2 * Licensed to the University Corporation for Advanced Internet
3 * Development, Inc. (UCAID) under one or more contributor license
4 * agreements. See the NOTICE file distributed with this work for
5 * additional information regarding copyright ownership.
7 * UCAID licenses this file to you under the Apache License,
8 * Version 2.0 (the "License"); you may not use this file except
9 * in compliance with the License. You may obtain a copy of the
12 * http://www.apache.org/licenses/LICENSE-2.0
14 * Unless required by applicable law or agreed to in writing,
15 * software distributed under the License is distributed on an
16 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
17 * either express or implied. See the License for the specific
18 * language governing permissions and limitations under the License.
22 * KeyInfoAttributeDecoder.cpp
24 * Decodes KeyInfo information into a SimpleAttribute.
28 #include "attribute/AttributeDecoder.h"
29 #include "attribute/SimpleAttribute.h"
31 #include <saml/saml1/core/Assertions.h>
32 #include <saml/saml2/core/Assertions.h>
33 #include <xmltooling/XMLToolingConfig.h>
34 #include <xmltooling/security/Credential.h>
35 #include <xmltooling/security/KeyInfoResolver.h>
36 #include <xmltooling/security/SecurityHelper.h>
37 #include <xmltooling/signature/KeyInfo.h>
39 using namespace shibsp;
40 using namespace opensaml;
41 using namespace xmlsignature;
42 using namespace xmltooling;
43 using namespace boost;
47 class SHIBSP_DLLLOCAL KeyInfoAttributeDecoder : virtual public AttributeDecoder
50 KeyInfoAttributeDecoder(const DOMElement* e);
51 ~KeyInfoAttributeDecoder() {}
55 const vector<string>& ids, const XMLObject* xmlObject, const char* assertingParty=nullptr, const char* relyingParty=nullptr
57 return decode(nullptr, ids, xmlObject, assertingParty, relyingParty);
61 const GenericRequest*, const vector<string>&, const XMLObject*, const char* assertingParty=nullptr, const char* relyingParty=nullptr
65 void extract(const KeyInfo* k, vector<string>& dest) const {
66 scoped_ptr<Credential> cred(getKeyInfoResolver()->resolve(k, Credential::RESOLVE_KEYS));
68 dest.push_back(string());
69 dest.back() = SecurityHelper::getDEREncoding(*cred, m_hash ? m_keyInfoHashAlg.c_str() : nullptr);
70 if (dest.back().empty())
75 const KeyInfoResolver* getKeyInfoResolver() const {
76 return m_keyInfoResolver ? m_keyInfoResolver.get() : XMLToolingConfig::getConfig().getKeyInfoResolver();
80 string m_keyInfoHashAlg;
81 scoped_ptr<KeyInfoResolver> m_keyInfoResolver;
84 AttributeDecoder* SHIBSP_DLLLOCAL KeyInfoAttributeDecoderFactory(const DOMElement* const & e)
86 return new KeyInfoAttributeDecoder(e);
89 static const XMLCh _KeyInfoResolver[] = UNICODE_LITERAL_15(K,e,y,I,n,f,o,R,e,s,o,l,v,e,r);
90 static const XMLCh _hash[] = UNICODE_LITERAL_4(h,a,s,h);
91 static const XMLCh keyInfoHashAlg[] = UNICODE_LITERAL_14(k,e,y,I,n,f,o,H,a,s,h,A,l,g);
92 static const XMLCh _type[] = UNICODE_LITERAL_4(t,y,p,e);
95 KeyInfoAttributeDecoder::KeyInfoAttributeDecoder(const DOMElement* e)
96 : AttributeDecoder(e),
97 m_hash(XMLHelper::getAttrBool(e, false, _hash)),
98 m_keyInfoHashAlg(XMLHelper::getAttrString(e, "SHA1", keyInfoHashAlg)) {
99 e = XMLHelper::getFirstChildElement(e, _KeyInfoResolver);
101 string t(XMLHelper::getAttrString(e, nullptr, _type));
103 throw UnknownExtensionException("<KeyInfoResolver> element found with no type attribute");
104 m_keyInfoResolver.reset(XMLToolingConfig::getConfig().KeyInfoResolverManager.newPlugin(t.c_str(), e));
108 Attribute* KeyInfoAttributeDecoder::decode(
109 const GenericRequest*, const vector<string>& ids, const XMLObject* xmlObject, const char* assertingParty, const char* relyingParty
112 Category& log = Category::getInstance(SHIBSP_LOGCAT".AttributeDecoder.KeyInfo");
114 if (!xmlObject || !XMLString::equals(saml1::Attribute::LOCAL_NAME, xmlObject->getElementQName().getLocalPart())) {
115 log.warn("XMLObject type not recognized by KeyInfoAttributeDecoder, no values returned");
119 auto_ptr<SimpleAttribute> attr(new SimpleAttribute(ids));
120 vector<string>& dest = attr->getValues();
121 vector<XMLObject*>::const_iterator v,stop;
123 const saml2::Attribute* saml2attr = dynamic_cast<const saml2::Attribute*>(xmlObject);
125 const vector<XMLObject*>& values = saml2attr->getAttributeValues();
128 if (log.isDebugEnabled()) {
129 auto_ptr_char n(saml2attr->getName());
131 "decoding KeyInfo information (%s) from SAML 2 Attribute (%s) with %lu value(s)",
132 ids.front().c_str(), n.get() ? n.get() : "unnamed", values.size()
137 const saml1::Attribute* saml1attr = dynamic_cast<const saml1::Attribute*>(xmlObject);
139 const vector<XMLObject*>& values = saml1attr->getAttributeValues();
142 if (log.isDebugEnabled()) {
143 auto_ptr_char n(saml1attr->getAttributeName());
145 "decoding KeyInfo information (%s) from SAML 1 Attribute (%s) with %lu value(s)",
146 ids.front().c_str(), n.get() ? n.get() : "unnamed", values.size()
151 log.warn("XMLObject type not recognized by KeyInfoAttributeDecoder, no values returned");
156 for (; v != stop; ++v) {
157 const KeyInfo* k = dynamic_cast<const KeyInfo*>(*v);
160 else if ((*v)->hasChildren()) {
161 const list<XMLObject*>& children = (*v)->getOrderedChildren();
162 for (list<XMLObject*>::const_iterator vv = children.begin(); vv != children.end(); ++vv) {
163 if (k=dynamic_cast<const KeyInfo*>(*vv))
166 log.warn("skipping AttributeValue without a recognizable KeyInfo");
171 return dest.empty() ? nullptr : _decode(attr.release());