/* * JBoss, Home of Professional Open Source. * Copyright 2008, Red Hat Middleware LLC, and individual contributors * as indicated by the @author tags. See the copyright.txt file in the * distribution for a full listing of individual contributors. * * This is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as * published by the Free Software Foundation; either version 2.1 of * the License, or (at your option) any later version. * * This software is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this software; if not, write to the Free * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA * 02110-1301 USA, or see the FSF site: http://www.fsf.org. */ package org.picketlink.identity.federation.core.parsers.saml; import javax.xml.datatype.XMLGregorianCalendar; import javax.xml.namespace.QName; import javax.xml.stream.XMLEventReader; import javax.xml.stream.events.Attribute; import javax.xml.stream.events.EndElement; import javax.xml.stream.events.StartElement; import javax.xml.stream.events.XMLEvent; import org.picketlink.identity.federation.PicketLinkLogger; import org.picketlink.identity.federation.PicketLinkLoggerFactory; import org.picketlink.identity.federation.core.exceptions.ParsingException; import org.picketlink.identity.federation.core.parsers.ParserNamespaceSupport; import org.picketlink.identity.federation.core.parsers.util.StaxParserUtil; import org.picketlink.identity.federation.core.saml.v1.SAML11Constants; import org.picketlink.identity.federation.core.saml.v2.constants.JBossSAMLConstants; import org.picketlink.identity.federation.core.saml.v2.util.XMLTimeUtil; import org.picketlink.identity.federation.saml.v1.assertion.SAML11AssertionType; import org.picketlink.identity.federation.saml.v1.protocol.SAML11ResponseType; import org.picketlink.identity.federation.saml.v1.protocol.SAML11StatusCodeType; import org.picketlink.identity.federation.saml.v1.protocol.SAML11StatusType; import org.picketlink.identity.federation.saml.v2.protocol.StatusDetailType; import org.w3c.dom.Element; /** * Parse the SAML 11 Response * * @author Anil.Saldhana@redhat.com * @since 23 June 2011 */ public class SAML11ResponseParser implements ParserNamespaceSupport { private static final PicketLinkLogger logger = PicketLinkLoggerFactory.getLogger(); private final String RESPONSE = JBossSAMLConstants.RESPONSE.get(); /** * @see {@link ParserNamespaceSupport#parse(XMLEventReader)} */ public Object parse(XMLEventReader xmlEventReader) throws ParsingException { // Get the startelement StartElement startElement = StaxParserUtil.getNextStartElement(xmlEventReader); StaxParserUtil.validate(startElement, RESPONSE); Attribute idAttr = startElement.getAttributeByName(new QName(SAML11Constants.RESPONSE_ID)); if (idAttr == null) throw logger.parserRequiredAttribute(SAML11Constants.RESPONSE_ID); String id = StaxParserUtil.getAttributeValue(idAttr); Attribute issueInstant = startElement.getAttributeByName(new QName(SAML11Constants.ISSUE_INSTANT)); if (issueInstant == null) throw logger.parserRequiredAttribute(SAML11Constants.ISSUE_INSTANT); XMLGregorianCalendar issueInstantVal = XMLTimeUtil.parse(StaxParserUtil.getAttributeValue(issueInstant)); SAML11ResponseType response = new SAML11ResponseType(id, issueInstantVal); while (xmlEventReader.hasNext()) { // Let us peek at the next start element startElement = StaxParserUtil.peekNextStartElement(xmlEventReader); if (startElement == null) break; String elementName = StaxParserUtil.getStartElementName(startElement); if (JBossSAMLConstants.SIGNATURE.get().equals(elementName)) { Element sig = StaxParserUtil.getDOMElement(xmlEventReader); response.setSignature(sig); } else if (JBossSAMLConstants.ASSERTION.get().equals(elementName)) { SAML11AssertionParser assertionParser = new SAML11AssertionParser(); response.add((SAML11AssertionType) assertionParser.parse(xmlEventReader)); } else if (JBossSAMLConstants.STATUS.get().equals(elementName)) { response.setStatus(parseStatus(xmlEventReader)); } else throw logger.parserUnknownStartElement(elementName, startElement.getLocation()); } return response; } /** * Parse the status element * * @param xmlEventReader * @return * @throws ParsingException */ protected SAML11StatusType parseStatus(XMLEventReader xmlEventReader) throws ParsingException { // Get the Start Element StartElement startElement = StaxParserUtil.getNextStartElement(xmlEventReader); String STATUS = JBossSAMLConstants.STATUS.get(); StaxParserUtil.validate(startElement, STATUS); SAML11StatusType status = new SAML11StatusType(); while (xmlEventReader.hasNext()) { startElement = StaxParserUtil.peekNextStartElement(xmlEventReader); if (startElement == null) break; QName startElementName = startElement.getName(); String elementTag = startElementName.getLocalPart(); SAML11StatusCodeType statusCode = null; if (JBossSAMLConstants.STATUS_CODE.get().equals(elementTag)) { startElement = StaxParserUtil.getNextStartElement(xmlEventReader); if (startElement == null) break; Attribute valueAttr = startElement.getAttributeByName(new QName("Value")); if (valueAttr != null) { statusCode = new SAML11StatusCodeType(new QName(StaxParserUtil.getAttributeValue(valueAttr))); } status.setStatusCode(statusCode); // Peek at the next start element to see if it is status code startElement = StaxParserUtil.peekNextStartElement(xmlEventReader); elementTag = startElement.getName().getLocalPart(); if (JBossSAMLConstants.STATUS_CODE.get().equals(elementTag)) { SAML11StatusCodeType subStatusCodeType = null; startElement = StaxParserUtil.getNextStartElement(xmlEventReader); Attribute subValueAttr = startElement.getAttributeByName(new QName("Value")); if (subValueAttr != null) { subStatusCodeType = new SAML11StatusCodeType(new QName(StaxParserUtil.getAttributeValue(subValueAttr))); } statusCode.setStatusCode(subStatusCodeType); // Go to Status code end element. EndElement endElement = StaxParserUtil.getNextEndElement(xmlEventReader); StaxParserUtil.validate(endElement, JBossSAMLConstants.STATUS_CODE.get()); continue; } } if (JBossSAMLConstants.STATUS_MESSAGE.get().equals(elementTag)) { startElement = StaxParserUtil.getNextStartElement(xmlEventReader); if (startElement == null) break; status.setStatusMessage(StaxParserUtil.getElementText(xmlEventReader)); } if (JBossSAMLConstants.STATUS_DETAIL.get().equals(elementTag)) { startElement = StaxParserUtil.getNextStartElement(xmlEventReader); if (startElement == null) break; Element domElement = StaxParserUtil.getDOMElement(xmlEventReader); StatusDetailType statusDetailType = new StatusDetailType(); statusDetailType.addStatusDetail(domElement); status.setStatusDetail(statusDetailType); } // Get the next end element XMLEvent xmlEvent = StaxParserUtil.peek(xmlEventReader); if (xmlEvent instanceof EndElement) { EndElement endElement = StaxParserUtil.getNextEndElement(xmlEventReader); if (StaxParserUtil.matches(endElement, STATUS)) break; else throw logger.parserUnknownEndElement(StaxParserUtil.getEndElementName(endElement)); } else break; } return status; } /** * @see {@link ParserNamespaceSupport#supports(QName)} */ public boolean supports(QName qname) { return SAML11Constants.PROTOCOL_11_NSURI.equals(qname.getNamespaceURI()) && RESPONSE.equals(qname.getLocalPart()); } }