org.apereo.cas.support.openid.authentication.principal

Class OpenIdServiceResponseBuilder

java.lang.Object

org.apereo.cas.authentication.principal.AbstractWebApplicationServiceResponseBuilder

org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder

All Implemented Interfaces:

java.io.Serializable, org.apereo.cas.authentication.principal.ResponseBuilder<org.apereo.cas.authentication.principal.WebApplicationService>, org.springframework.core.Ordered

public class OpenIdServiceResponseBuilder
extends org.apereo.cas.authentication.principal.AbstractWebApplicationServiceResponseBuilder

Builds responses to Openid authN requests.

Since:

4.2

See Also:

Serialized Form

Field Summary

Fields inherited from class org.apereo.cas.authentication.principal.AbstractWebApplicationServiceResponseBuilder

servicesManager

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor and Description
OpenIdServiceResponseBuilder(java.lang.String openIdPrefixUrl, org.openid4java.server.ServerManager serverManager, org.apereo.cas.CentralAuthenticationService centralAuthenticationService, org.apereo.cas.services.ServicesManager servicesManager)

Method Summary

Modifier and Type	Method and Description
org.apereo.cas.authentication.principal.Response	build(org.apereo.cas.authentication.principal.WebApplicationService webApplicationService, java.lang.String ticketId, org.apereo.cas.authentication.Authentication authentication) Generates an Openid response.
protected org.apereo.cas.authentication.principal.Response	buildAuthenticationResponse(OpenIdService service, java.util.Map<java.lang.String,java.lang.String> parameters, boolean successFullAuthentication, java.lang.String id, org.openid4java.message.ParameterList parameterList) We sign directly (final 'true') because we don't add extensions response message can be either a DirectError or an AuthSuccess here.
protected java.lang.String	determineIdentity(OpenIdService service, org.apereo.cas.validation.Assertion assertion) Determine identity.
protected org.openid4java.association.Association	getAssociation(org.openid4java.server.ServerManager serverManager, org.openid4java.message.ParameterList parameterList) Gets association.
protected boolean	isAssociationValid(org.openid4java.association.Association association) Is association valid.
boolean	supports(org.apereo.cas.authentication.principal.WebApplicationService service)

Methods inherited from class org.apereo.cas.authentication.principal.AbstractWebApplicationServiceResponseBuilder

buildHeader, buildPost, buildRedirect, getOrder, getServicesManager, getWebApplicationServiceResponseType, setOrder

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenIdServiceResponseBuilder

public OpenIdServiceResponseBuilder(java.lang.String openIdPrefixUrl,
                                    org.openid4java.server.ServerManager serverManager,
                                    org.apereo.cas.CentralAuthenticationService centralAuthenticationService,
                                    org.apereo.cas.services.ServicesManager servicesManager)

Method Detail

build

public org.apereo.cas.authentication.principal.Response build(org.apereo.cas.authentication.principal.WebApplicationService webApplicationService,
                                                              java.lang.String ticketId,
                                                              org.apereo.cas.authentication.Authentication authentication)

Generates an Openid response. If no ticketId is found, response is negative. If we have a ticket id, then we check if we have an association. If so, we ask OpenId server manager to generate the answer according with the existing association. If not, we send back an answer with the ticket id as association handle. This will force the consumer to ask a verification, which will validate the service ticket.

Parameters:

ticketId - the service ticket to provide to the service.

webApplicationService - the service requesting an openid response

Returns:

the generated authentication answer

determineIdentity

protected java.lang.String determineIdentity(OpenIdService service,
                                             org.apereo.cas.validation.Assertion assertion)

Determine identity.

Parameters:

service - the service

assertion - the assertion

Returns:

the string

buildAuthenticationResponse

protected org.apereo.cas.authentication.principal.Response buildAuthenticationResponse(OpenIdService service,
                                                                                       java.util.Map<java.lang.String,java.lang.String> parameters,
                                                                                       boolean successFullAuthentication,
                                                                                       java.lang.String id,
                                                                                       org.openid4java.message.ParameterList parameterList)

We sign directly (final 'true') because we don't add extensions response message can be either a DirectError or an AuthSuccess here. Note: The association handle returned in the Response is either the 'public' created in a previous association, or is a 'private' handle created specifically for the verification step when in non-association mode

Parameters:

service - the service

parameters - the parameters

successFullAuthentication - the success full authentication

id - the id

parameterList - the parameter list

Returns:

response response

getAssociation

protected org.openid4java.association.Association getAssociation(org.openid4java.server.ServerManager serverManager,
                                                                 org.openid4java.message.ParameterList parameterList)

Gets association.

Parameters:

serverManager - the server manager

parameterList - the parameter list

Returns:

the association

supports

public boolean supports(org.apereo.cas.authentication.principal.WebApplicationService service)

isAssociationValid

protected boolean isAssociationValid(org.openid4java.association.Association association)

Is association valid.

Parameters:

association - the association

Returns:

true/false