1 |
|
|
2 |
|
|
3 |
|
|
4 |
|
|
5 |
|
|
6 |
|
|
7 |
|
|
8 |
|
|
9 |
|
|
10 |
|
|
11 |
|
|
12 |
|
|
13 |
|
|
14 |
|
|
15 |
|
|
16 |
|
package org.kuali.student.security.saml.service; |
17 |
|
|
18 |
|
import java.io.BufferedReader; |
19 |
|
import java.io.InputStreamReader; |
20 |
|
import java.io.StringWriter; |
21 |
|
import java.io.UnsupportedEncodingException; |
22 |
|
import java.net.HttpURLConnection; |
23 |
|
import java.net.URL; |
24 |
|
import java.net.URLEncoder; |
25 |
|
import java.util.HashMap; |
26 |
|
import java.util.Map; |
27 |
|
|
28 |
|
import javax.jws.WebService; |
29 |
|
import javax.xml.transform.Transformer; |
30 |
|
import javax.xml.transform.TransformerFactory; |
31 |
|
import javax.xml.transform.dom.DOMSource; |
32 |
|
import javax.xml.transform.stream.StreamResult; |
33 |
|
|
34 |
|
import org.jasig.cas.client.util.CommonUtils; |
35 |
|
import org.jasig.cas.client.util.XmlUtils; |
36 |
|
import org.kuali.student.security.exceptions.KSSecurityException; |
37 |
|
import org.kuali.student.security.util.SamlUtils; |
38 |
|
import org.opensaml.SAMLAssertion; |
39 |
|
import org.w3c.dom.Document; |
40 |
|
|
41 |
|
@WebService(endpointInterface = "org.kuali.student.security.saml.service.SamlIssuerService", serviceName = "SamlIssuerService", portName = "SamlIssuerService", targetNamespace = "http://student.kuali.org/wsdl/security/saml") |
|
|
| 0% |
Uncovered Elements: 83 (83) |
Complexity: 16 |
Complexity Density: 0.24 |
|
42 |
|
public class SamlIssuerServiceImpl implements SamlIssuerService { |
43 |
|
|
44 |
|
private String casServerUrl; |
45 |
|
private String samlIssuerForUser; |
46 |
|
private String proxyCallBackUrl; |
47 |
|
|
|
|
| 0% |
Uncovered Elements: 44 (44) |
Complexity: 5 |
Complexity Density: 0.13 |
|
48 |
0
|
public String validateCasProxyTicket(String proxyTicketId, String proxyTargetService) throws KSSecurityException{... |
49 |
|
|
50 |
0
|
String url = constructUrl(proxyTicketId, proxyTargetService); |
51 |
0
|
HttpURLConnection conn = null; |
52 |
|
|
53 |
0
|
try { |
54 |
0
|
URL constructedUrl = new URL(url); |
55 |
0
|
conn = (HttpURLConnection) constructedUrl.openConnection(); |
56 |
|
|
57 |
0
|
BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream())); |
58 |
|
|
59 |
0
|
String line; |
60 |
0
|
StringBuffer stringBuffer = new StringBuffer(255); |
61 |
0
|
String response; |
62 |
|
|
63 |
0
|
while ((line = in.readLine()) != null) { |
64 |
0
|
stringBuffer.append(line); |
65 |
|
} |
66 |
|
|
67 |
0
|
response = stringBuffer.toString(); |
68 |
0
|
String error = XmlUtils.getTextForElement(response, "authenticationFailure"); |
69 |
|
|
70 |
0
|
if (CommonUtils.isNotEmpty(error)) { |
71 |
0
|
return error; |
72 |
|
} |
73 |
|
|
74 |
0
|
String user = XmlUtils.getTextForElement(response, "user"); |
75 |
0
|
String pgt = XmlUtils.getTextForElement(response, "proxyGrantingTicket"); |
76 |
0
|
String proxies = XmlUtils.getTextForElement(response, "proxies"); |
77 |
|
|
78 |
0
|
Map<String,String> samlProperties = new HashMap<String,String>(); |
79 |
0
|
samlProperties.put("user", user.trim()); |
80 |
0
|
samlProperties.put("proxyGrantingTicket", pgt.trim()); |
81 |
0
|
samlProperties.put("proxies", proxies.trim()); |
82 |
0
|
samlProperties.put("samlIssuerForUser", samlIssuerForUser.trim()); |
83 |
|
|
84 |
0
|
SamlUtils.setSamlProperties(samlProperties); |
85 |
0
|
SAMLAssertion samlAssertion = SamlUtils.createAssertion(); |
86 |
|
|
87 |
0
|
Document signedSAML = SamlUtils.signAssertion(samlAssertion); |
88 |
|
|
89 |
|
|
90 |
0
|
DOMSource domSource = new DOMSource(signedSAML); |
91 |
0
|
StringWriter writer = new StringWriter(); |
92 |
0
|
StreamResult result = new StreamResult(writer); |
93 |
|
|
94 |
0
|
TransformerFactory tf = TransformerFactory.newInstance(); |
95 |
0
|
Transformer transformer; |
96 |
|
|
97 |
0
|
transformer = tf.newTransformer(); |
98 |
0
|
transformer.transform(domSource, result); |
99 |
|
|
100 |
0
|
writer.flush(); |
101 |
|
|
102 |
0
|
return writer.toString(); |
103 |
|
|
104 |
|
} catch (final Exception e) { |
105 |
0
|
throw new KSSecurityException(e); |
106 |
|
} finally { |
107 |
0
|
if (conn != null) { |
108 |
0
|
conn.disconnect(); |
109 |
|
} |
110 |
|
} |
111 |
|
} |
112 |
|
|
|
|
| 0% |
Uncovered Elements: 5 (5) |
Complexity: 3 |
Complexity Density: 1 |
|
113 |
0
|
private String constructUrl(String proxyTicketId, String proxyTargetService) throws KSSecurityException{... |
114 |
0
|
try { |
115 |
0
|
return this.casServerUrl + (this.casServerUrl.endsWith("/") ? "" : "/") + "proxyValidate" + "?ticket=" |
116 |
|
+ proxyTicketId + "&service=" + URLEncoder.encode(proxyTargetService, "UTF-8") |
117 |
|
+ "&pgtUrl=" + URLEncoder.encode(proxyCallBackUrl, "UTF-8"); |
118 |
|
} catch (UnsupportedEncodingException e) { |
119 |
0
|
throw new KSSecurityException(e); |
120 |
|
} |
121 |
|
} |
122 |
|
|
123 |
|
|
124 |
|
|
125 |
|
|
|
|
| 0% |
Uncovered Elements: 19 (19) |
Complexity: 2 |
Complexity Density: 0.11 |
|
126 |
0
|
public String getSamlPrincipal(String principal) throws KSSecurityException{... |
127 |
0
|
try { |
128 |
0
|
Map<String,String> samlProperties = new HashMap<String,String>(); |
129 |
0
|
samlProperties.put("user", principal); |
130 |
0
|
samlProperties.put("proxyGrantingTicket", ""); |
131 |
0
|
samlProperties.put("proxies", ""); |
132 |
0
|
samlProperties.put("samlIssuerForUser", samlIssuerForUser.trim()); |
133 |
|
|
134 |
0
|
SamlUtils.setSamlProperties(samlProperties); |
135 |
0
|
SAMLAssertion samlAssertion = SamlUtils.createAssertion(); |
136 |
|
|
137 |
0
|
Document signedSAML = SamlUtils.signAssertion(samlAssertion); |
138 |
|
|
139 |
|
|
140 |
0
|
DOMSource domSource = new DOMSource(signedSAML); |
141 |
0
|
StringWriter writer = new StringWriter(); |
142 |
0
|
StreamResult result = new StreamResult(writer); |
143 |
|
|
144 |
0
|
TransformerFactory tf = TransformerFactory.newInstance(); |
145 |
0
|
Transformer transformer; |
146 |
|
|
147 |
0
|
transformer = tf.newTransformer(); |
148 |
0
|
transformer.transform(domSource, result); |
149 |
|
|
150 |
0
|
writer.flush(); |
151 |
|
|
152 |
0
|
return writer.toString(); |
153 |
|
|
154 |
|
} catch (final Exception e) { |
155 |
0
|
throw new KSSecurityException(e); |
156 |
|
} |
157 |
|
|
158 |
|
} |
159 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
160 |
0
|
public String getCasServerUrl() {... |
161 |
0
|
return casServerUrl; |
162 |
|
} |
163 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
164 |
0
|
public void setCasServerUrl(String casServerUrl) {... |
165 |
0
|
this.casServerUrl = casServerUrl; |
166 |
|
} |
167 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
168 |
0
|
public String getSamlIssuerForUser() {... |
169 |
0
|
return samlIssuerForUser; |
170 |
|
} |
171 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
172 |
0
|
public void setSamlIssuerForUser(String samlIssuerForUser) {... |
173 |
0
|
this.samlIssuerForUser = samlIssuerForUser; |
174 |
|
} |
175 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
176 |
0
|
public String getProxyCallBackUrl() {... |
177 |
0
|
return proxyCallBackUrl; |
178 |
|
} |
179 |
|
|
|
|
| 0% |
Uncovered Elements: 1 (1) |
Complexity: 1 |
Complexity Density: 1 |
|
180 |
0
|
public void setProxyCallBackUrl(String proxyCallBackUrl) {... |
181 |
0
|
this.proxyCallBackUrl = proxyCallBackUrl; |
182 |
|
} |
183 |
|
} |