X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=saml%2Fsaml2%2Fbinding%2Fimpl%2FSAML2SOAPDecoder.cpp;h=69848be75513891dde664ba4cd56dcde71323a2e;hb=19779e1afa0a1a75bab7fc6c2c65de7b9ddb5a79;hp=375703994c60b89327e760b57c7c06edcee64106;hpb=2d05f4d1935e7b79e70f2775a14c10964a04164e;p=shibboleth%2Fcpp-opensaml.git diff --git a/saml/saml2/binding/impl/SAML2SOAPDecoder.cpp b/saml/saml2/binding/impl/SAML2SOAPDecoder.cpp index 3757039..69848be 100644 --- a/saml/saml2/binding/impl/SAML2SOAPDecoder.cpp +++ b/saml/saml2/binding/impl/SAML2SOAPDecoder.cpp @@ -1,5 +1,5 @@ /* - * Copyright 2001-2007 Internet2 + * Copyright 2001-2009 Internet2 * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -17,32 +17,36 @@ /** * SAML2SOAPDecoder.cpp * - * SAML 2.0 SOAP binding message decoder + * SAML 2.0 SOAP binding message decoder. */ #include "internal.h" #include "exceptions.h" -#include "binding/MessageDecoder.h" +#include "binding/SecurityPolicy.h" +#include "saml2/binding/SAML2MessageDecoder.h" #include "saml2/core/Protocols.h" -#include +#include +#include +#include #include #include +#include #include using namespace opensaml::saml2p; using namespace opensaml; using namespace soap11; +using namespace xmltooling::logging; using namespace xmltooling; -using namespace log4cpp; using namespace std; namespace opensaml { namespace saml2p { - class SAML_DLLLOCAL SAML2SOAPDecoder : public MessageDecoder + class SAML_DLLLOCAL SAML2SOAPDecoder : public SAML2MessageDecoder { public: - SAML2SOAPDecoder(const DOMElement* e); + SAML2SOAPDecoder() {} virtual ~SAML2SOAPDecoder() {} bool isUserAgentPresent() const { @@ -56,15 +60,13 @@ namespace opensaml { ) const; }; - MessageDecoder* SAML_DLLLOCAL SAML2SOAPDecoderFactory(const DOMElement* const & e) + MessageDecoder* SAML_DLLLOCAL SAML2SOAPDecoderFactory(const pair& p) { - return new SAML2SOAPDecoder(e); + return new SAML2SOAPDecoder(); } }; }; -SAML2SOAPDecoder::SAML2SOAPDecoder(const DOMElement* e) {} - XMLObject* SAML2SOAPDecoder::decode( string& relayState, const GenericRequest& genericRequest, @@ -80,14 +82,13 @@ XMLObject* SAML2SOAPDecoder::decode( string s = genericRequest.getContentType(); if (s.find("text/xml") == string::npos) { log.warn("ignoring incorrect content type (%s)", s.c_str() ? s.c_str() : "none"); - return NULL; + throw BindingException("Invalid content type for SOAP message."); } const char* data = genericRequest.getRequestBody(); - if (!data) { - log.warn("empty request body"); - return NULL; - } + if (!data) + throw BindingException("SOAP message had an empty request body."); + log.debug("received message:\n%s", data); istringstream is(data); // Parse and bind the document into an XMLObject. @@ -101,15 +102,17 @@ XMLObject* SAML2SOAPDecoder::decode( if (!env) throw BindingException("Decoded message was not a SOAP 1.1 Envelope."); - if (!policy.getValidating()) - SchemaValidators.validate(env); + SchemaValidators.validate(env); Body* body = env->getBody(); if (body && body->hasChildren()) { RequestAbstractType* request = dynamic_cast(body->getUnknownXMLObjects().front()); if (request) { // Run through the policy at two layers. + extractMessageDetails(*env, genericRequest, samlconstants::SAML20P_NS, policy); policy.evaluate(*env, &genericRequest); + policy.reset(true); + extractMessageDetails(*request, genericRequest, samlconstants::SAML20P_NS, policy); policy.evaluate(*request, &genericRequest); xmlObject.release(); body->detach(); // frees Envelope