2 * Copyright 2001-2007 Internet2
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
18 * @file shibsp/Application.h
20 * Interface to a Shibboleth Application instance.
23 #ifndef __shibsp_app_h__
24 #define __shibsp_app_h__
26 #include <shibsp/util/PropertySet.h>
30 # include <saml/binding/MessageEncoder.h>
31 # include <saml/saml2/metadata/MetadataProvider.h>
32 # include <xmltooling/security/CredentialResolver.h>
33 # include <xmltooling/security/TrustEngine.h>
35 #include <xmltooling/io/HTTPRequest.h>
36 #include <xmltooling/util/Threads.h>
41 class SHIBSP_API AttributeExtractor;
42 class SHIBSP_API AttributeFilter;
43 class SHIBSP_API AttributeResolver;
45 class SHIBSP_API Attribute;
46 class SHIBSP_API Handler;
47 class SHIBSP_API ServiceProvider;
48 class SHIBSP_API SessionInitiator;
49 class SHIBSP_API SPRequest;
51 #if defined (_MSC_VER)
52 #pragma warning( push )
53 #pragma warning( disable : 4251 )
57 * Interface to a Shibboleth Application instance.
59 * <p>An Application is a logical set of resources that act as a unit
60 * of session management and policy.
62 class SHIBSP_API Application : public virtual PropertySet
64 ,public virtual opensaml::MessageEncoder::ArtifactGenerator
67 MAKE_NONCOPYABLE(Application);
72 * @param sp parent ServiceProvider instance
74 Application(const ServiceProvider* sp);
76 /** Pointer to parent SP instance. */
77 const ServiceProvider* m_sp;
79 /** Shared lock for manipulating application state. */
80 mutable xmltooling::RWLock* m_lock;
82 /** Cache of entity attributes. */
83 mutable std::map< std::string,std::multimap<std::string,const Attribute*> > m_entityAttributes;
85 /** Pairs of raw and normalized CGI header names to clear. */
86 mutable std::vector< std::pair<std::string,std::string> > m_unsetHeaders;
89 virtual ~Application();
92 * Returns the owning ServiceProvider instance.
94 * @return a locked ServiceProvider
96 const ServiceProvider& getServiceProvider() const {
101 * Returns the Application's ID.
105 virtual const char* getId() const {
106 return getString("id").second;
110 * Returns a unique hash for the Application.
112 * @return a value resulting from a computation over the Application's configuration
114 virtual const char* getHash() const=0;
117 * Returns the name and cookie properties to use for this Application.
119 * @param prefix a value to prepend to the base cookie name
120 * @return a pair containing the cookie name and the string to append to the cookie value
122 virtual std::pair<std::string,const char*> getCookieNameProps(const char* prefix) const;
126 * Returns a MetadataProvider for use with this Application.
128 * @param required true iff an exception should be thrown if no MetadataProvider is available
129 * @return a MetadataProvider instance, or NULL
131 virtual opensaml::saml2md::MetadataProvider* getMetadataProvider(bool required=true) const=0;
134 * Returns a TrustEngine for use with this Application.
136 * @param required true iff an exception should be thrown if no TrustEngine is available
137 * @return a TrustEngine instance, or NULL
139 virtual xmltooling::TrustEngine* getTrustEngine(bool required=true) const=0;
142 * Returns an AttributeExtractor for use with this Application.
144 * @return an AttributeExtractor, or NULL
146 virtual AttributeExtractor* getAttributeExtractor() const=0;
149 * Returns an AttributeFilter for use with this Application.
151 * @return an AttributeFilter, or NULL
153 virtual AttributeFilter* getAttributeFilter() const=0;
156 * Returns an AttributeResolver for use with this Application.
158 * @return an AttributeResolver, or NULL
160 virtual AttributeResolver* getAttributeResolver() const=0;
163 * Returns the CredentialResolver instance associated with this Application.
165 * @return a CredentialResolver, or NULL
167 virtual xmltooling::CredentialResolver* getCredentialResolver() const=0;
170 * Returns configuration properties governing security interactions with a peer.
172 * @param provider a peer entity's metadata
173 * @return the applicable PropertySet
175 virtual const PropertySet* getRelyingParty(const opensaml::saml2md::EntityDescriptor* provider) const=0;
178 * Returns the set of audience values associated with this Application.
180 * @return set of audience values associated with the Application
182 virtual const std::vector<const XMLCh*>& getAudiences() const=0;
186 * Returns the designated notification URL, or an empty string if no more locations are specified.
188 * @param request requested URL to use to fill in missing pieces of notification URL
189 * @param front true iff front channel notification is desired, false iff back channel is desired
190 * @param index zero-based index of URL to return
191 * @return the designated URL, or an empty string
193 virtual std::string getNotificationURL(const char* request, bool front, unsigned int index) const=0;
196 * Returns a set of attribute IDs to use as a REMOTE_USER value.
197 * <p>The first attribute with a value (and only a single value) will be used.
199 * @return a set of attribute IDs, or an empty set
201 virtual const std::set<std::string>& getRemoteUserAttributeIds() const=0;
204 * Clears any headers that may be used to hold attributes after export.
206 * @param request SP request to clear
208 virtual void clearAttributeHeaders(SPRequest& request) const;
211 * Returns an indexed set of attributes associated with an entity (as opposed to a user).
213 * @param entityID unique ID of entity
214 * @return a map of attributes keyed by their ID
216 virtual const std::multimap<std::string,const Attribute*>& getEntityAttributes(const char* entityID) const;
219 * Returns the default SessionInitiator when automatically requesting a session.
221 * @return the default SessionInitiator, or NULL
223 virtual const SessionInitiator* getDefaultSessionInitiator() const=0;
226 * Returns a SessionInitiator with a particular ID when automatically requesting a session.
228 * @param id an identifier unique to the Application
229 * @return the designated SessionInitiator, or NULL
231 virtual const SessionInitiator* getSessionInitiatorById(const char* id) const=0;
234 * Returns the default AssertionConsumerService Handler
235 * for use in AuthnRequest messages.
237 * @return the default AssertionConsumerService, or NULL
239 virtual const Handler* getDefaultAssertionConsumerService() const=0;
242 * Returns an AssertionConsumerService Handler with a particular index
243 * for use in AuthnRequest messages.
245 * @param index an index unique to an application
246 * @return the designated AssertionConsumerService, or NULL
248 virtual const Handler* getAssertionConsumerServiceByIndex(unsigned short index) const=0;
251 * Returns one or more AssertionConsumerService Handlers that support
252 * a particular protocol binding.
254 * @param binding a protocol binding identifier
255 * @return a set of qualifying AssertionConsumerServices
257 virtual const std::vector<const Handler*>& getAssertionConsumerServicesByBinding(const XMLCh* binding) const=0;
260 * Returns the Handler associated with a particular path/location.
262 * @param path the PATH_INFO appended to the end of a base Handler location
263 * that invokes the Handler
264 * @return the mapped Handler, or NULL
266 virtual const Handler* getHandler(const char* path) const=0;
269 #if defined (_MSC_VER)
270 #pragma warning( pop )
275 #endif /* __shibsp_app_h__ */