org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter クラス

org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter の継承関係図

org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter 連携図

公開メンバ関数
boolean	isSupported (String description)
ClientRepresentation	convertToInternal (String description)
ClientDescriptionConverter	create (KeycloakSession session)
void	init (Config.Scope config)
void	postInit (KeycloakSessionFactory factory)
void	close ()
String	getId ()

静的公開メンバ関数
static SPSSODescriptorType	getSPDescriptor (EntityDescriptorType entityDescriptor)
static String	getServiceURL (SPSSODescriptorType sp, String bindingURI)

静的公開変数類
static final String	ID = "saml2-entity-descriptor"

静的非公開メンバ関数
static ClientRepresentation	loadEntityDescriptors (InputStream is)
static String	getLogoutLocation (SPSSODescriptorType idp, String bindingURI)

詳解

著者

Bill Burke

バージョン

Revision

1

関数詳解

close()

void org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.close ( )

inline

                        {
    }

convertToInternal()

ClientRepresentation org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.convertToInternal ( String  description )

inline

org.keycloak.exportimport.ClientDescriptionConverterを実装しています。

                                                                      {
        return loadEntityDescriptors(new ByteArrayInputStream(description.getBytes()));
    }

create()

ClientDescriptionConverter org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.create ( KeycloakSession  session )

inline

                                                                      {
        return this;
    }

getId()

String org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.getId ( )

inline

                          {
        return ID;
    }

getLogoutLocation()

static String org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.getLogoutLocation ( SPSSODescriptorType  idp, String  bindingURI  )

inlinestaticprivate

                                                                                        {
        String logoutResponseLocation = null;

        List<EndpointType> endpoints = idp.getSingleLogoutService();
        for (EndpointType endpoint : endpoints) {
            if (endpoint.getBinding().toString().equals(bindingURI)) {
                if (endpoint.getLocation() != null) {
                    logoutResponseLocation = endpoint.getLocation().toString();
                } else {
                    logoutResponseLocation = null;
                }

                break;
            }

        }
        return logoutResponseLocation;
    }

getServiceURL()

static String org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.getServiceURL ( SPSSODescriptorType  sp, String  bindingURI  )

inlinestatic

Get the service url for the SP

引数

sp
bindingURI

戻り値

                                                                                  {
        List<IndexedEndpointType> endpoints = sp.getAssertionConsumerService();
        for (IndexedEndpointType endpoint : endpoints) {
            if (Objects.equals(endpoint.getBinding().toString(), bindingURI)) {
                return endpoint.getLocation().toString();
            }

        }
        return null;
    }

getSPDescriptor()

static SPSSODescriptorType org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.getSPDescriptor ( EntityDescriptorType  entityDescriptor )

inlinestatic

Get the SP Descriptor from an entity descriptor

引数

entityDescriptor

戻り値

                                                                                             {
        return entityDescriptor.getChoiceType().stream()
          .flatMap(d -> d.getDescriptors().stream())
          .map(EDTDescriptorChoiceType::getSpDescriptor)
          .filter(Objects::nonNull)
          .findFirst()
          .orElse(null);
    }

init()

void org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.init ( Config.Scope  config )

inline

                                          {
    }

isSupported()

boolean org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.isSupported ( String  description )

inline

org.keycloak.exportimport.ClientDescriptionConverterFactoryを実装しています。

                                                   {
        description = description.trim();
        return (description.startsWith("<") && description.endsWith(">") && description.contains("EntityDescriptor"));
    }

loadEntityDescriptors()

static ClientRepresentation org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.loadEntityDescriptors ( InputStream  is )

inlinestaticprivate

                                                                              {
        Object metadata;
        try {
            metadata = SAMLParser.getInstance().parse(is);
        } catch (ParsingException e) {
            throw new RuntimeException(e);
        }
        EntitiesDescriptorType entities;

        if (EntitiesDescriptorType.class.isInstance(metadata)) {
            entities = (EntitiesDescriptorType) metadata;
        } else {
            entities = new EntitiesDescriptorType();
            entities.addEntityDescriptor(metadata);
        }

        if (entities.getEntityDescriptor().size() != 1) {
            throw new RuntimeException("Expected one entity descriptor");
        }

        EntityDescriptorType entity = (EntityDescriptorType) entities.getEntityDescriptor().get(0);
        String entityId = entity.getEntityID();

        ClientRepresentation app = new ClientRepresentation();
        app.setClientId(entityId);

        Map<String, String> attributes = new HashMap<>();
        app.setAttributes(attributes);

        List<String> redirectUris = new LinkedList<>();
        app.setRedirectUris(redirectUris);

        app.setFullScopeAllowed(true);
        app.setProtocol(SamlProtocol.LOGIN_PROTOCOL);
        attributes.put(SamlConfigAttributes.SAML_SERVER_SIGNATURE, SamlProtocol.ATTRIBUTE_TRUE_VALUE); // default to true
        attributes.put(SamlConfigAttributes.SAML_SERVER_SIGNATURE_KEYINFO_EXT, SamlProtocol.ATTRIBUTE_FALSE_VALUE); // default to false
        attributes.put(SamlConfigAttributes.SAML_SIGNATURE_ALGORITHM, SignatureAlgorithm.RSA_SHA256.toString());
        attributes.put(SamlConfigAttributes.SAML_AUTHNSTATEMENT, SamlProtocol.ATTRIBUTE_TRUE_VALUE);
        SPSSODescriptorType spDescriptorType = getSPDescriptor(entity);
        if (spDescriptorType.isWantAssertionsSigned()) {
            attributes.put(SamlConfigAttributes.SAML_ASSERTION_SIGNATURE, SamlProtocol.ATTRIBUTE_TRUE_VALUE);
        }
        String logoutPost = getLogoutLocation(spDescriptorType, JBossSAMLURIConstants.SAML_HTTP_POST_BINDING.get());
        if (logoutPost != null) attributes.put(SamlProtocol.SAML_SINGLE_LOGOUT_SERVICE_URL_POST_ATTRIBUTE, logoutPost);
        String logoutRedirect = getLogoutLocation(spDescriptorType, JBossSAMLURIConstants.SAML_HTTP_REDIRECT_BINDING.get());
        if (logoutRedirect != null) attributes.put(SamlProtocol.SAML_SINGLE_LOGOUT_SERVICE_URL_REDIRECT_ATTRIBUTE, logoutRedirect);

        String assertionConsumerServicePostBinding = getServiceURL(spDescriptorType, JBossSAMLURIConstants.SAML_HTTP_POST_BINDING.get());
        if (assertionConsumerServicePostBinding != null) {
            attributes.put(SamlProtocol.SAML_ASSERTION_CONSUMER_URL_POST_ATTRIBUTE, assertionConsumerServicePostBinding);
            redirectUris.add(assertionConsumerServicePostBinding);
        }
        String assertionConsumerServiceRedirectBinding = getServiceURL(spDescriptorType, JBossSAMLURIConstants.SAML_HTTP_REDIRECT_BINDING.get());
        if (assertionConsumerServiceRedirectBinding != null) {
            attributes.put(SamlProtocol.SAML_ASSERTION_CONSUMER_URL_REDIRECT_ATTRIBUTE, assertionConsumerServiceRedirectBinding);
            redirectUris.add(assertionConsumerServiceRedirectBinding);
        }
        String assertionConsumerServiceSoapBinding = getServiceURL(spDescriptorType, JBossSAMLURIConstants.SAML_SOAP_BINDING.get());
        if (assertionConsumerServiceSoapBinding != null) {
            redirectUris.add(assertionConsumerServiceSoapBinding);
        }
        String assertionConsumerServicePaosBinding = getServiceURL(spDescriptorType, JBossSAMLURIConstants.SAML_PAOS_BINDING.get());
        if (assertionConsumerServicePaosBinding != null) {
            redirectUris.add(assertionConsumerServicePaosBinding);
        }
        if (spDescriptorType.getNameIDFormat() != null) {
            for (String format : spDescriptorType.getNameIDFormat()) {
                String attribute = SamlClient.samlNameIDFormatToClientAttribute(format);
                if (attribute != null) {
                    attributes.put(SamlConfigAttributes.SAML_NAME_ID_FORMAT_ATTRIBUTE, attribute);
                    break;
                }
            }
        }

        for (KeyDescriptorType keyDescriptor : spDescriptorType.getKeyDescriptor()) {
            X509Certificate cert = null;
            try {
                cert = SAMLMetadataUtil.getCertificate(keyDescriptor);
            } catch (ConfigurationException e) {
                throw new RuntimeException(e);
            } catch (ProcessingException e) {
                throw new RuntimeException(e);
            }
            String certPem = KeycloakModelUtils.getPemFromCertificate(cert);
            if (keyDescriptor.getUse() == KeyTypes.SIGNING) {
                attributes.put(SamlConfigAttributes.SAML_CLIENT_SIGNATURE_ATTRIBUTE, SamlProtocol.ATTRIBUTE_TRUE_VALUE);
                attributes.put(SamlConfigAttributes.SAML_SIGNING_CERTIFICATE_ATTRIBUTE, certPem);
            } else if (keyDescriptor.getUse() == KeyTypes.ENCRYPTION) {
                attributes.put(SamlConfigAttributes.SAML_ENCRYPT, SamlProtocol.ATTRIBUTE_TRUE_VALUE);
                attributes.put(SamlConfigAttributes.SAML_ENCRYPTION_CERTIFICATE_ATTRIBUTE, certPem);
            }
        }

        return app;
    }

postInit()

void org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.postInit ( KeycloakSessionFactory  factory )

inline

                                                         {
    }

メンバ詳解

ID

final String org.keycloak.protocol.saml.EntityDescriptorDescriptionConverter.ID = "saml2-entity-descriptor"

static

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/protocol/saml/EntityDescriptorDescriptionConverter.java