com.vmware.vapi.cis.authn.json

Class JsonSignatureVerificationProcessor

java.lang.Object

com.vmware.vapi.cis.authn.json.JsonSignatureVerificationProcessor

All Implemented Interfaces:

com.vmware.vapi.protocol.RequestProcessor

public final class JsonSignatureVerificationProcessor
extends Object
implements com.vmware.vapi.protocol.RequestProcessor

This processor handles SAML token authentication. In case of HoK token the request signature is validated.

Nested Class Summary

Nested classes/interfaces inherited from interface com.vmware.vapi.protocol.RequestProcessor

com.vmware.vapi.protocol.RequestProcessor.Request

Field Summary

Fields inherited from interface com.vmware.vapi.protocol.RequestProcessor

SECURITY_CONTEXT_KEY, SECURITY_PROC_METADATA_KEY, UTF8_CHARSET

Constructor Summary

Constructors

Constructor and Description
JsonSignatureVerificationProcessor(com.vmware.vapi.dsig.json.StsTrustChain stsTrustChain)
JsonSignatureVerificationProcessor(com.vmware.vapi.dsig.json.StsTrustChain stsTrustChain, long clockToleranceSec)

Method Summary

Modifier and Type	Method and Description
byte[]	process(byte[] request, Map<String,Object> metadata, com.vmware.vapi.protocol.RequestProcessor.Request vapiRequest)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JsonSignatureVerificationProcessor

public JsonSignatureVerificationProcessor(com.vmware.vapi.dsig.json.StsTrustChain stsTrustChain)

Parameters:

stsTrustChain - used to retrieve the STS signing certificates for validating SAML tokens. Must not be null.

JsonSignatureVerificationProcessor

public JsonSignatureVerificationProcessor(com.vmware.vapi.dsig.json.StsTrustChain stsTrustChain,
                                          long clockToleranceSec)

Parameters:

stsTrustChain - used to retrieve the STS signing certificates for validating SAML tokens. Must not be null.

clockToleranceSec - the allowed time discrepancy between the client and the server. Must not be negative.

Method Detail

process

public byte[] process(byte[] request,
                      Map<String,Object> metadata,
                      com.vmware.vapi.protocol.RequestProcessor.Request vapiRequest)

Specified by:

process in interface com.vmware.vapi.protocol.RequestProcessor