org.opensaml
Class SAMLAssertion

java.lang.Object
  org.opensaml.SAMLObject
      org.opensaml.SAMLSignedObject
          org.opensaml.SAMLAssertion

All Implemented Interfaces:

Cloneable

public class SAMLAssertion
extends SAMLSignedObject
implements Cloneable

Represents a SAML Assertion

Author:

Scott Cantor

Field Summary

protected ArrayList	advice
protected String	assertionId
protected ArrayList	conditions
protected Date	issueInstant
protected String	issuer
protected int	minor
protected Date	notBefore
protected Date	notOnOrAfter
protected ArrayList	statements

Fields inherited from class org.opensaml.SAMLObject

config, dirty, log, parentObject, root

Constructor Summary

SAMLAssertion()
Default constructor

SAMLAssertion(Element e)
Reconstructs an assertion from a DOM tree

SAMLAssertion(InputStream in)
Reconstructs an assertion from a stream

SAMLAssertion(InputStream in, int minor)
Reconstructs an assertion of a particular minor version from a stream

SAMLAssertion(String issuer, Date notBefore, Date notOnOrAfter, Collection conditions, Collection advice, Collection statements)
Builds an assertion out of its component parts

SAMLAssertion(String assertionId, Date issueInstant, String issuer, Date notBefore, Date notOnOrAfter, Collection conditions, Collection advice, Collection statements)
Builds an assertion out of its component parts

Method Summary

void	addAdvice(Object advice) Adds an advice element
void	addCondition(SAMLCondition c) Adds a condition to the assertion
void	addStatement(SAMLStatement s) Adds a statement to the assertion
protected Element	buildRoot(Document doc, boolean xmlns) Delegates the process of building the root element of an object and inserting appropriate namespaces.
void	checkValidity() Evaluates the object's content to see if it is currently valid if serialized.
Object	clone() Copies a SAML object such that no dependencies exist between the original and the copy
void	fromDOM(Element e) Initialization of an object from a DOM element
Iterator	getAdvice() Gets the optional Advice data included in the assertion Advice can be Strings (assertion references), Assertions, or DOM Elements.
Iterator	getConditions() Gets the conditions included in the assertion
String	getId() Gets the assertion ID from the assertion
Date	getIssueInstant() Gets the issue timestamp of the assertion
String	getIssuer() Gets the issuer of the assertion
int	getMinorVersion() Gets the MinorVersion of the assertion.
Date	getNotBefore() Gets the start of the assertion's validity period
Date	getNotOnOrAfter() Gets the end of the assertion's validity period
Iterator	getStatements() Gets the statements included in the assertion
protected void	insertSignature() Places the signature into the object's DOM to prepare for signing
void	removeAdvice(int index) Removes an advice element by position (zero-based)
void	removeCondition(int index) Removes a condition by position (zero-based)
void	removeStatement(int index) Removes a statement by position (zero-based)
void	setAdvice(Collection advice) Sets the optional Advice data to include in the assertion
void	setConditions(Collection conditions) Sets the conditions included in the assertion
void	setId(String id) Sets the assertion ID NOTE: Use this method with caution.
void	setIssueInstant(Date issueInstant) Sets the issue timestamp of the assertion
void	setIssuer(String issuer) Sets the issuer name
void	setMinorVersion(int minor) Sets the MinorVersion of the assertion
void	setNotBefore(Date notBefore) Sets the start of the assertion's validity period
void	setNotOnOrAfter(Date notOnOrAfter) Sets the end of the assertion's validity period
void	setStatements(Collection statements) Sets the statements to include in the assertion
Node	toDOM(Document doc, boolean xmlns) Transforms the object into a DOM tree using an existing document context

Methods inherited from class org.opensaml.SAMLSignedObject

getDigestAlgorithm, getNativeSignature, getSignatureAlgorithm, getSignatureElement, getX509Certificates, isSigned, setDirty, sign, sign, toDOM, unsign, verify, verify, verify

Methods inherited from class org.opensaml.SAMLObject

fromStream, fromStream, getParent, plantRoot, setParent, toBase64, toDOM, toDOM, toStream, toString

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

minor

protected int minor

assertionId

protected String assertionId

issuer

protected String issuer

issueInstant

protected Date issueInstant

notBefore

protected Date notBefore

notOnOrAfter

protected Date notOnOrAfter

conditions

protected ArrayList conditions

advice

protected ArrayList advice

statements

protected ArrayList statements

Constructor Detail

SAMLAssertion

public SAMLAssertion()

Default constructor

SAMLAssertion

public SAMLAssertion(String issuer,
                     Date notBefore,
                     Date notOnOrAfter,
                     Collection conditions,
                     Collection advice,
                     Collection statements)
              throws SAMLException

Builds an assertion out of its component parts

Parameters:

issuer - Name of SAML authority issuing assertion

notBefore - Optional start of validity

notOnOrAfter - Optional end of validity

conditions - Set of conditions on validity

advice - Optional advice content

statements - Set of SAML statements to place in assertion

Throws:

SAMLException - Raised if an assertion cannot be constructed from the supplied information

SAMLAssertion

public SAMLAssertion(String assertionId,
                     Date issueInstant,
                     String issuer,
                     Date notBefore,
                     Date notOnOrAfter,
                     Collection conditions,
                     Collection advice,
                     Collection statements)
              throws SAMLException

Builds an assertion out of its component parts

Parameters:

assertionId - Unique identifier for assertion

issueInstant - Time of issuance

issuer - Name of SAML authority issuing assertion

notBefore - Optional start of validity

notOnOrAfter - Optional end of validity

conditions - Set of conditions on validity

advice - Optional advice content

statements - Set of SAML statements to place in assertion

Throws:

SAMLException - Raised if an assertion cannot be constructed from the supplied information

SAMLAssertion

public SAMLAssertion(Element e)
              throws SAMLException

Reconstructs an assertion from a DOM tree

Parameters:

e - The root of a DOM tree

Throws:

SAMLException - Thrown if the object cannot be constructed

SAMLAssertion

public SAMLAssertion(InputStream in)
              throws SAMLException

Reconstructs an assertion from a stream

Parameters:

in - A stream containing XML

Throws:

SAMLException - Raised if an exception occurs while constructing the object.

SAMLAssertion

public SAMLAssertion(InputStream in,
                     int minor)
              throws SAMLException

Reconstructs an assertion of a particular minor version from a stream

Parameters:

in - A stream containing XML

minor - The minor version of the incoming assertion

Throws:

SAMLException - Raised if an exception occurs while constructing the object.

Method Detail

insertSignature

protected void insertSignature()
                        throws SAMLException

Places the signature into the object's DOM to prepare for signing

Specified by:

insertSignature in class SAMLSignedObject

Throws:

SAMLException - Thrown if an error occurs while placing the signature

fromDOM

public void fromDOM(Element e)
             throws SAMLException

Description copied from class: SAMLObject

Initialization of an object from a DOM element

Overrides:

fromDOM in class SAMLSignedObject

Parameters:

e - Root element of a DOM tree

Throws:

SAMLException - Raised if an exception occurs while constructing the object

See Also:

SAMLObject.fromDOM(org.w3c.dom.Element)

getMinorVersion

public int getMinorVersion()

Gets the MinorVersion of the assertion.

Returns:

The minor version

setMinorVersion

public void setMinorVersion(int minor)

Sets the MinorVersion of the assertion

Parameters:

minor - The minor version

getId

public String getId()

Gets the assertion ID from the assertion

Specified by:

getId in class SAMLSignedObject

Returns:

The assertion ID

setId

public void setId(String id)

Sets the assertion ID NOTE: Use this method with caution. Assertions must contain unique identifiers and only specialized applications should need to explicitly assign an identifier.

Parameters:

id - The assertion ID

getIssuer

public String getIssuer()

Gets the issuer of the assertion

Returns:

The issuer name

setIssuer

public void setIssuer(String issuer)

Sets the issuer name

Parameters:

issuer - The issuer name

getIssueInstant

public Date getIssueInstant()

Gets the issue timestamp of the assertion

Returns:

The issue timestamp

setIssueInstant

public void setIssueInstant(Date issueInstant)

Sets the issue timestamp of the assertion

Parameters:

issueInstant - The issue timestamp

getNotBefore

public Date getNotBefore()

Gets the start of the assertion's validity period

Returns:

The starting validity date and time

setNotBefore

public void setNotBefore(Date notBefore)

Sets the start of the assertion's validity period

Parameters:

notBefore - The starting validity date and time

getNotOnOrAfter

public Date getNotOnOrAfter()

Gets the end of the assertion's validity period

Returns:

The ending validity date and time

setNotOnOrAfter

public void setNotOnOrAfter(Date notOnOrAfter)

Sets the end of the assertion's validity period

Parameters:

notOnOrAfter - The ending validity date and time

getConditions

public Iterator getConditions()

Gets the conditions included in the assertion

Returns:

An iterator of SAML conditions

setConditions

public void setConditions(Collection conditions)
                   throws SAMLException

Sets the conditions included in the assertion

Parameters:

conditions - The conditions to include in the assertion

Throws:

SAMLException - Raised if any of the conditions are invalid

addCondition

public void addCondition(SAMLCondition c)
                  throws SAMLException

Adds a condition to the assertion

Parameters:

c - The condition to add

Throws:

SAMLException - Raised if an error occurs while adding the condition

removeCondition

public void removeCondition(int index)
                     throws IndexOutOfBoundsException

Removes a condition by position (zero-based)

Parameters:

index - The position of the condition to remove

Throws:

IndexOutOfBoundsException

getAdvice

public Iterator getAdvice()

Gets the optional Advice data included in the assertion Advice can be Strings (assertion references), Assertions, or DOM Elements.

Returns:

An iterator over the advice

setAdvice

public void setAdvice(Collection advice)
               throws SAMLException

Sets the optional Advice data to include in the assertion

Parameters:

advice - The Advice to include in the assertion

Throws:

SAMLException - Raised if unable to construct new Advice objects

addAdvice

public void addAdvice(Object advice)
               throws SAMLException

Adds an advice element

Parameters:

data - a String, SAMLAssertion, or DOM Element

Throws:

SAMLException - Raised if object is invalid

removeAdvice

public void removeAdvice(int index)
                  throws IndexOutOfBoundsException

Removes an advice element by position (zero-based)

Parameters:

index - The position of the element to remove

Throws:

IndexOutOfBoundsException

getStatements

public Iterator getStatements()

Gets the statements included in the assertion

Returns:

An iterator of SAML statements

setStatements

public void setStatements(Collection statements)
                   throws SAMLException

Sets the statements to include in the assertion

Parameters:

statements - The statements to include in the assertion

Throws:

SAMLException - Raised if unable to construct new statement objects

addStatement

public void addStatement(SAMLStatement s)
                  throws SAMLException

Adds a statement to the assertion

Parameters:

s - The statement to add

Throws:

SAMLException - Raised if an error occurs while adding the statement

removeStatement

public void removeStatement(int index)
                     throws IndexOutOfBoundsException

Removes a statement by position (zero-based)

Parameters:

index - The position of the statement to remove

Throws:

IndexOutOfBoundsException

buildRoot

protected Element buildRoot(Document doc,
                            boolean xmlns)

Description copied from class: SAMLObject

Delegates the process of building the root element of an object and inserting appropriate namespaces.

Specified by:

buildRoot in class SAMLObject

Parameters:

doc - The document context to use

xmlns - Include namespace(s) on root element?

Returns:

A new root element for the object

See Also:

SAMLObject.buildRoot(org.w3c.dom.Document,boolean)

toDOM

public Node toDOM(Document doc,
                  boolean xmlns)
           throws SAMLException

Description copied from class: SAMLObject

Transforms the object into a DOM tree using an existing document context

Overrides:

toDOM in class SAMLObject

Parameters:

doc - A Document object to use in manufacturing the tree

xmlns - Include namespace(s) on root element?

Returns:

Root element node of the DOM tree capturing the object

Throws:

SAMLException - Raised if the object is incompletely defined

See Also:

SAMLObject.toDOM(org.w3c.dom.Document,boolean)

checkValidity

public void checkValidity()
                   throws SAMLException

Description copied from class: SAMLObject

Evaluates the object's content to see if it is currently valid if serialized. Does not evaluate embedded objects except on the basis of whether they exist. For example, an Assertion must have a Statement, but if an invalid statement is added, SAMLAssertion.checkValidity() would succeed, while SAMLStatement.checkValidity would raise an exception.

Specified by:

checkValidity in class SAMLObject

Throws:

SAMLException - Raised if the serialized object would be invalid SAML, excluding any embedded objects

See Also:

SAMLObject.checkValidity()

clone

public Object clone()
             throws CloneNotSupportedException

Copies a SAML object such that no dependencies exist between the original and the copy

Overrides:

clone in class SAMLSignedObject

Returns:

The new object

Throws:

CloneNotSupportedException

See Also:

Object.clone()