TokenType
- type of token which is being evaluated by the underlying trust enginepublic abstract class BaseTrustEngineRule<TokenType> extends Object implements SecurityPolicyRule
Constructor and Description |
---|
BaseTrustEngineRule(org.opensaml.xml.security.trust.TrustEngine<TokenType> engine)
Constructor.
|
Modifier and Type | Method and Description |
---|---|
protected abstract org.opensaml.xml.security.CriteriaSet |
buildCriteriaSet(String entityID,
MessageContext messageContext)
Subclasses are required to implement this method to build a criteria set for the trust engine
according to trust engine and application-specific needs.
|
protected boolean |
evaluate(TokenType token,
org.opensaml.xml.security.CriteriaSet criteriaSet)
Evaluate the token against the specified criteria using the configured trust engine.
|
protected boolean |
evaluate(TokenType token,
String entityID,
MessageContext messageContext)
Evaluate the token using the configured trust engine against criteria built using
the specified candidate issuer entity ID and message context information.
|
protected org.opensaml.xml.security.trust.TrustEngine<TokenType> |
getTrustEngine()
Gets the engine used to validate the untrusted token.
|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
evaluate
public BaseTrustEngineRule(org.opensaml.xml.security.trust.TrustEngine<TokenType> engine)
engine
- Trust engine used to verify the particular token typeprotected org.opensaml.xml.security.trust.TrustEngine<TokenType> getTrustEngine()
protected abstract org.opensaml.xml.security.CriteriaSet buildCriteriaSet(String entityID, MessageContext messageContext) throws SecurityPolicyException
entityID
- the candidate issuer entity ID which is being evaluatedmessageContext
- the message context which is being evaluatedSecurityPolicyException
- thrown if criteria set can not be constructedprotected boolean evaluate(TokenType token, String entityID, MessageContext messageContext) throws SecurityPolicyException
token
- the token to be evaluatedentityID
- the candidate issuer entity ID which is being evaluatedmessageContext
- the message context which is being evaluatedSecurityPolicyException
- thrown if there is a fatal error during trust engine evaluationprotected boolean evaluate(TokenType token, org.opensaml.xml.security.CriteriaSet criteriaSet) throws SecurityPolicyException
token
- the token to be evaluatedcriteriaSet
- the set of criteria against which to evaluate the tokenSecurityPolicyException
- thrown if there is a fatal error during trust engine evaluationCopyright © 2015. All rights reserved.