew(int seconds)

setCaeapiKeyDao

@Autowired
public void setCaeapiKeyDao(CaeapiKeyDao caeapiDao)

setCaeapiUserInfoDao

@Autowired
public void setCaeapiUserInfoDao(CaeapiUserInfoDao caeapiDao)

getSAMLTokenFromShib

public String getSAMLTokenFromShib(String base64String)
                            throws SoapSAMLException

Take a base64 + urlEncoded Shibboleth Assertion and use it as the authenticated basis to issue a CAE SAML Assertion.

Specified by:

getSAMLTokenFromShib in interface CAEAuthService

Parameters:

base64String -

Returns:

Throws:

SoapSAMLException

getSAMLTokenFromUsernamePassword

public String getSAMLTokenFromUsernamePassword(String username,
                                      String password,
                                      String requestIP)
                                        throws SoapSAMLException

Description copied from interface: CAEAuthService

Generate a token that represents a SAML Assertion for use in other CAE Web Services for Authentication.

This method will take a username/password pair for authentication. The username/password must match a username/password pair in the CAE Authentication system.

If successful, the return is a string of the CAE SAML Assertion that has also been URL Encoded and then base64 encoded. Before it can be used as a WS-Security token, it will need to be base64 decoded, and then URL Decoded. Do not modify this decoded string in any way or the signed signature of the assertion will not validate.

Specified by:

getSAMLTokenFromUsernamePassword in interface CAEAuthService

Parameters:

username - - the CAE Login name to authenticate with

password - - the password for the CAE Account specified

requestIP - - This is filled in by the web service call, the IP Address of the calling client. It is not part of the endpoint request

Returns:

Throws:

SoapSAMLException

revokeSAMLToken

public RevokeResponse revokeSAMLToken(String guid)
                               throws SoapSAMLException

Description copied from interface: CAEAuthService

Revoke a SAML Assertion

The GUID needed is the value from inside the CAE SAML Assertion.

Upon success, the assertion specified will be marked as revoked. Any call to the getVerificationInfo will return that it is no longer a valid assertion.

Specified by:

revokeSAMLToken in interface CAEAuthService

Returns:

Throws:

SoapSAMLException

getVerificationInfo

public CAESamlInfo getVerificationInfo(String guid)
                                throws SoapSAMLException

Description copied from interface: CAEAuthService

This will return a CAESamlInfo about an issued CAE SAML Assertion

The GUID needed is the value from inside the CAE SAML Assertion.

Specified by:

getVerificationInfo in interface CAEAuthService

Parameters:

guid - - The token to get the information about

Returns:

Throws:

SoapSAMLException