Initial decryption and schema support for encrypted SAML.

[shibboleth/cpp-opensaml.git] / saml / encryption / EncryptedKeyResolver.h

diff --git a/saml/encryption/EncryptedKeyResolver.h b/saml/encryption/EncryptedKeyResolver.h
new file mode 100644 (file)
index 0000000..cc6d2a2
--- /dev/null
+++ b/saml/encryption/EncryptedKeyResolver.h
@@ -0,0 +1,62 @@
+/*\r
+ *  Copyright 2001-2006 Internet2\r
+ * \r
+ * Licensed under the Apache License, Version 2.0 (the "License");\r
+ * you may not use this file except in compliance with the License.\r
+ * You may obtain a copy of the License at\r
+ *\r
+ *     http://www.apache.org/licenses/LICENSE-2.0\r
+ *\r
+ * Unless required by applicable law or agreed to in writing, software\r
+ * distributed under the License is distributed on an "AS IS" BASIS,\r
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
+ * See the License for the specific language governing permissions and\r
+ * limitations under the License.\r
+ */\r
+\r
+/**\r
+ * @file EncryptedKeyResolver.h\r
+ * \r
+ * SAML-specific encrypted key resolver \r
+ */\r
+\r
+#ifndef __saml_enckeyres_h__\r
+#define __saml_enckeyres_h__\r
+\r
+#include <saml/base.h>\r
+#include <saml/saml2/core/Assertions.h>\r
+#include <xmltooling/encryption/EncryptedKeyResolver.h>\r
+\r
+namespace opensaml {\r
+\r
+    /**\r
+     * SAML-specific encrypted key resolver.\r
+     * \r
+     * SAML allows placement of keys alongside the encrypted data. This resolver\r
+     * recognizes the implied placement.\r
+     */\r
+    class SAML_API EncryptedKeyResolver : public xmlencryption::EncryptedKeyResolver\r
+    {\r
+    public:\r
+        EncryptedKeyResolver(const saml2::EncryptedElementType& ref, const XMLCh* recipient=NULL)\r
+            : m_ref(ref), m_recipient(XMLString::replicate(recipient)) {\r
+        }\r
+        \r
+        virtual ~EncryptedKeyResolver() {\r
+            XMLString::release(&m_recipient);\r
+        }\r
+\r
+        xmlencryption::EncryptedKey* resolveKey(xmlencryption::EncryptedData* encryptedData);\r
+        \r
+        EncryptedKeyResolver* clone() const {\r
+            return new EncryptedKeyResolver(m_ref, m_recipient);\r
+        }\r
+     \r
+    protected:\r
+        const saml2::EncryptedElementType& m_ref;\r
+        XMLCh* m_recipient;\r
+    };\r
+\r
+};\r
+\r
+#endif /* __saml_enckeyres_h__ */\r