com.hcl.domino.keep.saml

Class SAMLXmlUtils

java.lang.Object

com.hcl.domino.keep.saml.SAMLXmlUtils

public class SAMLXmlUtils
extends java.lang.Object

Method Summary

Modifier and Type	Method and Description
static java.lang.String	formatDate(java.util.Date d) Convert a java.util.Date to the correct format for SAML e.g., yyy-mm-ddThh:min:sec:msZ
static java.security.PrivateKey	getPrivateKey(java.lang.String privpem) Convert key text to Key object
static java.security.PublicKey	getPublicKey(java.lang.String pubpem) sanitize the provided public key and load
static java.security.cert.X509Certificate	getX509Certificate(java.lang.String x509pem) Format a .pem cert
static java.lang.String	outputXMLNode(org.w3c.dom.Element node) used for debug only
static org.apache.commons.lang3.tuple.Pair<java.lang.String,java.lang.String>	parseRequestFields(org.w3c.dom.Document requestDoc) Find the ID and reply URL from the request
static void	signAssertion(org.w3c.dom.Element assertionTag, org.w3c.dom.Document doc, java.lang.String szPrivateKey, java.lang.String szPublicKey, java.lang.String szX509, java.lang.String szAssertTagIDAttr) Sign the Assertion tag in-place in the DOM Copied mainly from: https://stackoverflow.com/questions/33769655/how-to-sign-just-a-part-of-xml-file-java-xmlsignature

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

parseRequestFields

public static org.apache.commons.lang3.tuple.Pair<java.lang.String,java.lang.String> parseRequestFields(org.w3c.dom.Document requestDoc)

Find the ID and reply URL from the request

Parameters:

requestDoc - xml Document to parse

Returns:

pair of strings

formatDate

public static java.lang.String formatDate(java.util.Date d)

Convert a java.util.Date to the correct format for SAML e.g., yyy-mm-ddThh:min:sec:msZ

Parameters:

d - Java date

Returns:

string result

getX509Certificate

public static java.security.cert.X509Certificate getX509Certificate(java.lang.String x509pem)

Format a .pem cert

Parameters:

x509pem - formatted .pem

Returns:

cert string with formatting removed

getPublicKey

public static java.security.PublicKey getPublicKey(java.lang.String pubpem)

sanitize the provided public key and load

Parameters:

pubpem - formatted .pem

Returns:

key with formatting removed

getPrivateKey

public static java.security.PrivateKey getPrivateKey(java.lang.String privpem)

Convert key text to Key object

Parameters:

privpem - formatted key

Returns:

key with formatting removed

signAssertion

public static void signAssertion(org.w3c.dom.Element assertionTag,
                                 org.w3c.dom.Document doc,
                                 java.lang.String szPrivateKey,
                                 java.lang.String szPublicKey,
                                 java.lang.String szX509,
                                 java.lang.String szAssertTagIDAttr)

Sign the Assertion tag in-place in the DOM Copied mainly from: https://stackoverflow.com/questions/33769655/how-to-sign-just-a-part-of-xml-file-java-xmlsignature

Parameters:

assertionTag - element

doc - xml document root

szPrivateKey - private key to use

szPublicKey - public key to use

szX509 - public cert to use

szAssertTagIDAttr - ID attribute of the element

outputXMLNode

public static java.lang.String outputXMLNode(org.w3c.dom.Element node)

used for debug only

Parameters:

node - xml Element to output

Returns:

formatted xml