Serialized Form

Package net.geant.edugain.attributes

Class net.geant.edugain.attributes.ConfigurationException extends java.lang.Exception implements Serializable

Class net.geant.edugain.attributes.EvaluationException extends java.lang.Exception implements Serializable

Class net.geant.edugain.attributes.TooManyMultivaluedMatchException extends java.lang.RuntimeException implements Serializable

Package net.geant.edugain.base

Class net.geant.edugain.base.AttributeRequest extends Request implements Serializable

Serialized Fields

subjectHandle

java.lang.String subjectHandle

The identification string obtained upon the last successful authentication of the subject requesting access to the resource.

attributeNameList

java.util.ArrayList<E> attributeNameList

A list of the attribute names whose values are requested. If no AttributeNameList is included in a request, all "available" (those that can be released according to the applicable policy) attributes are requested. [optional]

homeSite

java.lang.String homeSite

The home site of the user where the request is going to be solved. This value corresponds to the ConnectTo value in the HomeLocationRequest operation.

referred

java.net.URI referred

The URI from where the requester has been redirected to this service.

Class net.geant.edugain.base.AttributeResponder extends javax.servlet.http.HttpServlet implements Serializable

Serialized Fields

log

org.apache.log4j.Logger log

Class net.geant.edugain.base.AttributeResponse extends Response implements Serializable

Serialized Fields

subjectHandle

java.lang.String subjectHandle

The identification string obtained upon the last successful authentication of the subject requesting access to the resource.

attributeValues

java.util.ArrayList<E> attributeValues

A list of elements, each of them corresponding to one attribute that the identity source is willing to deliver upon successful authentication.

Class net.geant.edugain.base.AttributeValues extends java.lang.Object implements Serializable

Serialized Fields

namespace

java.lang.String namespace

The namespace of the attribute.

name

java.lang.String name

The name of the attribute.

values

java.util.List<E> values

A list of values of the attribute.

policy

javax.xml.namespace.QName policy

Accept (if the release policy for this attribute matched) or Reject (if the release policy for this attribute did not match).

Class net.geant.edugain.base.AuthenticationRequest extends Request implements Serializable

Serialized Fields

authnType

java.lang.String authnType

A identification of the protocol used in the authentication.

authenticationMethod

java.net.URI authenticationMethod

URI that identifies a authentication method (e.g. password, PKI) to be used to authenticate the subject.

authenticatingPrincipal

java.lang.String authenticatingPrincipal

A string (simple or in URN format) that identifies the principal [username/object] that is requesting the authentication.

homeSite

java.lang.String homeSite

The home site of the user where the request is going to be solved. This value corresponds to the ConnectTo value in the HomeLocationRequest operation.

shire

java.net.URI shire

The URI from where the requester has been redirected to this service.

homeLocators

java.util.ArrayList<E> homeLocators

A list of data that will be used by the Metadata Service to evaluate the request. Each individual locator consists of an attribute-value pair.

Class net.geant.edugain.base.AuthenticationResponder extends javax.servlet.http.HttpServlet implements Serializable

Serialized Fields

log

org.apache.log4j.Logger log

Class net.geant.edugain.base.AuthenticationResponse extends Response implements Serializable

Serialized Fields

attributeValueList

java.util.ArrayList<E> attributeValueList

subjectHandle

java.lang.String subjectHandle

Class net.geant.edugain.base.AuthorizationRequest extends Request implements Serializable

Serialized Fields

actions

java.util.ArrayList<E> actions

An identifier for the action the requester is willing to perform on the resource. A string from a controlled vocabulary (see note below) and/or a formally defined URN can be used as value.

Note: actions as described here are meaningful in the corresponding application context, and thus are transparent to the eduGAIN infrastructure itself. User applications may establish their own sets of them, by means of multi- or bi-lateral agreements, requirements in the framework of policy management authorities, or even official standards where applicable.

attributeValueList

java.util.ArrayList<E> attributeValueList

A list of the attributes (as established by the authentication procedures) provided by and/or obtained for the element requesting the authorisation. Each individual element consists of an attribute name-value pair.

subjectHandle

java.lang.String subjectHandle

The identification string obtained upon the last successful authentication of the subject requesting access to the resource.

attributeAuthority

java.net.URI attributeAuthority

An optional URI of an eduGAIN instance that can help in making the authorisation decision by providing additional attributes.

policyReference

java.util.ArrayList<E> policyReference

An optional list of policy references to be applied in the decision. As in the action, the values can be strings from a controlled vocabulary and/or formally defined URNs.

TODO: If URN-coded, enumerate all the possible values.

Class net.geant.edugain.base.AuthorizationResponder extends javax.servlet.http.HttpServlet implements Serializable

Serialized Fields

log

org.apache.log4j.Logger log

Class net.geant.edugain.base.AuthorizationResponse extends Response implements Serializable

Serialized Fields

resource

java.net.URI resource

The URI of the resource the authorisation is resolved for.

actions

java.util.ArrayList<E> actions

A list of actions that the user is authorized to perform.

subjectHandle

java.lang.String subjectHandle

A reference to the identification string obtained upon the last successful authentication of the subject requesting access to the resource.

Class net.geant.edugain.base.BaseException extends java.lang.Exception implements Serializable

serialVersionUID: 2763736745722225097L

Class net.geant.edugain.base.Request extends java.lang.Object implements Serializable

Serialized Fields

random

java.security.SecureRandom random

A secure random number generator

log

org.apache.log4j.Logger log

Generic logger attribute. Please initialize it adequately in the implementing classes.

requestID

java.lang.String requestID

A reference (internally generated by the requester) for this operation to be used in further interactions regarding the request.

resource

java.net.URI resource

The URI of the resource the authorisation is requested for.

producerId

java.net.URI producerId

The component identifier for the producer of the request.

consumerId

java.net.URI consumerId

The component identifier for the consumer of the request.

cacheReference

java.lang.String cacheReference

An optional parameter including a ResponseID argument of a previous Response.

issued

java.util.Date issued

The date the Request was issued.

samlObject

java.lang.Object samlObject

The OpenSAML object associated with this response.

strictMode

boolean strictMode

According to the eduGAIN Trust Fabric:

XML Signatures MUST be used in the following SAML constructs:

• Assertions containing one SAML AuthenticationStatement and (optionally) several SAML AttributeStatement in response to an eduGAIN AuthenticationRequest.

XML Signatures SHOULD be used in the following SAML constructs:

• Assertions containing SAML AttributeStatement in response to an eduGAIN AttributeRequest.

validator

Validator validator

The validator used to verify any response.

Class net.geant.edugain.base.Response extends java.lang.Object implements Serializable

Serialized Fields

random

java.security.SecureRandom random

A secure random number generator

log

org.apache.log4j.Logger log

Generic logger attribute. Please initialize it adequately in the implementing classes.

responseID

java.lang.String responseID

A reference (internally generated by the responder) for this operation to be used in further interactions regarding the request.

producerId

java.net.URI producerId

The component identifier for the producer of the response.

consumerId

java.net.URI consumerId

The component identifier for the consumer of the response.

inResponseTo

java.lang.String inResponseTo

A reference to the RequestID contained in the input message of the operation.

result

javax.xml.namespace.QName result

The result of the request. Possible values are:

• Accept: The request is authorised.
• ConnectTo: Following parameters will include the interfaces where further AA requests can be satisfied.
• Deny: The request is denied.
• InvalidCredentials: The result of the credential evaluation at the service does not allow providing any other response.
• Fault: An error occurred. The reason (and optionally additional information) will be provided by the errorReason and errorMessage parameters.

resultMessage

java.lang.String resultMessage

Extra information about the error.

issued

java.util.Date issued

The instant this response was issued

notBefore

java.util.Date notBefore

The date after this response will be valid

notOnOrAfter

java.util.Date notOnOrAfter

The date after this response will no longer be valid

interfaces

java.util.ArrayList<E> interfaces

A list of (possible) interfaces associated with a CONNECT_TO result

additionalData

java.lang.String additionalData

Any other data the Authentication Service is willing to include. Possible purposes of these data are to provide additional logging and diagnostic information, or information relevant to the requesting resource, and any assumptions on their format is out of scope of this document.

This element is mapped to StatusDetail element which is unsupported in OpenSAML1, so for this version of the library, additionalData is unused.

errorReason

javax.xml.namespace.QName errorReason

One of the possible error types taken into account in the system (see below)

errorMessage

java.lang.String errorMessage

Extra information about the error.

samlObject

java.lang.Object samlObject

The OpenSAML object associated with this response.

strictMode

boolean strictMode

According to the eduGAIN Trust Fabric:

XML Signatures MUST be used in the following SAML constructs:

• Assertions containing one SAML AuthenticationStatement and (optionally) several SAML AttributeStatement in response to an eduGAIN AuthenticationRequest.

XML Signatures SHOULD be used in the following SAML constructs:

• Assertions containing SAML AttributeStatement in response to an eduGAIN AttributeRequest.

validator

Validator validator

The validator used to verify any response.

Package net.geant.edugain.base.websso

Class net.geant.edugain.base.websso.WebSSORequestListener extends javax.servlet.http.HttpServlet implements Serializable

Serialized Fields

log

org.apache.log4j.Logger log

Class net.geant.edugain.base.websso.WebSSOResponseListener extends javax.servlet.http.HttpServlet implements Serializable

Serialized Fields

log

org.apache.log4j.Logger log

Package net.geant.edugain.meta.publish

Class net.geant.edugain.meta.publish.MetaPublishException extends java.lang.Exception implements Serializable

serialVersionUID: 2763736745722225097L

Package net.geant.edugain.meta.query

Class net.geant.edugain.meta.query.MetaQueryException extends java.lang.Exception implements Serializable

serialVersionUID: 2763736745722225097L

Package net.geant.edugain.validation

Class net.geant.edugain.validation.ValidationException extends java.lang.Exception implements Serializable

serialVersionUID: 1L