org.xdi.oxauth.service.fido.u2f.ValidationService クラス

org.xdi.oxauth.service.fido.u2f.ValidationService 連携図

公開メンバ関数
boolean	isValidSessionId (String userName, String sessionId)
boolean	isValidEnrollmentCode (String userName, String enrollmentCode)

非公開変数類
Logger	log
SessionIdService	sessionIdService
UserService	userService

詳解

Utility to validate U2F input data

著者

Yuriy Movchan

バージョン

August 9, 2017

関数詳解

isValidEnrollmentCode()

boolean org.xdi.oxauth.service.fido.u2f.ValidationService.isValidEnrollmentCode ( String  userName, String  enrollmentCode  )

inline

                                                                                 {
        if (enrollmentCode == null) {
            log.error("In two step authentication workflow enrollment_code is mandatory");
            return false;
        }

        User user = userService.getUser(userName, U2fConstants.U2F_ENROLLMENT_CODE_ATTRIBUTE);
        if (user == null) {
            log.error("Specified user_name '{}' is invalid", userName);
            return false;
        }

        String userEnrollmentCode = user.getAttribute(U2fConstants.U2F_ENROLLMENT_CODE_ATTRIBUTE);
        if (userEnrollmentCode == null) {
            log.error("Specified enrollment_code '{}' is invalid", enrollmentCode);
            return false;
        }

        if (!StringHelper.equalsIgnoreCase(userEnrollmentCode, enrollmentCode)) {
            log.error("Username '{}' and enrollment_code '{}' don't match", userName, enrollmentCode);
            return false;
        }

        return true;
    }

isValidSessionId()

boolean org.xdi.oxauth.service.fido.u2f.ValidationService.isValidSessionId ( String  userName, String  sessionId  )

inline

                                                                       {
        if (sessionId == null) {
            log.error("In two step authentication workflow session_id is mandatory");
            return false;
        }

        SessionId ldapSessionId = sessionIdService.getSessionId(sessionId);
        if (ldapSessionId == null) {
            log.error("Specified session_id '{}' is invalid", sessionId);
            return false;
        }

        String sessionIdUser = ldapSessionId.getSessionAttributes().get(Constants.AUTHENTICATED_USER);
        if (!StringHelper.equalsIgnoreCase(userName, sessionIdUser)) {
            log.error("Username '{}' and session_id '{}' don't match", userName, sessionId);
            return false;
        }

        return true;
    }

メンバ詳解

log

Logger org.xdi.oxauth.service.fido.u2f.ValidationService.log

private

sessionIdService

SessionIdService org.xdi.oxauth.service.fido.u2f.ValidationService.sessionIdService

private

userService

UserService org.xdi.oxauth.service.fido.u2f.ValidationService.userService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/service/fido/u2f/ValidationService.java