/** * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. */ package org.apache.wss4j.policy.builders; import org.apache.neethi.Assertion; import org.apache.neethi.AssertionBuilderFactory; import org.apache.neethi.Policy; import org.apache.neethi.builders.AssertionBuilder; import org.apache.wss4j.policy.SP11Constants; import org.apache.wss4j.policy.SP13Constants; import org.apache.wss4j.policy.SPConstants; import org.apache.wss4j.policy.SPUtils; import org.apache.wss4j.policy.model.SecurityContextToken; import org.w3c.dom.Element; import javax.xml.namespace.QName; public class SecurityContextTokenBuilder implements AssertionBuilder<Element> { @Override public Assertion build(Element element, AssertionBuilderFactory factory) throws IllegalArgumentException { final SPConstants.SPVersion spVersion = SPConstants.SPVersion.getSPVersion(element.getNamespaceURI()); final String includeTokenValue = SPUtils.getAttribute(element, spVersion.getSPConstants().getIncludeToken()); final Element issuer = SPUtils.getFirstChildElement(element, spVersion.getSPConstants().getIssuer()); if (spVersion == SPConstants.SPVersion.SP11 && issuer != null) { throw new IllegalArgumentException(SPConstants.ERR_INVALID_POLICY); } final String issuerName = SPUtils.getFirstChildElementText(element, spVersion.getSPConstants().getIssuerName()); if (spVersion == SPConstants.SPVersion.SP11 && issuerName != null) { throw new IllegalArgumentException(SPConstants.ERR_INVALID_POLICY); } final Element claims = SPUtils.getFirstChildElement(element, spVersion.getSPConstants().getClaims()); final Element nestedPolicyElement = SPUtils.getFirstPolicyChildElement(element); Policy nestedPolicy = null; if (nestedPolicyElement == null) { if (spVersion != SPConstants.SPVersion.SP11) { throw new IllegalArgumentException("sp:SecurityContextToken must have an inner wsp:Policy element"); } nestedPolicy = new Policy(); } else { nestedPolicy = factory.getPolicyEngine().getPolicy(nestedPolicyElement); } SecurityContextToken securityContextToken = new SecurityContextToken( spVersion, spVersion.getSPConstants().getInclusionFromAttributeValue(includeTokenValue), issuer, issuerName, claims, nestedPolicy ); securityContextToken.setOptional(SPUtils.isOptional(element)); securityContextToken.setIgnorable(SPUtils.isIgnorable(element)); return securityContextToken; } @Override public QName[] getKnownElements() { return new QName[]{SP13Constants.SECURITY_CONTEXT_TOKEN, SP11Constants.SECURITY_CONTEXT_TOKEN}; } }