saml/saml2/core/impl/Assertions20Impl.cpp

   1 /*
   2  *  Copyright 2001-2006 Internet2
   3  *
   4  * Licensed under the Apache License, Version 2.0 (the "License");
   5  * you may not use this file except in compliance with the License.
   6  * You may obtain a copy of the License at
   7  *
   8  *     http://www.apache.org/licenses/LICENSE-2.0
   9  *
  10  * Unless required by applicable law or agreed to in writing, software
  11  * distributed under the License is distributed on an "AS IS" BASIS,
  12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13  * See the License for the specific language governing permissions and
  14  * limitations under the License.
  15  */
  16
  17 /**
  18  * Assertions20Impl.cpp
  19  *
  20  * Implementation classes for SAML 2.0 Assertions schema
  21  */
  22
  23 #include "internal.h"
  24 #include "exceptions.h"
  25 #include "saml/encryption/EncryptedKeyResolver.h"
  26 #include "saml2/core/Assertions.h"
  27
  28 #include <xmltooling/AbstractChildlessElement.h>
  29 #include <xmltooling/AbstractComplexElement.h>
  30 #include <xmltooling/AbstractElementProxy.h>
  31 #include <xmltooling/AbstractSimpleElement.h>
  32 #include <xmltooling/encryption/Decrypter.h>
  33 #include <xmltooling/impl/AnyElement.h>
  34 #include <xmltooling/io/AbstractXMLObjectMarshaller.h>
  35 #include <xmltooling/io/AbstractXMLObjectUnmarshaller.h>
  36 #include <xmltooling/util/XMLHelper.h>
  37 #include <xmltooling/validation/AbstractValidatingXMLObject.h>
  38
  39 #include <ctime>
  40 #include <xercesc/util/XMLUniDefs.hpp>
  41
  42 using namespace opensaml::saml2;
  43 using namespace opensaml;
  44 using namespace xmlencryption;
  45 using namespace xmlsignature;
  46 using namespace xmltooling;
  47 using namespace std;
  48
  49 #if defined (_MSC_VER)
  50     #pragma warning( push )
  51     #pragma warning( disable : 4250 4251 )
  52 #endif
  53
  54 namespace opensaml {
  55     namespace saml2 {
  56
  57         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,AssertionIDRef);
  58         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,AssertionURIRef);
  59         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,Audience);
  60         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,AuthnContextClassRef);
  61         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,AuthnContextDeclRef);
  62         DECL_XMLOBJECTIMPL_SIMPLE(SAML_DLLLOCAL,AuthenticatingAuthority);
  63
  64         class SAML_DLLLOCAL NameIDTypeImpl : public virtual NameIDType,
  65             public AbstractSimpleElement,
  66             public AbstractChildlessElement,
  67             public AbstractDOMCachingXMLObject,
  68             public AbstractValidatingXMLObject,
  69             public AbstractXMLObjectMarshaller,
  70             public AbstractXMLObjectUnmarshaller
  71         {
  72             void init() {
  73                 m_Format=m_SPProvidedID=m_NameQualifier=m_SPNameQualifier=NULL;
  74             }
  75
  76         protected:
  77             NameIDTypeImpl() {
  78                 init();
  79             }
  80
  81         public:
  82             virtual ~NameIDTypeImpl() {
  83                 XMLString::release(&m_NameQualifier);
  84                 XMLString::release(&m_SPNameQualifier);
  85                 XMLString::release(&m_Format);
  86                 XMLString::release(&m_SPProvidedID);
  87             }
  88
  89             NameIDTypeImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
  90                     : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
  91                 init();
  92             }
  93
  94             NameIDTypeImpl(const NameIDTypeImpl& src)
  95                     : AbstractXMLObject(src), AbstractSimpleElement(src),
  96                         AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
  97                 init();
  98                 setNameQualifier(src.getNameQualifier());
  99                 setSPNameQualifier(src.getSPNameQualifier());
 100                 setFormat(src.getFormat());
 101                 setSPProvidedID(src.getSPProvidedID());
 102             }
 103
 104             IMPL_XMLOBJECT_CLONE(NameIDType);
 105             IMPL_STRING_ATTRIB(NameQualifier);
 106             IMPL_STRING_ATTRIB(SPNameQualifier);
 107             IMPL_STRING_ATTRIB(Format);
 108             IMPL_STRING_ATTRIB(SPProvidedID);
 109             IMPL_XMLOBJECT_CONTENT;
 110
 111         protected:
 112             void marshallAttributes(DOMElement* domElement) const {
 113                 MARSHALL_STRING_ATTRIB(NameQualifier,NAMEQUALIFIER,NULL);
 114                 MARSHALL_STRING_ATTRIB(SPNameQualifier,SPNAMEQUALIFIER,NULL);
 115                 MARSHALL_STRING_ATTRIB(Format,FORMAT,NULL);
 116                 MARSHALL_STRING_ATTRIB(SPProvidedID,SPPROVIDEDID,NULL);
 117             }
 118
 119             void processAttribute(const DOMAttr* attribute) {
 120                 PROC_STRING_ATTRIB(NameQualifier,NAMEQUALIFIER,NULL);
 121                 PROC_STRING_ATTRIB(SPNameQualifier,SPNAMEQUALIFIER,NULL);
 122                 PROC_STRING_ATTRIB(Format,FORMAT,NULL);
 123                 PROC_STRING_ATTRIB(SPProvidedID,SPPROVIDEDID,NULL);
 124                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 125             }
 126         };
 127
 128         class SAML_DLLLOCAL NameIDImpl : public virtual NameID, public NameIDTypeImpl
 129         {
 130         public:
 131             virtual ~NameIDImpl() {}
 132
 133             NameIDImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 134                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {}
 135
 136             NameIDImpl(const NameIDImpl& src) : AbstractXMLObject(src), NameIDTypeImpl(src) {}
 137
 138             IMPL_XMLOBJECT_CLONE(NameID);
 139             NameIDType* cloneNameIDType() const {
 140                 return new NameIDImpl(*this);
 141             }
 142         };
 143
 144         class SAML_DLLLOCAL IssuerImpl : public virtual Issuer, public NameIDTypeImpl
 145         {
 146         public:
 147             virtual ~IssuerImpl() {}
 148
 149             IssuerImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 150                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {}
 151
 152             IssuerImpl(const IssuerImpl& src) : AbstractXMLObject(src), NameIDTypeImpl(src) {}
 153
 154             IMPL_XMLOBJECT_CLONE(Issuer);
 155             NameIDType* cloneNameIDType() const {
 156                 return new IssuerImpl(*this);
 157             }
 158         };
 159
 160         class SAML_DLLLOCAL EncryptedElementTypeImpl : public virtual EncryptedElementType,
 161             public AbstractComplexElement,
 162             public AbstractDOMCachingXMLObject,
 163             public AbstractValidatingXMLObject,
 164             public AbstractXMLObjectMarshaller,
 165             public AbstractXMLObjectUnmarshaller
 166         {
 167             void init() {
 168                 m_EncryptedData=NULL;
 169                 m_children.push_back(NULL);
 170                 m_pos_EncryptedData=m_children.begin();
 171             }
 172
 173         protected:
 174             EncryptedElementTypeImpl() {
 175                 init();
 176             }
 177
 178         public:
 179             virtual ~EncryptedElementTypeImpl() {}
 180
 181             EncryptedElementTypeImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 182                     : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 183                 init();
 184             }
 185
 186             EncryptedElementTypeImpl(const EncryptedElementTypeImpl& src)
 187                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 188                 init();
 189                 if (src.getEncryptedData())
 190                     setEncryptedData(src.getEncryptedData()->cloneEncryptedData());
 191                 VectorOf(EncryptedKey) v=getEncryptedKeys();
 192                 for (vector<EncryptedKey*>::const_iterator i=src.m_EncryptedKeys.begin(); i!=src.m_EncryptedKeys.end(); i++) {
 193                     if (*i) {
 194                         v.push_back((*i)->cloneEncryptedKey());
 195                     }
 196                 }
 197             }
 198
 199             XMLObject* decrypt(KeyResolver* KEKresolver, const XMLCh* recipient) const
 200             {
 201                 if (!m_EncryptedData)
 202                     throw DecryptionException("No encrypted data present.");
 203                 Decrypter decrypter(KEKresolver, new EncryptedKeyResolver(*this, recipient));
 204                 DOMDocumentFragment* frag = decrypter.decryptData(m_EncryptedData);
 205                 if (frag->hasChildNodes() && frag->getFirstChild()==frag->getLastChild()) {
 206                     DOMNode* plaintext=frag->getFirstChild();
 207                     if (plaintext->getNodeType()==DOMNode::ELEMENT_NODE) {
 208                         auto_ptr<XMLObject> ret(XMLObjectBuilder::buildOneFromElement(static_cast<DOMElement*>(plaintext)));
 209                         ret->releaseThisAndChildrenDOM();
 210                         return ret.release();
 211                     }
 212                 }
 213                 frag->release();
 214                 throw DecryptionException("Decryption did not result in a single element.");
 215             }
 216
 217             IMPL_XMLOBJECT_CLONE(EncryptedElementType);
 218             IMPL_TYPED_FOREIGN_CHILD(EncryptedData,xmlencryption);
 219             IMPL_TYPED_FOREIGN_CHILDREN(EncryptedKey,xmlencryption,m_children.end());
 220
 221         protected:
 222             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 223                 PROC_TYPED_FOREIGN_CHILD(EncryptedData,xmlencryption,XMLConstants::XMLENC_NS,false);
 224                 PROC_TYPED_FOREIGN_CHILDREN(EncryptedKey,xmlencryption,XMLConstants::XMLENC_NS,false);
 225                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 226             }
 227         };
 228
 229         class SAML_DLLLOCAL EncryptedIDImpl : public virtual EncryptedID, public EncryptedElementTypeImpl
 230         {
 231         public:
 232             virtual ~EncryptedIDImpl() {}
 233
 234             EncryptedIDImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 235                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {}
 236
 237             EncryptedIDImpl(const EncryptedIDImpl& src) : AbstractXMLObject(src), EncryptedElementTypeImpl(src) {}
 238
 239             IMPL_XMLOBJECT_CLONE(EncryptedID);
 240             EncryptedElementType* cloneEncryptedElementType() const {
 241                 return new EncryptedIDImpl(*this);
 242             }
 243         };
 244
 245         class SAML_DLLLOCAL AudienceRestrictionImpl : public virtual AudienceRestriction,
 246             public AbstractComplexElement,
 247             public AbstractDOMCachingXMLObject,
 248             public AbstractValidatingXMLObject,
 249             public AbstractXMLObjectMarshaller,
 250             public AbstractXMLObjectUnmarshaller
 251         {
 252         public:
 253             virtual ~AudienceRestrictionImpl() {}
 254
 255             AudienceRestrictionImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 256                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 257             }
 258
 259             AudienceRestrictionImpl(const AudienceRestrictionImpl& src)
 260                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 261                 VectorOf(Audience) v=getAudiences();
 262                 for (vector<Audience*>::const_iterator i=src.m_Audiences.begin(); i!=src.m_Audiences.end(); i++) {
 263                     if (*i) {
 264                         v.push_back((*i)->cloneAudience());
 265                     }
 266                 }
 267             }
 268
 269             IMPL_XMLOBJECT_CLONE(AudienceRestriction);
 270             Condition* cloneCondition() const {
 271                 return cloneAudienceRestriction();
 272             }
 273             IMPL_TYPED_CHILDREN(Audience,m_children.end());
 274
 275         protected:
 276             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 277                 PROC_TYPED_CHILDREN(Audience,SAMLConstants::SAML20_NS,false);
 278                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 279             }
 280         };
 281
 282         class SAML_DLLLOCAL OneTimeUseImpl : public virtual OneTimeUse,
 283             public AbstractChildlessElement,
 284             public AbstractDOMCachingXMLObject,
 285             public AbstractValidatingXMLObject,
 286             public AbstractXMLObjectMarshaller,
 287             public AbstractXMLObjectUnmarshaller
 288         {
 289         public:
 290             virtual ~OneTimeUseImpl() {}
 291
 292             OneTimeUseImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 293                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 294             }
 295
 296             OneTimeUseImpl(const OneTimeUseImpl& src)
 297                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 298             }
 299
 300             IMPL_XMLOBJECT_CLONE(OneTimeUse);
 301             Condition* cloneCondition() const {
 302                 return cloneOneTimeUse();
 303             }
 304         };
 305
 306         class SAML_DLLLOCAL ProxyRestrictionImpl : public virtual ProxyRestriction,
 307             public AbstractComplexElement,
 308             public AbstractDOMCachingXMLObject,
 309             public AbstractValidatingXMLObject,
 310             public AbstractXMLObjectMarshaller,
 311             public AbstractXMLObjectUnmarshaller
 312         {
 313         public:
 314             virtual ~ProxyRestrictionImpl() {}
 315
 316             ProxyRestrictionImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 317                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 318             }
 319
 320             ProxyRestrictionImpl(const ProxyRestrictionImpl& src)
 321                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 322                 setCount(src.getCount());
 323                 VectorOf(Audience) v=getAudiences();
 324                 for (vector<Audience*>::const_iterator i=src.m_Audiences.begin(); i!=src.m_Audiences.end(); i++) {
 325                     if (*i) {
 326                         v.push_back((*i)->cloneAudience());
 327                     }
 328                 }
 329             }
 330
 331             IMPL_XMLOBJECT_CLONE(ProxyRestriction);
 332             Condition* cloneCondition() const {
 333                 return cloneProxyRestriction();
 334             }
 335             IMPL_TYPED_CHILDREN(Audience,m_children.end());
 336             IMPL_INTEGER_ATTRIB(Count);
 337
 338         protected:
 339             void marshallAttributes(DOMElement* domElement) const {
 340                 MARSHALL_INTEGER_ATTRIB(Count,COUNT,NULL);
 341             }
 342
 343             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 344                 PROC_TYPED_CHILDREN(Audience,SAMLConstants::SAML20_NS,false);
 345                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 346             }
 347
 348             void processAttribute(const DOMAttr* attribute) {
 349                 PROC_INTEGER_ATTRIB(Count,COUNT,NULL);
 350                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 351             }
 352         };
 353
 354
 355         class SAML_DLLLOCAL ConditionsImpl : public virtual Conditions,
 356             public AbstractComplexElement,
 357             public AbstractDOMCachingXMLObject,
 358             public AbstractValidatingXMLObject,
 359             public AbstractXMLObjectMarshaller,
 360             public AbstractXMLObjectUnmarshaller
 361         {
 362             void init() {
 363                 m_NotBefore=m_NotOnOrAfter=NULL;
 364             }
 365         public:
 366             virtual ~ConditionsImpl() {
 367                 delete m_NotBefore;
 368                 delete m_NotOnOrAfter;
 369             }
 370
 371             ConditionsImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 372                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 373                 init();
 374             }
 375
 376             ConditionsImpl(const ConditionsImpl& src)
 377                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 378                 init();
 379                 setNotBefore(src.getNotBefore());
 380                 setNotOnOrAfter(src.getNotOnOrAfter());
 381
 382                 for (list<XMLObject*>::const_iterator i=src.m_children.begin(); i!=src.m_children.end(); i++) {
 383                     if (*i) {
 384                         AudienceRestriction* arc=dynamic_cast<AudienceRestriction*>(*i);
 385                         if (arc) {
 386                             getAudienceRestrictions().push_back(arc->cloneAudienceRestriction());
 387                             continue;
 388                         }
 389
 390                         OneTimeUse* dncc=dynamic_cast<OneTimeUse*>(*i);
 391                         if (dncc) {
 392                             getOneTimeUses().push_back(dncc->cloneOneTimeUse());
 393                             continue;
 394                         }
 395
 396                         ProxyRestriction* prc=dynamic_cast<ProxyRestriction*>(*i);
 397                         if (prc) {
 398                             getProxyRestrictions().push_back(prc->cloneProxyRestriction());
 399                             continue;
 400                         }
 401
 402                         Condition* c=dynamic_cast<Condition*>(*i);
 403                         if (c) {
 404                             getConditions().push_back(c->cloneCondition());
 405                             continue;
 406                         }
 407                     }
 408                 }
 409             }
 410
 411             IMPL_XMLOBJECT_CLONE(Conditions);
 412             IMPL_DATETIME_ATTRIB(NotBefore);
 413             IMPL_DATETIME_ATTRIB(NotOnOrAfter);
 414             IMPL_TYPED_CHILDREN(AudienceRestriction, m_children.end());
 415             IMPL_TYPED_CHILDREN(OneTimeUse,m_children.end());
 416             IMPL_TYPED_CHILDREN(ProxyRestriction, m_children.end());
 417             IMPL_TYPED_CHILDREN(Condition,m_children.end());
 418
 419         protected:
 420             void marshallAttributes(DOMElement* domElement) const {
 421                 MARSHALL_DATETIME_ATTRIB(NotBefore,NOTBEFORE,NULL);
 422                 MARSHALL_DATETIME_ATTRIB(NotOnOrAfter,NOTONORAFTER,NULL);
 423             }
 424
 425             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 426                 PROC_TYPED_CHILDREN(AudienceRestriction,SAMLConstants::SAML20_NS,false);
 427                 PROC_TYPED_CHILDREN(OneTimeUse,SAMLConstants::SAML20_NS,false);
 428                 PROC_TYPED_CHILDREN(ProxyRestriction,SAMLConstants::SAML20_NS,false);
 429                 PROC_TYPED_CHILDREN(Condition,SAMLConstants::SAML20_NS,false);
 430                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 431             }
 432
 433             void processAttribute(const DOMAttr* attribute) {
 434                 PROC_DATETIME_ATTRIB(NotBefore,NOTBEFORE,NULL);
 435                 PROC_DATETIME_ATTRIB(NotOnOrAfter,NOTONORAFTER,NULL);
 436                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 437             }
 438         };
 439
 440         class SAML_DLLLOCAL SubjectConfirmationDataImpl
 441             : public virtual SubjectConfirmationData, public AnyElementImpl, public AbstractValidatingXMLObject
 442         {
 443             void init() {
 444                 m_NotBefore=m_NotOnOrAfter=NULL;
 445                 m_Recipient=m_InResponseTo=m_Address=NULL;
 446             }
 447         public:
 448             virtual ~SubjectConfirmationDataImpl() {
 449                 delete m_NotBefore;
 450                 delete m_NotOnOrAfter;
 451                 XMLString::release(&m_Recipient);
 452                 XMLString::release(&m_InResponseTo);
 453                 XMLString::release(&m_Address);
 454             }
 455
 456             SubjectConfirmationDataImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 457                     : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 458                 init();
 459             }
 460
 461             SubjectConfirmationDataImpl(const SubjectConfirmationDataImpl& src)
 462                     : AnyElementImpl(src), AbstractValidatingXMLObject(src) {
 463                 init();
 464                 setNotBefore(src.getNotBefore());
 465                 setNotOnOrAfter(src.getNotOnOrAfter());
 466                 setRecipient(src.getRecipient());
 467                 setInResponseTo(src.getInResponseTo());
 468                 setAddress(src.getAddress());
 469             }
 470
 471             IMPL_XMLOBJECT_CLONE(SubjectConfirmationData);
 472             IMPL_DATETIME_ATTRIB(NotBefore);
 473             IMPL_DATETIME_ATTRIB(NotOnOrAfter);
 474             IMPL_STRING_ATTRIB(Recipient);
 475             IMPL_STRING_ATTRIB(InResponseTo);
 476             IMPL_STRING_ATTRIB(Address);
 477
 478         public:
 479             void setAttribute(QName& qualifiedName, const XMLCh* value) {
 480                 if (!qualifiedName.hasNamespaceURI()) {
 481                     if (XMLString::equals(qualifiedName.getLocalPart(),NOTBEFORE_ATTRIB_NAME)) {
 482                         setNotBefore(value);
 483                         return;
 484                     }
 485                     else if (XMLString::equals(qualifiedName.getLocalPart(),NOTONORAFTER_ATTRIB_NAME)) {
 486                         setNotOnOrAfter(value);
 487                         return;
 488                     }
 489                     else if (XMLString::equals(qualifiedName.getLocalPart(),RECIPIENT_ATTRIB_NAME)) {
 490                         setRecipient(value);
 491                         return;
 492                     }
 493                     else if (XMLString::equals(qualifiedName.getLocalPart(),INRESPONSETO_ATTRIB_NAME)) {
 494                         setInResponseTo(value);
 495                         return;
 496                     }
 497                     else if (XMLString::equals(qualifiedName.getLocalPart(),ADDRESS_ATTRIB_NAME)) {
 498                         setAddress(value);
 499                         return;
 500                     }
 501                 }
 502                 AbstractAttributeExtensibleXMLObject::setAttribute(qualifiedName, value);
 503             }
 504
 505         protected:
 506             void marshallAttributes(DOMElement* domElement) const {
 507                 MARSHALL_DATETIME_ATTRIB(NotBefore,NOTBEFORE,NULL);
 508                 MARSHALL_DATETIME_ATTRIB(NotOnOrAfter,NOTONORAFTER,NULL);
 509                 MARSHALL_STRING_ATTRIB(Recipient,RECIPIENT,NULL);
 510                 MARSHALL_STRING_ATTRIB(InResponseTo,INRESPONSETO,NULL);
 511                 MARSHALL_STRING_ATTRIB(Address,ADDRESS,NULL);
 512                 AnyElementImpl::marshallAttributes(domElement);
 513             }
 514
 515             // The processAttributes hook is handled by AnyElementImpl
 516         };
 517
 518         class SAML_DLLLOCAL KeyInfoConfirmationDataTypeImpl : public virtual KeyInfoConfirmationDataType,
 519                 public AbstractDOMCachingXMLObject,
 520                 public AbstractComplexElement,
 521                 public AbstractAttributeExtensibleXMLObject,
 522                 public AbstractXMLObjectMarshaller,
 523                 public AbstractXMLObjectUnmarshaller,
 524                 public AbstractValidatingXMLObject
 525         {
 526             void init() {
 527                 m_NotBefore=m_NotOnOrAfter=NULL;
 528                 m_Recipient=m_InResponseTo=m_Address=NULL;
 529             }
 530         public:
 531             virtual ~KeyInfoConfirmationDataTypeImpl() {
 532                 delete m_NotBefore;
 533                 delete m_NotOnOrAfter;
 534                 XMLString::release(&m_Recipient);
 535                 XMLString::release(&m_InResponseTo);
 536                 XMLString::release(&m_Address);
 537             }
 538
 539             KeyInfoConfirmationDataTypeImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 540                     : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 541                 init();
 542             }
 543
 544             KeyInfoConfirmationDataTypeImpl(const KeyInfoConfirmationDataTypeImpl& src)
 545                     : AbstractXMLObject(src),
 546                         AbstractDOMCachingXMLObject(src),
 547                         AbstractAttributeExtensibleXMLObject(src),
 548                         AbstractValidatingXMLObject(src) {
 549                 init();
 550                 setNotBefore(src.getNotBefore());
 551                 setNotOnOrAfter(src.getNotOnOrAfter());
 552                 setRecipient(src.getRecipient());
 553                 setInResponseTo(src.getInResponseTo());
 554                 setAddress(src.getAddress());
 555                 VectorOf(KeyInfo) v=getKeyInfos();
 556                 for (vector<KeyInfo*>::const_iterator i=src.m_KeyInfos.begin(); i!=src.m_KeyInfos.end(); i++) {
 557                     if (*i) {
 558                         v.push_back((*i)->cloneKeyInfo());
 559                     }
 560                 }
 561             }
 562
 563             IMPL_XMLOBJECT_CLONE(KeyInfoConfirmationDataType);
 564             IMPL_DATETIME_ATTRIB(NotBefore);
 565             IMPL_DATETIME_ATTRIB(NotOnOrAfter);
 566             IMPL_STRING_ATTRIB(Recipient);
 567             IMPL_STRING_ATTRIB(InResponseTo);
 568             IMPL_STRING_ATTRIB(Address);
 569             IMPL_TYPED_CHILDREN(KeyInfo,m_children.end());
 570
 571         public:
 572             void setAttribute(QName& qualifiedName, const XMLCh* value) {
 573                 if (!qualifiedName.hasNamespaceURI()) {
 574                     if (XMLString::equals(qualifiedName.getLocalPart(),NOTBEFORE_ATTRIB_NAME)) {
 575                         setNotBefore(value);
 576                         return;
 577                     }
 578                     else if (XMLString::equals(qualifiedName.getLocalPart(),NOTONORAFTER_ATTRIB_NAME)) {
 579                         setNotOnOrAfter(value);
 580                         return;
 581                     }
 582                     else if (XMLString::equals(qualifiedName.getLocalPart(),RECIPIENT_ATTRIB_NAME)) {
 583                         setRecipient(value);
 584                         return;
 585                     }
 586                     else if (XMLString::equals(qualifiedName.getLocalPart(),INRESPONSETO_ATTRIB_NAME)) {
 587                         setInResponseTo(value);
 588                         return;
 589                     }
 590                     else if (XMLString::equals(qualifiedName.getLocalPart(),ADDRESS_ATTRIB_NAME)) {
 591                         setAddress(value);
 592                         return;
 593                     }
 594                 }
 595                 AbstractAttributeExtensibleXMLObject::setAttribute(qualifiedName, value);
 596             }
 597
 598         protected:
 599             void marshallAttributes(DOMElement* domElement) const {
 600                 MARSHALL_DATETIME_ATTRIB(NotBefore,NOTBEFORE,NULL);
 601                 MARSHALL_DATETIME_ATTRIB(NotOnOrAfter,NOTONORAFTER,NULL);
 602                 MARSHALL_STRING_ATTRIB(Recipient,RECIPIENT,NULL);
 603                 MARSHALL_STRING_ATTRIB(InResponseTo,INRESPONSETO,NULL);
 604                 MARSHALL_STRING_ATTRIB(Address,ADDRESS,NULL);
 605
 606                 // Take care of wildcard.
 607                 for (map<QName,XMLCh*>::const_iterator i=m_attributeMap.begin(); i!=m_attributeMap.end(); i++) {
 608                     DOMAttr* attr=domElement->getOwnerDocument()->createAttributeNS(i->first.getNamespaceURI(),i->first.getLocalPart());
 609                     if (i->first.hasPrefix())
 610                         attr->setPrefix(i->first.getPrefix());
 611                     attr->setNodeValue(i->second);
 612                     domElement->setAttributeNode(attr);
 613                 }
 614             }
 615
 616             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 617                 PROC_TYPED_CHILDREN(KeyInfo,XMLConstants::XMLSIG_NS,false);
 618                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 619             }
 620
 621             void processAttribute(const DOMAttr* attribute) {
 622                 QName q(attribute->getNamespaceURI(),attribute->getLocalName(),attribute->getPrefix());
 623                 setAttribute(q,attribute->getNodeValue());
 624             }
 625         };
 626
 627         class SAML_DLLLOCAL SubjectConfirmationImpl : public virtual SubjectConfirmation,
 628             public AbstractComplexElement,
 629             public AbstractDOMCachingXMLObject,
 630             public AbstractValidatingXMLObject,
 631             public AbstractXMLObjectMarshaller,
 632             public AbstractXMLObjectUnmarshaller
 633         {
 634             void init() {
 635                 m_Method=NULL;
 636                 m_BaseID=NULL;
 637                 m_NameID=NULL;
 638                 m_EncryptedID=NULL;
 639                 m_SubjectConfirmationData=NULL;
 640                 m_KeyInfoConfirmationDataType=NULL;
 641                 m_children.push_back(NULL);
 642                 m_children.push_back(NULL);
 643                 m_children.push_back(NULL);
 644                 m_children.push_back(NULL);
 645                 m_pos_BaseID=m_children.begin();
 646                 m_pos_NameID=m_pos_BaseID;
 647                 ++m_pos_NameID;
 648                 m_pos_EncryptedID=m_pos_NameID;
 649                 ++m_pos_EncryptedID;
 650                 m_pos_SubjectConfirmationData=m_pos_EncryptedID;
 651                 ++m_pos_SubjectConfirmationData;
 652                 m_pos_KeyInfoConfirmationDataType=m_pos_SubjectConfirmationData;
 653                 ++m_pos_KeyInfoConfirmationDataType;
 654             }
 655         public:
 656             virtual ~SubjectConfirmationImpl() {}
 657
 658             SubjectConfirmationImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 659                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 660                 init();
 661             }
 662
 663             SubjectConfirmationImpl(const SubjectConfirmationImpl& src)
 664                     : AbstractXMLObject(src),
 665                         AbstractDOMCachingXMLObject(src),
 666                         AbstractValidatingXMLObject(src) {
 667                 init();
 668                 setMethod(src.getMethod());
 669                 if (src.getBaseID())
 670                     setBaseID(src.getBaseID()->cloneBaseID());
 671                 if (src.getNameID())
 672                     setNameID(src.getNameID()->cloneNameID());
 673                 if (src.getEncryptedID())
 674                     setEncryptedID(src.getEncryptedID()->cloneEncryptedID());
 675                 if (src.getSubjectConfirmationData())
 676                     setSubjectConfirmationData(src.getSubjectConfirmationData()->clone());
 677                 if (src.getKeyInfoConfirmationDataType())
 678                     setKeyInfoConfirmationDataType(src.getKeyInfoConfirmationDataType()->cloneKeyInfoConfirmationDataType());
 679             }
 680
 681             IMPL_XMLOBJECT_CLONE(SubjectConfirmation);
 682             IMPL_STRING_ATTRIB(Method);
 683             IMPL_TYPED_CHILD(BaseID);
 684             IMPL_TYPED_CHILD(NameID);
 685             IMPL_TYPED_CHILD(EncryptedID);
 686             IMPL_XMLOBJECT_CHILD(SubjectConfirmationData);
 687             IMPL_TYPED_CHILD(KeyInfoConfirmationDataType);
 688
 689         protected:
 690             void marshallAttributes(DOMElement* domElement) const {
 691                 MARSHALL_STRING_ATTRIB(Method,METHOD,NULL);
 692             }
 693
 694             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 695                 PROC_TYPED_CHILD(BaseID,SAMLConstants::SAML20_NS,false);
 696                 PROC_TYPED_CHILD(NameID,SAMLConstants::SAML20_NS,false);
 697                 PROC_TYPED_CHILD(EncryptedID,SAMLConstants::SAML20_NS,false);
 698                 PROC_XMLOBJECT_CHILD(SubjectConfirmationData,SAMLConstants::SAML20_NS);
 699                 PROC_TYPED_CHILD(KeyInfoConfirmationDataType,SAMLConstants::SAML20_NS,false);
 700                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 701             }
 702
 703             void processAttribute(const DOMAttr* attribute) {
 704                 PROC_STRING_ATTRIB(Method,METHOD,NULL);
 705                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 706             }
 707         };
 708
 709         class SAML_DLLLOCAL SubjectImpl : public virtual Subject,
 710             public AbstractComplexElement,
 711             public AbstractDOMCachingXMLObject,
 712             public AbstractValidatingXMLObject,
 713             public AbstractXMLObjectMarshaller,
 714             public AbstractXMLObjectUnmarshaller
 715         {
 716             void init() {
 717                 m_BaseID=NULL;
 718                 m_NameID=NULL;
 719                 //m_EncryptedID=NULL;
 720                 m_children.push_back(NULL);
 721                 m_children.push_back(NULL);
 722                 m_children.push_back(NULL);
 723                 m_pos_BaseID=m_children.begin();
 724                 m_pos_NameID=m_pos_BaseID;
 725                 ++m_pos_NameID;
 726                 m_pos_EncryptedID=m_pos_NameID;
 727                 ++m_pos_EncryptedID;
 728             }
 729         public:
 730             virtual ~SubjectImpl() {}
 731
 732             SubjectImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 733                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 734                 init();
 735             }
 736
 737             SubjectImpl(const SubjectImpl& src)
 738                     : AbstractXMLObject(src),
 739                         AbstractDOMCachingXMLObject(src),
 740                         AbstractValidatingXMLObject(src) {
 741                 init();
 742                 if (src.getBaseID())
 743                     setBaseID(src.getBaseID()->cloneBaseID());
 744                 if (src.getNameID())
 745                     setNameID(src.getNameID()->cloneNameID());
 746                 if (src.getEncryptedID())
 747                     setEncryptedID(src.getEncryptedID()->cloneEncryptedID());
 748                 VectorOf(SubjectConfirmation) v=getSubjectConfirmations();
 749                 for (vector<SubjectConfirmation*>::const_iterator i=src.m_SubjectConfirmations.begin(); i!=src.m_SubjectConfirmations.end(); i++) {
 750                     if (*i) {
 751                         v.push_back((*i)->cloneSubjectConfirmation());
 752                     }
 753                 }
 754             }
 755
 756             IMPL_XMLOBJECT_CLONE(Subject);
 757             IMPL_TYPED_CHILD(NameID);
 758             IMPL_TYPED_CHILD(BaseID);
 759             IMPL_TYPED_CHILD(EncryptedID);
 760             IMPL_TYPED_CHILDREN(SubjectConfirmation,m_children.end());
 761
 762         protected:
 763             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 764                 PROC_TYPED_CHILD(BaseID,SAMLConstants::SAML20_NS,false);
 765                 PROC_TYPED_CHILD(NameID,SAMLConstants::SAML20_NS,false);
 766                 PROC_TYPED_CHILD(EncryptedID,SAMLConstants::SAML20_NS,false);
 767                 PROC_TYPED_CHILDREN(SubjectConfirmation,SAMLConstants::SAML20_NS,false);
 768                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 769             }
 770         };
 771
 772         class SAML_DLLLOCAL SubjectLocalityImpl : public virtual SubjectLocality,
 773             public AbstractChildlessElement,
 774             public AbstractDOMCachingXMLObject,
 775             public AbstractValidatingXMLObject,
 776             public AbstractXMLObjectMarshaller,
 777             public AbstractXMLObjectUnmarshaller
 778         {
 779             void init() {
 780                 m_Address=m_DNSName=NULL;
 781             }
 782         public:
 783             virtual ~SubjectLocalityImpl() {
 784                 XMLString::release(&m_Address);
 785                 XMLString::release(&m_DNSName);
 786             }
 787
 788             SubjectLocalityImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 789                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 790                 init();
 791             }
 792
 793             SubjectLocalityImpl(const SubjectLocalityImpl& src)
 794                     : AbstractXMLObject(src), AbstractDOMCachingXMLObject(src), AbstractValidatingXMLObject(src) {
 795                 init();
 796                 setAddress(src.getAddress());
 797                 setDNSName(src.getDNSName());
 798             }
 799
 800             IMPL_XMLOBJECT_CLONE(SubjectLocality);
 801             IMPL_STRING_ATTRIB(Address);
 802             IMPL_STRING_ATTRIB(DNSName);
 803
 804         protected:
 805             void marshallAttributes(DOMElement* domElement) const {
 806                 MARSHALL_STRING_ATTRIB(Address,ADDRESS,NULL);
 807                 MARSHALL_STRING_ATTRIB(DNSName,DNSNAME,NULL);
 808             }
 809
 810             void processAttribute(const DOMAttr* attribute) {
 811                 PROC_STRING_ATTRIB(Address,ADDRESS,NULL);
 812                 PROC_STRING_ATTRIB(DNSName,DNSNAME,NULL);
 813                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 814             }
 815         };
 816
 817         class SAML_DLLLOCAL AuthnContextDeclImpl
 818             : public virtual AuthnContextDecl, public AnyElementImpl, public AbstractValidatingXMLObject
 819         {
 820         public:
 821             virtual ~AuthnContextDeclImpl() {}
 822
 823             AuthnContextDeclImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 824                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 825             }
 826
 827             AuthnContextDeclImpl(const AuthnContextDeclImpl& src) : AnyElementImpl(src), AbstractValidatingXMLObject(src) {}
 828
 829             IMPL_XMLOBJECT_CLONE(AuthnContextDecl);
 830         };
 831
 832         class SAML_DLLLOCAL AuthnContextImpl : public virtual AuthnContext,
 833             public AbstractComplexElement,
 834             public AbstractDOMCachingXMLObject,
 835             public AbstractValidatingXMLObject,
 836             public AbstractXMLObjectMarshaller,
 837             public AbstractXMLObjectUnmarshaller
 838         {
 839             void init() {
 840                 m_AuthnContextClassRef=NULL;
 841                 m_AuthnContextDecl=NULL;
 842                 m_AuthnContextDeclRef=NULL;
 843                 m_children.push_back(NULL);
 844                 m_children.push_back(NULL);
 845                 m_children.push_back(NULL);
 846                 m_pos_AuthnContextClassRef=m_children.begin();
 847                 m_pos_AuthnContextDecl=m_pos_AuthnContextClassRef;
 848                 ++m_pos_AuthnContextDecl;
 849                 m_pos_AuthnContextDeclRef=m_pos_AuthnContextDecl;
 850                 ++m_pos_AuthnContextDeclRef;
 851             }
 852         public:
 853             virtual ~AuthnContextImpl() {}
 854
 855             AuthnContextImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 856                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 857                 init();
 858             }
 859
 860             AuthnContextImpl(const AuthnContextImpl& src)
 861                     : AbstractXMLObject(src),
 862                         AbstractDOMCachingXMLObject(src),
 863                         AbstractValidatingXMLObject(src) {
 864                 init();
 865                 if (src.getAuthnContextClassRef())
 866                     setAuthnContextClassRef(src.getAuthnContextClassRef()->cloneAuthnContextClassRef());
 867                 if (src.getAuthnContextDecl())
 868                     setAuthnContextDecl(src.getAuthnContextDecl()->clone());
 869                 if (src.getAuthnContextDeclRef())
 870                     setAuthnContextDeclRef(src.getAuthnContextDeclRef()->cloneAuthnContextDeclRef());
 871                 VectorOf(AuthenticatingAuthority) v=getAuthenticatingAuthoritys();
 872                 for (vector<AuthenticatingAuthority*>::const_iterator i=src.m_AuthenticatingAuthoritys.begin(); i!=src.m_AuthenticatingAuthoritys.end(); i++) {
 873                     if (*i) {
 874                         v.push_back((*i)->cloneAuthenticatingAuthority());
 875                     }
 876                 }
 877             }
 878
 879             IMPL_XMLOBJECT_CLONE(AuthnContext);
 880             IMPL_TYPED_CHILD(AuthnContextClassRef);
 881             IMPL_XMLOBJECT_CHILD(AuthnContextDecl);
 882             IMPL_TYPED_CHILD(AuthnContextDeclRef);
 883             IMPL_TYPED_CHILDREN(AuthenticatingAuthority,m_children.end());
 884
 885         protected:
 886             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 887                 PROC_TYPED_CHILD(AuthnContextClassRef,SAMLConstants::SAML20_NS,false);
 888                 PROC_XMLOBJECT_CHILD(AuthnContextDecl,SAMLConstants::SAML20_NS);
 889                 PROC_TYPED_CHILD(AuthnContextDeclRef,SAMLConstants::SAML20_NS,false);
 890                 PROC_TYPED_CHILDREN(AuthenticatingAuthority,SAMLConstants::SAML20_NS,false);
 891                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 892             }
 893         };
 894
 895         class SAML_DLLLOCAL AuthnStatementImpl : public virtual AuthnStatement,
 896             public AbstractComplexElement,
 897             public AbstractDOMCachingXMLObject,
 898             public AbstractValidatingXMLObject,
 899             public AbstractXMLObjectMarshaller,
 900             public AbstractXMLObjectUnmarshaller
 901         {
 902             void init() {
 903                 m_AuthnInstant=NULL;
 904                 m_SessionIndex=NULL;
 905                 m_SessionNotOnOrAfter=NULL;
 906                 m_SubjectLocality=NULL;
 907                 m_AuthnContext=NULL;
 908                 m_children.push_back(NULL);
 909                 m_children.push_back(NULL);
 910                 m_pos_SubjectLocality=m_children.begin();
 911                 m_pos_AuthnContext=m_pos_SubjectLocality;
 912                 ++m_pos_AuthnContext;
 913             }
 914         public:
 915             virtual ~AuthnStatementImpl() {
 916                 delete m_AuthnInstant;
 917                 XMLString::release(&m_SessionIndex);
 918                 delete m_SessionNotOnOrAfter;
 919             }
 920
 921             AuthnStatementImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 922                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
 923                 init();
 924             }
 925
 926             AuthnStatementImpl(const AuthnStatementImpl& src)
 927                     : AbstractXMLObject(src),
 928                         AbstractDOMCachingXMLObject(src),
 929                         AbstractValidatingXMLObject(src) {
 930                 init();
 931                 setAuthnInstant(src.getAuthnInstant());
 932                 setSessionIndex(src.getSessionIndex());
 933                 setSessionNotOnOrAfter(src.getSessionNotOnOrAfter());
 934                 if (src.getSubjectLocality())
 935                     setSubjectLocality(src.getSubjectLocality()->cloneSubjectLocality());
 936                 if (src.getAuthnContext())
 937                     setAuthnContext(src.getAuthnContext()->cloneAuthnContext());
 938             }
 939
 940             IMPL_XMLOBJECT_CLONE(AuthnStatement);
 941             Statement* cloneStatement() const {
 942                 return cloneAuthnStatement();
 943             }
 944             IMPL_DATETIME_ATTRIB(AuthnInstant);
 945             IMPL_STRING_ATTRIB(SessionIndex);
 946             IMPL_DATETIME_ATTRIB(SessionNotOnOrAfter);
 947             IMPL_TYPED_CHILD(SubjectLocality);
 948             IMPL_TYPED_CHILD(AuthnContext);
 949
 950         protected:
 951             void marshallAttributes(DOMElement* domElement) const {
 952                 MARSHALL_DATETIME_ATTRIB(AuthnInstant,AUTHNINSTANT,NULL);
 953                 MARSHALL_STRING_ATTRIB(SessionIndex,SESSIONINDEX,NULL);
 954                 MARSHALL_DATETIME_ATTRIB(SessionNotOnOrAfter,SESSIONNOTONORAFTER,NULL);
 955             }
 956
 957             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
 958                 PROC_TYPED_CHILD(SubjectLocality,SAMLConstants::SAML20_NS,false);
 959                 PROC_TYPED_CHILD(AuthnContext,SAMLConstants::SAML20_NS,false);
 960                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
 961             }
 962
 963             void processAttribute(const DOMAttr* attribute) {
 964                 PROC_DATETIME_ATTRIB(AuthnInstant,AUTHNINSTANT,NULL);
 965                 PROC_STRING_ATTRIB(SessionIndex,SESSIONINDEX,NULL);
 966                 PROC_DATETIME_ATTRIB(SessionNotOnOrAfter,SESSIONNOTONORAFTER,NULL);
 967                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
 968             }
 969         };
 970
 971         class SAML_DLLLOCAL ActionImpl : public virtual Action,
 972             public AbstractSimpleElement,
 973             public AbstractChildlessElement,
 974             public AbstractDOMCachingXMLObject,
 975             public AbstractValidatingXMLObject,
 976             public AbstractXMLObjectMarshaller,
 977             public AbstractXMLObjectUnmarshaller
 978         {
 979         public:
 980             virtual ~ActionImpl() {
 981                 XMLString::release(&m_Namespace);
 982             }
 983
 984             ActionImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
 985                     : AbstractXMLObject(nsURI, localName, prefix, schemaType), m_Namespace(NULL) {
 986             }
 987
 988             ActionImpl(const ActionImpl& src) : AbstractXMLObject(src),
 989                     AbstractSimpleElement(src),
 990                     AbstractDOMCachingXMLObject(src),
 991                     AbstractValidatingXMLObject(src) {
 992                 setNamespace(src.getNamespace());
 993             }
 994
 995             IMPL_XMLOBJECT_CLONE(Action);
 996             IMPL_STRING_ATTRIB(Namespace);
 997             IMPL_XMLOBJECT_CONTENT;
 998
 999         protected:
1000             void marshallAttributes(DOMElement* domElement) const {
1001                 MARSHALL_STRING_ATTRIB(Namespace,NAMESPACE,NULL);
1002             }
1003
1004             void processAttribute(const DOMAttr* attribute) {
1005                 PROC_STRING_ATTRIB(Namespace,NAMESPACE,NULL);
1006                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
1007             }
1008         };
1009
1010         class SAML_DLLLOCAL EvidenceImpl : public virtual Evidence,
1011             public AbstractComplexElement,
1012             public AbstractDOMCachingXMLObject,
1013             public AbstractValidatingXMLObject,
1014             public AbstractXMLObjectMarshaller,
1015             public AbstractXMLObjectUnmarshaller
1016         {
1017         public:
1018             virtual ~EvidenceImpl() {}
1019
1020             EvidenceImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1021                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1022             }
1023
1024             EvidenceImpl(const EvidenceImpl& src)
1025                     : AbstractXMLObject(src),
1026                         AbstractDOMCachingXMLObject(src),
1027                         AbstractValidatingXMLObject(src) {
1028                 for (list<XMLObject*>::const_iterator i=src.m_children.begin(); i!=src.m_children.end(); i++) {
1029                     if (*i) {
1030                         AssertionIDRef* ref=dynamic_cast<AssertionIDRef*>(*i);
1031                         if (ref) {
1032                             getAssertionIDRefs().push_back(ref->cloneAssertionIDRef());
1033                             continue;
1034                         }
1035
1036                         AssertionURIRef* uri=dynamic_cast<AssertionURIRef*>(*i);
1037                         if (uri) {
1038                             getAssertionURIRefs().push_back(uri->cloneAssertionURIRef());
1039                             continue;
1040                         }
1041
1042                         Assertion* assertion=dynamic_cast<Assertion*>(*i);
1043                         if (assertion) {
1044                             getAssertions().push_back(assertion->cloneAssertion());
1045                             continue;
1046                         }
1047
1048                         EncryptedAssertion* enc=dynamic_cast<EncryptedAssertion*>(*i);
1049                         if (enc) {
1050                             getEncryptedAssertions().push_back(enc->cloneEncryptedAssertion());
1051                             continue;
1052                         }
1053                     }
1054                 }
1055             }
1056
1057             IMPL_XMLOBJECT_CLONE(Evidence);
1058             IMPL_TYPED_CHILDREN(AssertionIDRef,m_children.end());
1059             IMPL_TYPED_CHILDREN(AssertionURIRef,m_children.end());
1060             IMPL_TYPED_CHILDREN(Assertion,m_children.end());
1061             IMPL_TYPED_CHILDREN(EncryptedAssertion,m_children.end());
1062
1063         protected:
1064             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1065                 PROC_TYPED_CHILDREN(AssertionIDRef,SAMLConstants::SAML20_NS,false);
1066                 PROC_TYPED_CHILDREN(AssertionURIRef,SAMLConstants::SAML20_NS,false);
1067                 PROC_TYPED_CHILDREN(Assertion,SAMLConstants::SAML20_NS,false);
1068                 PROC_TYPED_CHILDREN(EncryptedAssertion,SAMLConstants::SAML20_NS,false);
1069                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
1070             }
1071         };
1072
1073         class SAML_DLLLOCAL AuthzDecisionStatementImpl : public virtual AuthzDecisionStatement,
1074             public AbstractComplexElement,
1075             public AbstractDOMCachingXMLObject,
1076             public AbstractValidatingXMLObject,
1077             public AbstractXMLObjectMarshaller,
1078             public AbstractXMLObjectUnmarshaller
1079         {
1080             void init() {
1081                 m_Resource=NULL;
1082                 m_Decision=NULL;
1083                 m_Evidence=NULL;
1084                 m_children.push_back(NULL);
1085                 m_pos_Evidence=m_children.begin();
1086             }
1087         public:
1088             virtual ~AuthzDecisionStatementImpl() {
1089                 XMLString::release(&m_Resource);
1090                 XMLString::release(&m_Decision);
1091             }
1092
1093             AuthzDecisionStatementImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1094                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1095                 init();
1096             }
1097
1098             AuthzDecisionStatementImpl(const AuthzDecisionStatementImpl& src)
1099                     : AbstractXMLObject(src),
1100                         AbstractDOMCachingXMLObject(src),
1101                         AbstractValidatingXMLObject(src) {
1102                 init();
1103                 setResource(src.getResource());
1104                 setDecision(src.getDecision());
1105                 if (src.getEvidence())
1106                     setEvidence(src.getEvidence()->cloneEvidence());
1107                 VectorOf(Action) v=getActions();
1108                 for (vector<Action*>::const_iterator i=src.m_Actions.begin(); i!=src.m_Actions.end(); i++) {
1109                     if (*i) {
1110                         v.push_back((*i)->cloneAction());
1111                     }
1112                 }
1113             }
1114
1115             IMPL_XMLOBJECT_CLONE(AuthzDecisionStatement);
1116             Statement* cloneStatement() const {
1117                 return cloneAuthzDecisionStatement();
1118             }
1119             IMPL_STRING_ATTRIB(Resource);
1120             IMPL_STRING_ATTRIB(Decision);
1121             IMPL_TYPED_CHILD(Evidence);
1122             IMPL_TYPED_CHILDREN(Action, m_pos_Evidence);
1123
1124         protected:
1125             void marshallAttributes(DOMElement* domElement) const {
1126                 MARSHALL_STRING_ATTRIB(Resource,RESOURCE,NULL);
1127                 MARSHALL_STRING_ATTRIB(Decision,DECISION,NULL);
1128             }
1129
1130             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1131                 PROC_TYPED_CHILD(Evidence,SAMLConstants::SAML20_NS,false);
1132                 PROC_TYPED_CHILDREN(Action,SAMLConstants::SAML20_NS,false);
1133                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
1134             }
1135
1136             void processAttribute(const DOMAttr* attribute) {
1137                 PROC_STRING_ATTRIB(Resource,RESOURCE,NULL);
1138                 PROC_STRING_ATTRIB(Decision,DECISION,NULL);
1139                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
1140             }
1141         };
1142
1143         class SAML_DLLLOCAL AttributeValueImpl
1144             : public virtual AttributeValue, public AnyElementImpl, public AbstractValidatingXMLObject
1145         {
1146         public:
1147             virtual ~AttributeValueImpl() {}
1148
1149             AttributeValueImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1150                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1151             }
1152
1153             AttributeValueImpl(const AttributeValueImpl& src) : AnyElementImpl(src), AbstractValidatingXMLObject(src) {}
1154
1155             IMPL_XMLOBJECT_CLONE(AttributeValue);
1156         };
1157
1158
1159         class SAML_DLLLOCAL AttributeImpl : public virtual Attribute,
1160             public AbstractComplexElement,
1161             public AbstractAttributeExtensibleXMLObject,
1162             public AbstractDOMCachingXMLObject,
1163             public AbstractValidatingXMLObject,
1164             public AbstractXMLObjectMarshaller,
1165             public AbstractXMLObjectUnmarshaller
1166         {
1167             void init() {
1168                 m_Name=m_NameFormat=m_FriendlyName=NULL;
1169             }
1170         public:
1171             virtual ~AttributeImpl() {
1172                 XMLString::release(&m_Name);
1173                 XMLString::release(&m_NameFormat);
1174                 XMLString::release(&m_FriendlyName);
1175             }
1176
1177             AttributeImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1178                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1179                 init();
1180             }
1181
1182             AttributeImpl(const AttributeImpl& src)
1183                     : AbstractXMLObject(src),
1184                         AbstractAttributeExtensibleXMLObject(src),
1185                         AbstractDOMCachingXMLObject(src),
1186                         AbstractValidatingXMLObject(src) {
1187                 init();
1188                 setName(src.getName());
1189                 setNameFormat(src.getNameFormat());
1190                 setFriendlyName(src.getFriendlyName());
1191                 VectorOf(XMLObject) v=getAttributeValues();
1192                 for (vector<XMLObject*>::const_iterator i=src.m_AttributeValues.begin(); i!=src.m_AttributeValues.end(); i++) {
1193                     if (*i) {
1194                         v.push_back((*i)->clone());
1195                     }
1196                 }
1197             }
1198
1199             IMPL_XMLOBJECT_CLONE(Attribute);
1200             IMPL_STRING_ATTRIB(Name);
1201             IMPL_STRING_ATTRIB(NameFormat);
1202             IMPL_STRING_ATTRIB(FriendlyName);
1203             IMPL_XMLOBJECT_CHILDREN(AttributeValue,m_children.end());
1204
1205             void setAttribute(QName& qualifiedName, const XMLCh* value) {
1206                 if (!qualifiedName.hasNamespaceURI()) {
1207                     if (XMLString::equals(qualifiedName.getLocalPart(),NAME_ATTRIB_NAME)) {
1208                         setName(value);
1209                         return;
1210                     }
1211                     else if (XMLString::equals(qualifiedName.getLocalPart(),NAMEFORMAT_ATTRIB_NAME)) {
1212                         setNameFormat(value);
1213                         return;
1214                     }
1215                     else if (XMLString::equals(qualifiedName.getLocalPart(),FRIENDLYNAME_ATTRIB_NAME)) {
1216                         setFriendlyName(value);
1217                         return;
1218                     }
1219                 }
1220                 AbstractAttributeExtensibleXMLObject::setAttribute(qualifiedName, value);
1221             }
1222
1223         protected:
1224             void marshallAttributes(DOMElement* domElement) const {
1225                 MARSHALL_STRING_ATTRIB(Name,NAME,NULL);
1226                 MARSHALL_STRING_ATTRIB(NameFormat,NAMEFORMAT,NULL);
1227                 MARSHALL_STRING_ATTRIB(FriendlyName,FRIENDLYNAME,NULL);
1228
1229                 // Take care of wildcard.
1230                 for (map<QName,XMLCh*>::const_iterator i=m_attributeMap.begin(); i!=m_attributeMap.end(); i++) {
1231                     DOMAttr* attr=domElement->getOwnerDocument()->createAttributeNS(i->first.getNamespaceURI(),i->first.getLocalPart());
1232                     if (i->first.hasPrefix())
1233                         attr->setPrefix(i->first.getPrefix());
1234                     attr->setNodeValue(i->second);
1235                     domElement->setAttributeNode(attr);
1236                 }
1237             }
1238
1239             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1240                 getAttributeValues().push_back(childXMLObject);
1241             }
1242
1243             void processAttribute(const DOMAttr* attribute) {
1244                 QName q(attribute->getNamespaceURI(),attribute->getLocalName(),attribute->getPrefix());
1245                 setAttribute(q,attribute->getNodeValue());
1246             }
1247         };
1248
1249         class SAML_DLLLOCAL EncryptedAttributeImpl : public virtual EncryptedAttribute, public EncryptedElementTypeImpl
1250         {
1251         public:
1252             virtual ~EncryptedAttributeImpl() {}
1253
1254             EncryptedAttributeImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1255                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {}
1256
1257             EncryptedAttributeImpl(const EncryptedAttributeImpl& src) : AbstractXMLObject(src), EncryptedElementTypeImpl(src) {}
1258
1259             IMPL_XMLOBJECT_CLONE(EncryptedAttribute);
1260             EncryptedElementType* cloneEncryptedElementType() const {
1261                 return new EncryptedAttributeImpl(*this);
1262             }
1263         };
1264
1265         class SAML_DLLLOCAL AttributeStatementImpl : public virtual AttributeStatement,
1266             public AbstractComplexElement,
1267             public AbstractDOMCachingXMLObject,
1268             public AbstractValidatingXMLObject,
1269             public AbstractXMLObjectMarshaller,
1270             public AbstractXMLObjectUnmarshaller
1271         {
1272         public:
1273             virtual ~AttributeStatementImpl() {}
1274
1275             AttributeStatementImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1276                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1277             }
1278
1279             AttributeStatementImpl(const AttributeStatementImpl& src)
1280                     : AbstractXMLObject(src),
1281                         AbstractDOMCachingXMLObject(src),
1282                         AbstractValidatingXMLObject(src) {
1283                 for (list<XMLObject*>::const_iterator i=src.m_children.begin(); i!=src.m_children.end(); i++) {
1284                     if (*i) {
1285                         Attribute* attribute=dynamic_cast<Attribute*>(*i);
1286                         if (attribute) {
1287                             getAttributes().push_back(attribute->cloneAttribute());
1288                             continue;
1289                         }
1290
1291                         EncryptedAttribute* enc=dynamic_cast<EncryptedAttribute*>(*i);
1292                         if (enc) {
1293                             getEncryptedAttributes().push_back(enc->cloneEncryptedAttribute());
1294                             continue;
1295                         }
1296                     }
1297                 }
1298             }
1299
1300             IMPL_XMLOBJECT_CLONE(AttributeStatement);
1301             Statement* cloneStatement() const {
1302                 return cloneAttributeStatement();
1303             }
1304             IMPL_TYPED_CHILDREN(Attribute, m_children.end());
1305             IMPL_TYPED_CHILDREN(EncryptedAttribute, m_children.end());
1306
1307         protected:
1308             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1309                 PROC_TYPED_CHILDREN(Attribute,SAMLConstants::SAML20_NS,false);
1310                 PROC_TYPED_CHILDREN(EncryptedAttribute,SAMLConstants::SAML20_NS,false);
1311                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
1312             }
1313         };
1314
1315         class SAML_DLLLOCAL AdviceImpl : public virtual Advice,
1316             public AbstractComplexElement,
1317             public AbstractDOMCachingXMLObject,
1318             public AbstractValidatingXMLObject,
1319             public AbstractXMLObjectMarshaller,
1320             public AbstractXMLObjectUnmarshaller
1321         {
1322         public:
1323             virtual ~AdviceImpl() {}
1324
1325             AdviceImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1326                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1327             }
1328
1329             AdviceImpl(const AdviceImpl& src)
1330                     : AbstractXMLObject(src),
1331                         AbstractDOMCachingXMLObject(src),
1332                         AbstractValidatingXMLObject(src) {
1333                 for (list<XMLObject*>::const_iterator i=src.m_children.begin(); i!=src.m_children.end(); i++) {
1334                     if (*i) {
1335                         AssertionIDRef* ref=dynamic_cast<AssertionIDRef*>(*i);
1336                         if (ref) {
1337                             getAssertionIDRefs().push_back(ref->cloneAssertionIDRef());
1338                             continue;
1339                         }
1340
1341                         AssertionURIRef* uri=dynamic_cast<AssertionURIRef*>(*i);
1342                         if (uri) {
1343                             getAssertionURIRefs().push_back(uri->cloneAssertionURIRef());
1344                             continue;
1345                         }
1346
1347                         Assertion* assertion=dynamic_cast<Assertion*>(*i);
1348                         if (assertion) {
1349                             getAssertions().push_back(assertion->cloneAssertion());
1350                             continue;
1351                         }
1352
1353                         EncryptedAssertion* enc=dynamic_cast<EncryptedAssertion*>(*i);
1354                         if (enc) {
1355                             getEncryptedAssertions().push_back(enc->cloneEncryptedAssertion());
1356                             continue;
1357                         }
1358
1359                         getOthers().push_back((*i)->clone());
1360                     }
1361                 }
1362             }
1363
1364             IMPL_XMLOBJECT_CLONE(Advice);
1365             IMPL_TYPED_CHILDREN(AssertionIDRef,m_children.end());
1366             IMPL_TYPED_CHILDREN(AssertionURIRef,m_children.end());
1367             IMPL_TYPED_CHILDREN(Assertion,m_children.end());
1368             IMPL_TYPED_CHILDREN(EncryptedAssertion,m_children.end());
1369             IMPL_XMLOBJECT_CHILDREN(Other,m_children.end());
1370
1371         protected:
1372             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1373                 PROC_TYPED_CHILDREN(AssertionIDRef,SAMLConstants::SAML20_NS,false);
1374                 PROC_TYPED_CHILDREN(AssertionURIRef,SAMLConstants::SAML20_NS,false);
1375                 PROC_TYPED_CHILDREN(Assertion,SAMLConstants::SAML20_NS,false);
1376                 PROC_TYPED_CHILDREN(EncryptedAssertion,SAMLConstants::SAML20_NS,false);
1377
1378                 // Unknown child.
1379                 const XMLCh* nsURI=root->getNamespaceURI();
1380                 if (!XMLString::equals(nsURI,SAMLConstants::SAML20_NS) && nsURI && *nsURI) {
1381                     getOthers().push_back(childXMLObject);
1382                     return;
1383                 }
1384
1385                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
1386             }
1387         };
1388
1389         class SAML_DLLLOCAL EncryptedAssertionImpl : public virtual EncryptedAssertion, public EncryptedElementTypeImpl
1390         {
1391         public:
1392             virtual ~EncryptedAssertionImpl() {}
1393
1394             EncryptedAssertionImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1395                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {}
1396
1397             EncryptedAssertionImpl(const EncryptedAssertionImpl& src) : AbstractXMLObject(src), EncryptedElementTypeImpl(src) {}
1398
1399             IMPL_XMLOBJECT_CLONE(EncryptedAssertion);
1400             EncryptedElementType* cloneEncryptedElementType() const {
1401                 return new EncryptedAssertionImpl(*this);
1402             }
1403         };
1404
1405         class SAML_DLLLOCAL AssertionImpl : public virtual Assertion,
1406             public AbstractComplexElement,
1407             public AbstractDOMCachingXMLObject,
1408             public AbstractValidatingXMLObject,
1409             public AbstractXMLObjectMarshaller,
1410             public AbstractXMLObjectUnmarshaller
1411         {
1412             void init() {
1413                 m_ID=NULL;
1414                 m_IssueInstant=NULL;
1415                 m_Issuer=NULL;
1416                 m_Signature=NULL;
1417                 m_Subject=NULL;
1418                 m_Conditions=NULL;
1419                 m_Advice=NULL;
1420                 m_children.push_back(NULL);
1421                 m_children.push_back(NULL);
1422                 m_children.push_back(NULL);
1423                 m_children.push_back(NULL);
1424                 m_children.push_back(NULL);
1425                 m_pos_Issuer=m_children.begin();
1426                 m_pos_Signature=m_pos_Issuer;
1427                 ++m_pos_Signature;
1428                 m_pos_Subject=m_pos_Signature;
1429                 ++m_pos_Subject;
1430                 m_pos_Conditions=m_pos_Subject;
1431                 ++m_pos_Conditions;
1432                 m_pos_Advice=m_pos_Conditions;
1433                 ++m_pos_Advice;
1434             }
1435         public:
1436             virtual ~AssertionImpl() {
1437                 XMLString::release(&m_ID);
1438                 XMLString::release(&m_Version);
1439                 delete m_IssueInstant;
1440             }
1441
1442             AssertionImpl(const XMLCh* nsURI, const XMLCh* localName, const XMLCh* prefix, const QName* schemaType)
1443                 : AbstractXMLObject(nsURI, localName, prefix, schemaType) {
1444                 init();
1445             }
1446
1447             AssertionImpl(const AssertionImpl& src)
1448                 : AbstractXMLObject(src),
1449                     AbstractDOMCachingXMLObject(src),
1450                     AbstractValidatingXMLObject(src) {
1451                 init();
1452                 setVersion(src.getVersion());
1453                 setID(src.getID());
1454                 setIssueInstant(src.getIssueInstant());
1455                 if (src.getIssuer())
1456                     setIssuer(src.getIssuer()->cloneIssuer());
1457                 if (src.getSignature())
1458                     setSignature(src.getSignature()->cloneSignature());
1459                 if (src.getSubject())
1460                     setSubject(src.getSubject()->cloneSubject());
1461                 if (src.getConditions())
1462                     setConditions(src.getConditions()->cloneConditions());
1463                 if (src.getAdvice())
1464                     setAdvice(src.getAdvice()->cloneAdvice());
1465                 for (list<XMLObject*>::const_iterator i=src.m_children.begin(); i!=src.m_children.end(); i++) {
1466                     if (*i) {
1467                         AuthnStatement* authst=dynamic_cast<AuthnStatement*>(*i);
1468                         if (authst) {
1469                             getAuthnStatements().push_back(authst->cloneAuthnStatement());
1470                             continue;
1471                         }
1472
1473                         AttributeStatement* attst=dynamic_cast<AttributeStatement*>(*i);
1474                         if (attst) {
1475                             getAttributeStatements().push_back(attst->cloneAttributeStatement());
1476                             continue;
1477                         }
1478
1479                         AuthzDecisionStatement* authzst=dynamic_cast<AuthzDecisionStatement*>(*i);
1480                         if (authzst) {
1481                             getAuthzDecisionStatements().push_back(authzst->cloneAuthzDecisionStatement());
1482                             continue;
1483                         }
1484
1485                         Statement* st=dynamic_cast<Statement*>(*i);
1486                         if (st) {
1487                             getStatements().push_back(st->cloneStatement());
1488                             continue;
1489                         }
1490                     }
1491                 }
1492             }
1493
1494             const XMLCh* getId() const {
1495                 return getID();
1496             }
1497
1498             //IMPL_TYPED_CHILD(Signature);
1499             // Need customized setter.
1500         protected:
1501             Signature* m_Signature;
1502             list<XMLObject*>::iterator m_pos_Signature;
1503         public:
1504             Signature* getSignature() const {
1505                 return m_Signature;
1506             }
1507
1508             void setSignature(Signature* sig) {
1509                 prepareForAssignment(m_Signature,sig);
1510                 *m_pos_Signature=m_Signature=sig;
1511                 // Sync content reference back up.
1512                 if (m_Signature)
1513                     m_Signature->setContentReference(new opensaml::ContentReference(*this));
1514             }
1515
1516             IMPL_XMLOBJECT_CLONE(Assertion);
1517             IMPL_STRING_ATTRIB(Version);
1518             IMPL_STRING_ATTRIB(ID);
1519             IMPL_DATETIME_ATTRIB(IssueInstant);
1520             IMPL_TYPED_CHILD(Issuer);
1521             IMPL_TYPED_CHILD(Subject);
1522             IMPL_TYPED_CHILD(Conditions);
1523             IMPL_TYPED_CHILD(Advice);
1524             IMPL_TYPED_CHILDREN(Statement, m_children.end());
1525             IMPL_TYPED_CHILDREN(AuthnStatement, m_children.end());
1526             IMPL_TYPED_CHILDREN(AttributeStatement, m_children.end());
1527             IMPL_TYPED_CHILDREN(AuthzDecisionStatement, m_children.end());
1528
1529         protected:
1530             void marshallAttributes(DOMElement* domElement) const {
1531                 if (!m_Version)
1532                     const_cast<AssertionImpl*>(this)->m_Version=XMLString::transcode("2.0");
1533                 MARSHALL_STRING_ATTRIB(Version,VER,NULL);
1534                 if (!m_ID)
1535                     const_cast<AssertionImpl*>(this)->m_ID=SAMLConfig::getConfig().generateIdentifier();
1536                 MARSHALL_ID_ATTRIB(ID,ID,NULL);
1537                 if (!m_IssueInstant)
1538                     const_cast<AssertionImpl*>(this)->m_IssueInstant=new DateTime(time(NULL));
1539                 MARSHALL_DATETIME_ATTRIB(IssueInstant,ISSUEINSTANT,NULL);
1540             }
1541
1542             void processChildElement(XMLObject* childXMLObject, const DOMElement* root) {
1543                 PROC_TYPED_CHILD(Issuer,SAMLConstants::SAML20_NS,false);
1544                 PROC_TYPED_CHILD(Signature,XMLConstants::XMLSIG_NS,false);
1545                 PROC_TYPED_CHILD(Subject,SAMLConstants::SAML20_NS,false);
1546                 PROC_TYPED_CHILD(Conditions,SAMLConstants::SAML20_NS,false);
1547                 PROC_TYPED_CHILD(Advice,SAMLConstants::SAML20_NS,false);
1548                 PROC_TYPED_CHILDREN(AuthnStatement,SAMLConstants::SAML20_NS,false);
1549                 PROC_TYPED_CHILDREN(AttributeStatement,SAMLConstants::SAML20_NS,false);
1550                 PROC_TYPED_CHILDREN(AuthzDecisionStatement,SAMLConstants::SAML20_NS,false);
1551                 PROC_TYPED_CHILDREN(Statement,SAMLConstants::SAML20_NS,false);
1552                 AbstractXMLObjectUnmarshaller::processChildElement(childXMLObject,root);
1553             }
1554
1555             void processAttribute(const DOMAttr* attribute) {
1556                 PROC_STRING_ATTRIB(Version,VER,NULL);
1557                 PROC_ID_ATTRIB(ID,ID,NULL);
1558                 PROC_DATETIME_ATTRIB(IssueInstant,ISSUEINSTANT,NULL);
1559                 AbstractXMLObjectUnmarshaller::processAttribute(attribute);
1560             }
1561         };
1562
1563     };
1564 };
1565
1566 #if defined (_MSC_VER)
1567     #pragma warning( pop )
1568 #endif
1569
1570 // Builder Implementations
1571
1572 IMPL_XMLOBJECTBUILDER(Action);
1573 IMPL_XMLOBJECTBUILDER(Advice);
1574 IMPL_XMLOBJECTBUILDER(Assertion);
1575 IMPL_XMLOBJECTBUILDER(AssertionIDRef);
1576 IMPL_XMLOBJECTBUILDER(AssertionURIRef);
1577 IMPL_XMLOBJECTBUILDER(Attribute);
1578 IMPL_XMLOBJECTBUILDER(AttributeStatement);
1579 IMPL_XMLOBJECTBUILDER(AttributeValue);
1580 IMPL_XMLOBJECTBUILDER(Audience);
1581 IMPL_XMLOBJECTBUILDER(AudienceRestriction);
1582 IMPL_XMLOBJECTBUILDER(AuthenticatingAuthority);
1583 IMPL_XMLOBJECTBUILDER(AuthnContext);
1584 IMPL_XMLOBJECTBUILDER(AuthnContextClassRef);
1585 IMPL_XMLOBJECTBUILDER(AuthnContextDecl);
1586 IMPL_XMLOBJECTBUILDER(AuthnContextDeclRef);
1587 IMPL_XMLOBJECTBUILDER(AuthnStatement);
1588 IMPL_XMLOBJECTBUILDER(AuthzDecisionStatement);
1589 IMPL_XMLOBJECTBUILDER(Conditions);
1590 IMPL_XMLOBJECTBUILDER(EncryptedAssertion);
1591 IMPL_XMLOBJECTBUILDER(EncryptedAttribute);
1592 IMPL_XMLOBJECTBUILDER(EncryptedID);
1593 IMPL_XMLOBJECTBUILDER(Evidence);
1594 IMPL_XMLOBJECTBUILDER(Issuer);
1595 IMPL_XMLOBJECTBUILDER(KeyInfoConfirmationDataType);
1596 IMPL_XMLOBJECTBUILDER(NameID);
1597 IMPL_XMLOBJECTBUILDER(NameIDType);
1598 IMPL_XMLOBJECTBUILDER(OneTimeUse);
1599 IMPL_XMLOBJECTBUILDER(ProxyRestriction);
1600 IMPL_XMLOBJECTBUILDER(Subject);
1601 IMPL_XMLOBJECTBUILDER(SubjectConfirmation);
1602 IMPL_XMLOBJECTBUILDER(SubjectConfirmationData);
1603 IMPL_XMLOBJECTBUILDER(SubjectLocality);
1604
1605 // Unicode literals
1606 const XMLCh Action::LOCAL_NAME[] =                  UNICODE_LITERAL_6(A,c,t,i,o,n);
1607 const XMLCh Action::TYPE_NAME[] =                   UNICODE_LITERAL_10(A,c,t,i,o,n,T,y,p,e);
1608 const XMLCh Action::NAMESPACE_ATTRIB_NAME[] =       UNICODE_LITERAL_9(N,a,m,e,s,p,a,c,e);
1609 const XMLCh Advice::LOCAL_NAME[] =                  UNICODE_LITERAL_6(A,d,v,i,c,e);
1610 const XMLCh Advice::TYPE_NAME[] =                   UNICODE_LITERAL_10(A,d,v,i,c,e,T,y,p,e);
1611 const XMLCh Assertion::LOCAL_NAME[] =               UNICODE_LITERAL_9(A,s,s,e,r,t,i,o,n);
1612 const XMLCh Assertion::TYPE_NAME[] =                UNICODE_LITERAL_13(A,s,s,e,r,t,i,o,n,T,y,p,e);
1613 const XMLCh Assertion::VER_ATTRIB_NAME[] =          UNICODE_LITERAL_7(V,e,r,s,i,o,n);
1614 const XMLCh Assertion::ID_ATTRIB_NAME[] =           UNICODE_LITERAL_2(I,D);
1615 const XMLCh Assertion::ISSUEINSTANT_ATTRIB_NAME[] = UNICODE_LITERAL_12(I,s,s,u,e,I,n,s,t,a,n,t);
1616 const XMLCh AssertionIDRef::LOCAL_NAME[] =          UNICODE_LITERAL_14(A,s,s,e,r,t,i,o,n,I,D,R,e,f);
1617 const XMLCh AssertionURIRef::LOCAL_NAME[] =         UNICODE_LITERAL_15(A,s,s,e,r,t,i,o,n,U,R,I,R,e,f);
1618 const XMLCh Attribute::LOCAL_NAME[] =               UNICODE_LITERAL_9(A,t,t,r,i,b,u,t,e);
1619 const XMLCh Attribute::TYPE_NAME[] =                UNICODE_LITERAL_13(A,t,t,r,i,b,u,t,e,T,y,p,e);
1620 const XMLCh Attribute::NAME_ATTRIB_NAME[] =         UNICODE_LITERAL_4(N,a,m,e);
1621 const XMLCh Attribute::NAMEFORMAT_ATTRIB_NAME[] =   UNICODE_LITERAL_10(N,a,m,e,F,o,r,m,a,t);
1622 const XMLCh Attribute::FRIENDLYNAME_ATTRIB_NAME[] = UNICODE_LITERAL_12(F,r,i,e,n,d,l,y,N,a,m,e);
1623 const XMLCh AttributeStatement::LOCAL_NAME[] =      UNICODE_LITERAL_18(A,t,t,r,i,b,u,t,e,S,t,a,t,e,m,e,n,t);
1624 const XMLCh AttributeStatement::TYPE_NAME[] =       UNICODE_LITERAL_22(A,t,t,r,i,b,u,t,e,S,t,a,t,e,m,e,n,t,T,y,p,e);
1625 const XMLCh AttributeValue::LOCAL_NAME[] =          UNICODE_LITERAL_14(A,t,t,r,i,b,u,t,e,V,a,l,u,e);
1626 const XMLCh Audience::LOCAL_NAME[] =                UNICODE_LITERAL_8(A,u,d,i,e,n,c,e);
1627 const XMLCh AudienceRestriction::LOCAL_NAME[] =     UNICODE_LITERAL_19(A,u,d,i,e,n,c,e,R,e,s,t,r,i,c,t,i,o,n);
1628 const XMLCh AudienceRestriction::TYPE_NAME[] =      UNICODE_LITERAL_23(A,u,d,i,e,n,c,e,R,e,s,t,r,i,c,t,i,o,n,T,y,p,e);
1629 const XMLCh AuthenticatingAuthority::LOCAL_NAME[] = UNICODE_LITERAL_23(A,u,t,h,e,n,t,i,c,a,t,i,n,g,A,u,t,h,o,r,i,t,y);
1630 const XMLCh AuthnContext::LOCAL_NAME[] =            UNICODE_LITERAL_12(A,u,t,h,n,C,o,n,t,e,x,t);
1631 const XMLCh AuthnContext::TYPE_NAME[] =             UNICODE_LITERAL_16(A,u,t,h,n,C,o,n,t,e,x,t,T,y,p,e);
1632 const XMLCh AuthnContextClassRef::LOCAL_NAME[] =    UNICODE_LITERAL_20(A,u,t,h,n,C,o,n,t,e,x,t,C,l,a,s,s,R,e,f);
1633 const XMLCh AuthnContextDecl::LOCAL_NAME[] =        UNICODE_LITERAL_16(A,u,t,h,n,C,o,n,t,e,x,t,D,e,c,l);
1634 const XMLCh AuthnContextDeclRef::LOCAL_NAME[] =     UNICODE_LITERAL_19(A,u,t,h,n,C,o,n,t,e,x,t,D,e,c,l,R,e,f);
1635 const XMLCh AuthnStatement::LOCAL_NAME[] =          UNICODE_LITERAL_14(A,u,t,h,n,S,t,a,t,e,m,e,n,t);
1636 const XMLCh AuthnStatement::TYPE_NAME[] =           UNICODE_LITERAL_18(A,u,t,h,n,S,t,a,t,e,m,e,n,t,T,y,p,e);
1637 const XMLCh AuthnStatement::AUTHNINSTANT_ATTRIB_NAME[] =    UNICODE_LITERAL_12(A,u,t,h,n,I,n,s,t,a,n,t);
1638 const XMLCh AuthnStatement::SESSIONINDEX_ATTRIB_NAME[] =    UNICODE_LITERAL_12(S,e,s,s,i,o,n,I,n,d,e,x);
1639 const XMLCh AuthnStatement::SESSIONNOTONORAFTER_ATTRIB_NAME[] = UNICODE_LITERAL_19(S,e,s,s,i,o,n,N,o,t,O,n,O,r,A,f,t,e,r);
1640 const XMLCh AuthzDecisionStatement::LOCAL_NAME[] =  UNICODE_LITERAL_22(A,u,t,h,z,D,e,c,i,s,i,o,n,S,t,a,t,e,m,e,n,t);
1641 const XMLCh AuthzDecisionStatement::TYPE_NAME[] =   UNICODE_LITERAL_26(A,u,t,h,z,D,e,c,i,s,i,o,n,S,t,a,t,e,m,e,n,t,T,y,p,e);
1642 const XMLCh AuthzDecisionStatement::RESOURCE_ATTRIB_NAME[] =    UNICODE_LITERAL_8(R,e,s,o,u,r,c,e);
1643 const XMLCh AuthzDecisionStatement::DECISION_ATTRIB_NAME[] =    UNICODE_LITERAL_8(D,e,c,i,s,i,o,n);
1644 const XMLCh AuthzDecisionStatement::DECISION_PERMIT[] = UNICODE_LITERAL_6(P,e,r,m,i,t);
1645 const XMLCh AuthzDecisionStatement::DECISION_DENY[] =   UNICODE_LITERAL_4(D,e,n,y);
1646 const XMLCh AuthzDecisionStatement::DECISION_INDETERMINATE[] =  UNICODE_LITERAL_13(I,n,d,e,t,e,r,m,i,n,a,t,e);
1647 const XMLCh BaseID::LOCAL_NAME[] =                  UNICODE_LITERAL_6(B,a,s,e,I,D);
1648 const XMLCh BaseID::NAMEQUALIFIER_ATTRIB_NAME[] =   UNICODE_LITERAL_13(N,a,m,e,Q,u,a,l,i,f,i,e,r);
1649 const XMLCh BaseID::SPNAMEQUALIFIER_ATTRIB_NAME[] = UNICODE_LITERAL_15(S,P,N,a,m,e,Q,u,a,l,i,f,i,e,r);
1650 const XMLCh Condition::LOCAL_NAME[] =               UNICODE_LITERAL_9(C,o,n,d,i,t,i,o,n);
1651 const XMLCh Conditions::LOCAL_NAME[] =              UNICODE_LITERAL_10(C,o,n,d,i,t,i,o,n,s);
1652 const XMLCh Conditions::TYPE_NAME[] =               UNICODE_LITERAL_14(C,o,n,d,i,t,i,o,n,s,T,y,p,e);
1653 const XMLCh Conditions::NOTBEFORE_ATTRIB_NAME[] =   UNICODE_LITERAL_9(N,o,t,B,e,f,o,r,e);
1654 const XMLCh Conditions::NOTONORAFTER_ATTRIB_NAME[] =UNICODE_LITERAL_12(N,o,t,O,n,O,r,A,f,t,e,r);
1655 const XMLCh EncryptedAssertion::LOCAL_NAME[] =      UNICODE_LITERAL_18(E,n,c,r,y,p,t,e,d,A,s,s,e,r,t,i,o,n);
1656 const XMLCh EncryptedAttribute::LOCAL_NAME[] =      UNICODE_LITERAL_18(E,n,c,r,y,p,t,e,d,A,t,t,r,i,b,u,t,e);
1657 const XMLCh EncryptedElementType::LOCAL_NAME[] =    {chNull};
1658 const XMLCh EncryptedElementType::TYPE_NAME[] =     UNICODE_LITERAL_20(E,n,c,r,y,p,t,e,d,E,l,e,m,e,n,t,T,y,p,e);
1659 const XMLCh EncryptedID::LOCAL_NAME[] =             UNICODE_LITERAL_11(E,n,c,r,y,p,t,e,d,I,d);
1660 const XMLCh Evidence::LOCAL_NAME[] =                UNICODE_LITERAL_8(E,v,i,d,e,n,c,e);
1661 const XMLCh Evidence::TYPE_NAME[] =                 UNICODE_LITERAL_12(E,v,i,d,e,n,c,e,T,y,p,e);
1662 const XMLCh Issuer::LOCAL_NAME[] =                  UNICODE_LITERAL_6(I,s,s,u,e,r);
1663 const XMLCh KeyInfoConfirmationDataType::LOCAL_NAME[] = UNICODE_LITERAL_23(S,u,b,j,e,c,t,C,o,n,f,i,r,m,a,t,i,o,n,D,a,t,a);
1664 const XMLCh KeyInfoConfirmationDataType::TYPE_NAME[] = UNICODE_LITERAL_27(K,e,y,I,n,f,o,C,o,n,f,i,r,m,a,t,i,o,n,D,a,t,a,T,y,p,e);
1665 const XMLCh KeyInfoConfirmationDataType::NOTBEFORE_ATTRIB_NAME[] =      UNICODE_LITERAL_9(N,o,t,B,e,f,o,r,e);
1666 const XMLCh KeyInfoConfirmationDataType::NOTONORAFTER_ATTRIB_NAME[] =   UNICODE_LITERAL_12(N,o,t,O,n,O,r,A,f,t,e,r);
1667 const XMLCh KeyInfoConfirmationDataType::INRESPONSETO_ATTRIB_NAME[] =   UNICODE_LITERAL_12(I,n,R,e,s,p,o,n,s,e,T,o);
1668 const XMLCh KeyInfoConfirmationDataType::RECIPIENT_ATTRIB_NAME[] =      UNICODE_LITERAL_9(R,e,c,i,p,i,e,n,t);
1669 const XMLCh KeyInfoConfirmationDataType::ADDRESS_ATTRIB_NAME[] =        UNICODE_LITERAL_7(A,d,d,r,e,s,s);
1670 const XMLCh NameID::LOCAL_NAME[] =                  UNICODE_LITERAL_6(N,a,m,e,I,D);
1671 const XMLCh NameIDType::LOCAL_NAME[] =              {chNull};
1672 const XMLCh NameIDType::TYPE_NAME[] =               UNICODE_LITERAL_10(N,a,m,e,I,D,T,y,p,e);
1673 const XMLCh NameIDType::NAMEQUALIFIER_ATTRIB_NAME[] =   UNICODE_LITERAL_13(N,a,m,e,Q,u,a,l,i,f,i,e,r);
1674 const XMLCh NameIDType::SPNAMEQUALIFIER_ATTRIB_NAME[] = UNICODE_LITERAL_15(S,P,N,a,m,e,Q,u,a,l,i,f,i,e,r);
1675 const XMLCh NameIDType::FORMAT_ATTRIB_NAME[] =      UNICODE_LITERAL_6(F,o,r,m,a,t);
1676 const XMLCh NameIDType::SPPROVIDEDID_ATTRIB_NAME[] =    UNICODE_LITERAL_12(S,P,P,r,o,v,i,d,e,d,I,D);
1677 const XMLCh OneTimeUse::LOCAL_NAME[] =              UNICODE_LITERAL_10(O,n,e,T,i,m,e,U,s,e);
1678 const XMLCh OneTimeUse::TYPE_NAME[] =               UNICODE_LITERAL_14(O,n,e,T,i,m,e,U,s,e,T,y,p,e);
1679 const XMLCh ProxyRestriction::LOCAL_NAME[] =        UNICODE_LITERAL_16(P,r,o,x,y,R,e,s,t,r,i,c,t,i,o,n);
1680 const XMLCh ProxyRestriction::TYPE_NAME[] =         UNICODE_LITERAL_20(P,r,o,x,y,R,e,s,t,r,i,c,t,i,o,n,T,y,p,e);
1681 const XMLCh ProxyRestriction::COUNT_ATTRIB_NAME[] = UNICODE_LITERAL_5(C,o,u,n,t);
1682 const XMLCh Statement::LOCAL_NAME[] =               UNICODE_LITERAL_9(S,t,a,t,e,m,e,n,t);
1683 const XMLCh Subject::LOCAL_NAME[] =                 UNICODE_LITERAL_7(S,u,b,j,e,c,t);
1684 const XMLCh Subject::TYPE_NAME[] =                  UNICODE_LITERAL_11(S,u,b,j,e,c,t,T,y,p,e);
1685 const XMLCh SubjectConfirmation::LOCAL_NAME[] =     UNICODE_LITERAL_19(S,u,b,j,e,c,t,C,o,n,f,i,r,m,a,t,i,o,n);
1686 const XMLCh SubjectConfirmation::TYPE_NAME[] =      UNICODE_LITERAL_23(S,u,b,j,e,c,t,C,o,n,f,i,r,m,a,t,i,o,n,T,y,p,e);
1687 const XMLCh SubjectConfirmation::METHOD_ATTRIB_NAME[] = UNICODE_LITERAL_6(M,e,t,h,o,d);
1688 const XMLCh SubjectConfirmationData::LOCAL_NAME[] = UNICODE_LITERAL_23(S,u,b,j,e,c,t,C,o,n,f,i,r,m,a,t,i,o,n,D,a,t,a);
1689 const XMLCh SubjectConfirmationData::NOTBEFORE_ATTRIB_NAME[] =      UNICODE_LITERAL_9(N,o,t,B,e,f,o,r,e);
1690 const XMLCh SubjectConfirmationData::NOTONORAFTER_ATTRIB_NAME[] =   UNICODE_LITERAL_12(N,o,t,O,n,O,r,A,f,t,e,r);
1691 const XMLCh SubjectConfirmationData::INRESPONSETO_ATTRIB_NAME[] =   UNICODE_LITERAL_12(I,n,R,e,s,p,o,n,s,e,T,o);
1692 const XMLCh SubjectConfirmationData::RECIPIENT_ATTRIB_NAME[] =      UNICODE_LITERAL_9(R,e,c,i,p,i,e,n,t);
1693 const XMLCh SubjectConfirmationData::ADDRESS_ATTRIB_NAME[] =        UNICODE_LITERAL_7(A,d,d,r,e,s,s);
1694 const XMLCh SubjectLocality::LOCAL_NAME[] =         UNICODE_LITERAL_15(S,u,b,j,e,c,t,L,o,c,a,l,i,t,y);
1695 const XMLCh SubjectLocality::TYPE_NAME[] =          UNICODE_LITERAL_19(S,u,b,j,e,c,t,L,o,c,a,l,i,t,y,T,y,p,e);
1696 const XMLCh SubjectLocality::ADDRESS_ATTRIB_NAME[] =UNICODE_LITERAL_7(A,d,d,r,e,s,s);
1697 const XMLCh SubjectLocality::DNSNAME_ATTRIB_NAME[] =UNICODE_LITERAL_7(D,N,S,N,a,m,e);