| 1 |  |  | 
            
  
    | 2 |  |  | 
            
  
    | 3 |  |  | 
            
  
    | 4 |  |  | 
            
  
    | 5 |  |  | 
            
  
    | 6 |  |  | 
            
  
    | 7 |  |  | 
            
  
    | 8 |  |  | 
            
  
    | 9 |  |  | 
            
  
    | 10 |  |  | 
            
  
    | 11 |  |  | 
            
  
    | 12 |  |  | 
            
  
    | 13 |  |  | 
            
  
    | 14 |  |  | 
            
  
    | 15 |  |  | 
            
  
    | 16 |  | package org.kuali.student.security.saml.service; | 
            
  
    | 17 |  |  | 
            
  
    | 18 |  | import java.io.BufferedReader; | 
            
  
    | 19 |  | import java.io.InputStreamReader; | 
            
  
    | 20 |  | import java.io.StringWriter; | 
            
  
    | 21 |  | import java.io.UnsupportedEncodingException; | 
            
  
    | 22 |  | import java.net.HttpURLConnection; | 
            
  
    | 23 |  | import java.net.URL; | 
            
  
    | 24 |  | import java.net.URLEncoder; | 
            
  
    | 25 |  | import java.util.HashMap; | 
            
  
    | 26 |  | import java.util.Map; | 
            
  
    | 27 |  |  | 
            
  
    | 28 |  | import javax.jws.WebService; | 
            
  
    | 29 |  | import javax.xml.transform.Transformer; | 
            
  
    | 30 |  | import javax.xml.transform.TransformerFactory; | 
            
  
    | 31 |  | import javax.xml.transform.dom.DOMSource; | 
            
  
    | 32 |  | import javax.xml.transform.stream.StreamResult; | 
            
  
    | 33 |  |  | 
            
  
    | 34 |  | import org.jasig.cas.client.util.CommonUtils; | 
            
  
    | 35 |  | import org.jasig.cas.client.util.XmlUtils; | 
            
  
    | 36 |  | import org.kuali.student.security.exceptions.KSSecurityException; | 
            
  
    | 37 |  | import org.kuali.student.security.util.SamlUtils; | 
            
  
    | 38 |  | import org.opensaml.SAMLAssertion; | 
            
  
    | 39 |  | import org.w3c.dom.Document; | 
            
  
    | 40 |  |  | 
            
  
    | 41 |  | @WebService(endpointInterface = "org.kuali.student.security.saml.service.SamlIssuerService", serviceName = "SamlIssuerService", portName = "SamlIssuerService", targetNamespace = "http://student.kuali.org/wsdl/security/saml") | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 83 (83) | Complexity: 16 | Complexity Density: 0.24 |  | 
  
  
    | 42 |  | public class SamlIssuerServiceImpl implements SamlIssuerService { | 
            
  
    | 43 |  |  | 
            
  
    | 44 |  | private String casServerUrl; | 
            
  
    | 45 |  | private String samlIssuerForUser; | 
            
  
    | 46 |  | private String proxyCallBackUrl; | 
            
  
    | 47 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 44 (44) | Complexity: 5 | Complexity Density: 0.13 |  | 
  
  
    | 48 | 0 |  public String validateCasProxyTicket(String proxyTicketId, String proxyTargetService) throws KSSecurityException{... | 
            
  
    | 49 |  |  | 
            
  
    | 50 | 0 | String url = constructUrl(proxyTicketId, proxyTargetService); | 
            
  
    | 51 | 0 | HttpURLConnection conn = null; | 
            
  
    | 52 |  |  | 
            
  
    | 53 | 0 | try { | 
            
  
    | 54 | 0 | URL constructedUrl = new URL(url); | 
            
  
    | 55 | 0 | conn = (HttpURLConnection) constructedUrl.openConnection(); | 
            
  
    | 56 |  |  | 
            
  
    | 57 | 0 | BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream())); | 
            
  
    | 58 |  |  | 
            
  
    | 59 | 0 | String line; | 
            
  
    | 60 | 0 | StringBuffer stringBuffer = new StringBuffer(255); | 
            
  
    | 61 | 0 | String response; | 
            
  
    | 62 |  |  | 
            
  
    | 63 | 0 | while ((line = in.readLine()) != null) { | 
            
  
    | 64 | 0 | stringBuffer.append(line); | 
            
  
    | 65 |  | } | 
            
  
    | 66 |  |  | 
            
  
    | 67 | 0 | response = stringBuffer.toString(); | 
            
  
    | 68 | 0 | String error = XmlUtils.getTextForElement(response, "authenticationFailure"); | 
            
  
    | 69 |  |  | 
            
  
    | 70 | 0 | if (CommonUtils.isNotEmpty(error)) { | 
            
  
    | 71 | 0 | return error; | 
            
  
    | 72 |  | } | 
            
  
    | 73 |  |  | 
            
  
    | 74 | 0 | String user = XmlUtils.getTextForElement(response, "user"); | 
            
  
    | 75 | 0 | String pgt  = XmlUtils.getTextForElement(response, "proxyGrantingTicket"); | 
            
  
    | 76 | 0 | String proxies = XmlUtils.getTextForElement(response, "proxies"); | 
            
  
    | 77 |  |  | 
            
  
    | 78 | 0 | Map<String,String> samlProperties = new HashMap<String,String>(); | 
            
  
    | 79 | 0 | samlProperties.put("user", user.trim()); | 
            
  
    | 80 | 0 | samlProperties.put("proxyGrantingTicket", pgt.trim()); | 
            
  
    | 81 | 0 | samlProperties.put("proxies", proxies.trim()); | 
            
  
    | 82 | 0 | samlProperties.put("samlIssuerForUser", samlIssuerForUser.trim()); | 
            
  
    | 83 |  |  | 
            
  
    | 84 | 0 | SamlUtils.setSamlProperties(samlProperties); | 
            
  
    | 85 | 0 | SAMLAssertion samlAssertion = SamlUtils.createAssertion(); | 
            
  
    | 86 |  |  | 
            
  
    | 87 | 0 | Document signedSAML = SamlUtils.signAssertion(samlAssertion); | 
            
  
    | 88 |  |  | 
            
  
    | 89 |  |  | 
            
  
    | 90 | 0 | DOMSource domSource = new DOMSource(signedSAML); | 
            
  
    | 91 | 0 | StringWriter writer = new StringWriter(); | 
            
  
    | 92 | 0 | StreamResult result = new StreamResult(writer); | 
            
  
    | 93 |  |  | 
            
  
    | 94 | 0 | TransformerFactory tf = TransformerFactory.newInstance(); | 
            
  
    | 95 | 0 | Transformer transformer; | 
            
  
    | 96 |  |  | 
            
  
    | 97 | 0 | transformer = tf.newTransformer(); | 
            
  
    | 98 | 0 | transformer.transform(domSource, result); | 
            
  
    | 99 |  |  | 
            
  
    | 100 | 0 | writer.flush(); | 
            
  
    | 101 |  |  | 
            
  
    | 102 | 0 | return writer.toString(); | 
            
  
    | 103 |  |  | 
            
  
    | 104 |  | } catch (final Exception e) { | 
            
  
    | 105 | 0 | throw new KSSecurityException(e); | 
            
  
    | 106 |  | } finally { | 
            
  
    | 107 | 0 | if (conn != null) { | 
            
  
    | 108 | 0 | conn.disconnect(); | 
            
  
    | 109 |  | } | 
            
  
    | 110 |  | } | 
            
  
    | 111 |  | } | 
            
  
    | 112 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 5 (5) | Complexity: 3 | Complexity Density: 1 |  | 
  
  
    | 113 | 0 |  private String constructUrl(String proxyTicketId, String proxyTargetService) throws KSSecurityException{... | 
            
  
    | 114 | 0 | try { | 
            
  
    | 115 | 0 | return this.casServerUrl + (this.casServerUrl.endsWith("/") ? "" : "/") + "proxyValidate" + "?ticket=" | 
            
  
    | 116 |  | + proxyTicketId + "&service=" + URLEncoder.encode(proxyTargetService, "UTF-8") | 
            
  
    | 117 |  | + "&pgtUrl=" + URLEncoder.encode(proxyCallBackUrl, "UTF-8"); | 
            
  
    | 118 |  | } catch (UnsupportedEncodingException e) { | 
            
  
    | 119 | 0 | throw new KSSecurityException(e); | 
            
  
    | 120 |  | } | 
            
  
    | 121 |  | } | 
            
  
    | 122 |  |  | 
            
  
    | 123 |  |  | 
            
  
    | 124 |  |  | 
            
  
    | 125 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 19 (19) | Complexity: 2 | Complexity Density: 0.11 |  | 
  
  
    | 126 | 0 |  public String getSamlPrincipal(String principal) throws KSSecurityException{... | 
            
  
    | 127 | 0 | try { | 
            
  
    | 128 | 0 | Map<String,String> samlProperties = new HashMap<String,String>(); | 
            
  
    | 129 | 0 | samlProperties.put("user", principal); | 
            
  
    | 130 | 0 | samlProperties.put("proxyGrantingTicket", ""); | 
            
  
    | 131 | 0 | samlProperties.put("proxies", ""); | 
            
  
    | 132 | 0 | samlProperties.put("samlIssuerForUser", samlIssuerForUser.trim()); | 
            
  
    | 133 |  |  | 
            
  
    | 134 | 0 | SamlUtils.setSamlProperties(samlProperties); | 
            
  
    | 135 | 0 | SAMLAssertion samlAssertion = SamlUtils.createAssertion(); | 
            
  
    | 136 |  |  | 
            
  
    | 137 | 0 | Document signedSAML = SamlUtils.signAssertion(samlAssertion); | 
            
  
    | 138 |  |  | 
            
  
    | 139 |  |  | 
            
  
    | 140 | 0 | DOMSource domSource = new DOMSource(signedSAML); | 
            
  
    | 141 | 0 | StringWriter writer = new StringWriter(); | 
            
  
    | 142 | 0 | StreamResult result = new StreamResult(writer); | 
            
  
    | 143 |  |  | 
            
  
    | 144 | 0 | TransformerFactory tf = TransformerFactory.newInstance(); | 
            
  
    | 145 | 0 | Transformer transformer; | 
            
  
    | 146 |  |  | 
            
  
    | 147 | 0 | transformer = tf.newTransformer(); | 
            
  
    | 148 | 0 | transformer.transform(domSource, result); | 
            
  
    | 149 |  |  | 
            
  
    | 150 | 0 | writer.flush(); | 
            
  
    | 151 |  |  | 
            
  
    | 152 | 0 | return writer.toString(); | 
            
  
    | 153 |  |  | 
            
  
    | 154 |  | } catch (final Exception e) { | 
            
  
    | 155 | 0 | throw new KSSecurityException(e); | 
            
  
    | 156 |  | } | 
            
  
    | 157 |  |  | 
            
  
    | 158 |  | } | 
            
  
    | 159 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 160 | 0 |  public String getCasServerUrl() {... | 
            
  
    | 161 | 0 | return casServerUrl; | 
            
  
    | 162 |  | } | 
            
  
    | 163 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 164 | 0 |  public void setCasServerUrl(String casServerUrl) {... | 
            
  
    | 165 | 0 | this.casServerUrl = casServerUrl; | 
            
  
    | 166 |  | } | 
            
  
    | 167 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 168 | 0 |  public String getSamlIssuerForUser() {... | 
            
  
    | 169 | 0 | return samlIssuerForUser; | 
            
  
    | 170 |  | } | 
            
  
    | 171 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 172 | 0 |  public void setSamlIssuerForUser(String samlIssuerForUser) {... | 
            
  
    | 173 | 0 | this.samlIssuerForUser = samlIssuerForUser; | 
            
  
    | 174 |  | } | 
            
  
    | 175 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 176 | 0 |  public String getProxyCallBackUrl() {... | 
            
  
    | 177 | 0 | return proxyCallBackUrl; | 
            
  
    | 178 |  | } | 
            
  
    | 179 |  |  | 
               
        |  |  | 
           
           |  | 0% | Uncovered Elements: 1 (1) | Complexity: 1 | Complexity Density: 1 |  | 
  
  
    | 180 | 0 |  public void setProxyCallBackUrl(String proxyCallBackUrl) {... | 
            
  
    | 181 | 0 | this.proxyCallBackUrl = proxyCallBackUrl; | 
            
  
    | 182 |  | } | 
            
  
    | 183 |  | } |