Raw signature trust support, Redirect binding, "simple" signing rule.
[shibboleth/cpp-opensaml.git] / saml / binding / impl / MessageEncoder.cpp
1 /*
2  *  Copyright 2001-2006 Internet2
3  * 
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *     http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16
17 /**
18  * MessageEncoder.cpp
19  * 
20  * Interface to SAML protocol binding message encoders. 
21  */
22
23 #include "internal.h"
24 #include "binding/MessageEncoder.h"
25 #include "util/samlconstants.h"
26
27 #include <xmltooling/signature/KeyInfo.h>
28 #include <xmltooling/signature/Signature.h>
29
30 using namespace opensaml;
31 using namespace xmlsignature;
32 using namespace xmltooling;
33 using namespace std;
34
35 namespace opensaml {
36     namespace saml1p {
37         SAML_DLLLOCAL PluginManager<MessageEncoder,const DOMElement*>::Factory SAML1ArtifactEncoderFactory;
38         SAML_DLLLOCAL PluginManager<MessageEncoder,const DOMElement*>::Factory SAML1POSTEncoderFactory;
39     }; 
40
41     namespace saml2p {
42         SAML_DLLLOCAL PluginManager<MessageEncoder,const DOMElement*>::Factory SAML2ArtifactEncoderFactory;
43         SAML_DLLLOCAL PluginManager<MessageEncoder,const DOMElement*>::Factory SAML2POSTEncoderFactory;
44         SAML_DLLLOCAL PluginManager<MessageEncoder,const DOMElement*>::Factory SAML2RedirectEncoderFactory;
45     };
46 };
47
48 void SAML_API opensaml::registerMessageEncoders()
49 {
50     SAMLConfig& conf=SAMLConfig::getConfig();
51     conf.MessageEncoderManager.registerFactory(samlconstants::SAML1_PROFILE_BROWSER_ARTIFACT, saml1p::SAML1ArtifactEncoderFactory);
52     conf.MessageEncoderManager.registerFactory(samlconstants::SAML1_PROFILE_BROWSER_POST, saml1p::SAML1POSTEncoderFactory);
53     conf.MessageEncoderManager.registerFactory(samlconstants::SAML20_BINDING_HTTP_ARTIFACT, saml2p::SAML2ArtifactEncoderFactory);
54     conf.MessageEncoderManager.registerFactory(samlconstants::SAML20_BINDING_HTTP_POST, saml2p::SAML2POSTEncoderFactory);
55     conf.MessageEncoderManager.registerFactory(samlconstants::SAML20_BINDING_HTTP_REDIRECT, saml2p::SAML2RedirectEncoderFactory);
56 }
57
58 namespace {
59     class SAML_DLLLOCAL _addcert : public binary_function<X509Data*,XSECCryptoX509*,void> {
60     public:
61         void operator()(X509Data* bag, XSECCryptoX509* cert) const {
62             safeBuffer& buf=cert->getDEREncodingSB();
63             X509Certificate* x=X509CertificateBuilder::buildX509Certificate();
64             x->setValue(buf.sbStrToXMLCh());
65             bag->getX509Certificates().push_back(x);
66         }
67     };
68 };
69
70 Signature* MessageEncoder::buildSignature(const CredentialResolver* credResolver, const XMLCh* sigAlgorithm) const
71 {
72     // Build a Signature.
73     Signature* sig = SignatureBuilder::buildSignature();
74     if (sigAlgorithm)
75         sig->setSignatureAlgorithm(sigAlgorithm);
76     sig->setSigningKey(credResolver->getKey());
77
78     // Build KeyInfo.
79     const vector<XSECCryptoX509*>& certs = credResolver->getCertificates();
80     if (!certs.empty()) {
81         KeyInfo* keyInfo=KeyInfoBuilder::buildKeyInfo();
82         X509Data* x509Data=X509DataBuilder::buildX509Data();
83         keyInfo->getX509Datas().push_back(x509Data);
84         for_each(certs.begin(),certs.end(),bind1st(_addcert(),x509Data));
85         sig->setKeyInfo(keyInfo);
86     }
87     
88     return sig;
89 }