org.apache.ws.security.handler
Class RequestData

java.lang.Object
  org.apache.ws.security.handler.RequestData

public class RequestData
extends java.lang.Object

This class holds per request data.

Author:

Werner Dittmann (Werner.Dittmann@t-online.de)

Field Summary

protected boolean

requireSignedEncryptedDataElements

Constructor Summary

RequestData()

Method Summary

void	clear()
java.lang.String	getActor()
AlgorithmSuite	getAlgorithmSuite()
javax.security.auth.callback.CallbackHandler	getCallbackHandler() Returns the CallbackHandler used for this request.
Crypto	getDecCrypto()
int	getDerivedKeyIterations() Get the derived key iterations.
java.security.cert.X509Certificate	getEncCert()
Crypto	getEncCrypto()
java.lang.String	getEncDigestAlgorithm()
int	getEncKeyId()
java.lang.String	getEncKeyTransport()
java.util.List<WSEncryptionPart>	getEncryptParts()
boolean	getEncryptSymmetricEncryptionKey()
java.lang.String	getEncSymmAlgo()
java.lang.String	getEncUser()
java.lang.Object	getMsgContext()
ReplayCache	getNonceReplayCache() Get the replay cache for Nonces
java.lang.String	getPwType()
AlgorithmSuite	getSamlAlgorithmSuite()
WSSecHeader	getSecHeader()
int	getSecretKeyLength()
java.lang.String	getSigAlgorithm()
Crypto	getSigCrypto()
java.lang.String	getSigDigestAlgorithm()
int	getSigKeyId()
java.util.List<WSEncryptionPart>	getSignatureParts()
java.lang.String	getSignatureUser()
java.util.List<byte[]>	getSignatureValues()
SOAPConstants	getSoapConstants()
java.util.Collection<java.util.regex.Pattern>	getSubjectCertConstraints() Get the Signature Subject Cert Constraints
ReplayCache	getTimestampReplayCache() Get the replay cache for Timestamps
int	getTimeToLive()
java.lang.String	getUsername()
java.lang.String[]	getUtElements()
Validator	getValidator(javax.xml.namespace.QName qName) Get the Validator instance corresponding to the QName
WSSConfig	getWssConfig()
boolean	isAppendSignatureAfterTimestamp()
boolean	isNoSerialization()
boolean	isRequireSignedEncryptedDataElements()
boolean	isRevocationEnabled() Get whether to enable CRL checking or not when verifying trust in a certificate.
boolean	isUseDerivedKey() Return whether to derive keys as per the UsernameTokenProfile 1.1 spec.
boolean	isUseDerivedKeyForMAC() Whether to use the derived key for a MAC.
boolean	isUseSingleCert() Whether to use a single certificate or a whole certificate chain when constructing a BinarySecurityToken used for direct reference in Signature.
void	setActor(java.lang.String actor)
void	setAlgorithmSuite(AlgorithmSuite algorithmSuite)
void	setAppendSignatureAfterTimestamp(boolean appendSignatureAfterTimestamp)
void	setCallbackHandler(javax.security.auth.callback.CallbackHandler cb) Sets the CallbackHandler used for this request
void	setDecCrypto(Crypto decCrypto)
void	setDerivedKeyIterations(int iterations) Set the derived key iterations.
void	setEnableRevocation(boolean enableRevocation) Set whether to enable CRL checking or not when verifying trust in a certificate.
void	setEncCert(java.security.cert.X509Certificate encCert)
void	setEncCrypto(Crypto encCrypto)
void	setEncDigestAlgorithm(java.lang.String encDigestAlgorithm)
void	setEncKeyId(int encKeyId)
void	setEncKeyTransport(java.lang.String encKeyTransport)
void	setEncryptSymmetricEncryptionKey(boolean encrypt)
void	setEncSymmAlgo(java.lang.String encSymmAlgo)
void	setEncUser(java.lang.String encUser)
void	setMsgContext(java.lang.Object msgContext)
void	setNonceReplayCache(ReplayCache newCache) Set the replay cache for Nonces
void	setNoSerialization(boolean noSerialization)
void	setPwType(java.lang.String pwType)
void	setRequireSignedEncryptedDataElements(boolean requireSignedEncryptedDataElements) Configure the engine to verify that EncryptedData elements are in a signed subtree of the document.
void	setSamlAlgorithmSuite(AlgorithmSuite samlAlgorithmSuite)
void	setSecHeader(WSSecHeader secHeader)
void	setSecretKeyLength(int length)
void	setSigAlgorithm(java.lang.String sigAlgorithm)
void	setSigCrypto(Crypto sigCrypto)
void	setSigDigestAlgorithm(java.lang.String sigDigestAlgorithm)
void	setSigKeyId(int sigKeyId)
void	setSignatureUser(java.lang.String signatureUser)
void	setSoapConstants(SOAPConstants soapConstants)
void	setSubjectCertConstraints(java.util.Collection<java.util.regex.Pattern> subjectCertConstraints) Set the Signature Subject Cert Constraints
void	setTimestampReplayCache(ReplayCache newCache) Set the replay cache for Timestamps
void	setTimeToLive(int timeToLive)
void	setUseDerivedKey(boolean derivedKey)
void	setUseDerivedKeyForMAC(boolean useMac) Whether to use the derived key for a MAC.
void	setUsername(java.lang.String username)
void	setUseSingleCert(boolean useSingleCert) Whether to use a single certificate or a whole certificate chain when constructing a BinarySecurityToken used for direct reference in Signature.
void	setUtElements(java.lang.String[] utElements)
void	setWssConfig(WSSConfig wssConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

requireSignedEncryptedDataElements

protected boolean requireSignedEncryptedDataElements

Constructor Detail

RequestData

public RequestData()

Method Detail

clear

public void clear()

getMsgContext

public java.lang.Object getMsgContext()

setMsgContext

public void setMsgContext(java.lang.Object msgContext)

isNoSerialization

public boolean isNoSerialization()

setNoSerialization

public void setNoSerialization(boolean noSerialization)

getSoapConstants

public SOAPConstants getSoapConstants()

setSoapConstants

public void setSoapConstants(SOAPConstants soapConstants)

getActor

public java.lang.String getActor()

setActor

public void setActor(java.lang.String actor)

setSecretKeyLength

public void setSecretKeyLength(int length)

getSecretKeyLength

public int getSecretKeyLength()

getUsername

public java.lang.String getUsername()

setUsername

public void setUsername(java.lang.String username)

setEncryptSymmetricEncryptionKey

public void setEncryptSymmetricEncryptionKey(boolean encrypt)

getEncryptSymmetricEncryptionKey

public boolean getEncryptSymmetricEncryptionKey()

getPwType

public java.lang.String getPwType()

setPwType

public void setPwType(java.lang.String pwType)

getUtElements

public java.lang.String[] getUtElements()

setUtElements

public void setUtElements(java.lang.String[] utElements)

getSigCrypto

public Crypto getSigCrypto()

setSigCrypto

public void setSigCrypto(Crypto sigCrypto)

getDecCrypto

public Crypto getDecCrypto()

setDecCrypto

public void setDecCrypto(Crypto decCrypto)

getSigKeyId

public int getSigKeyId()

setSigKeyId

public void setSigKeyId(int sigKeyId)

getSigAlgorithm

public java.lang.String getSigAlgorithm()

setSigAlgorithm

public void setSigAlgorithm(java.lang.String sigAlgorithm)

getSigDigestAlgorithm

public java.lang.String getSigDigestAlgorithm()

setSigDigestAlgorithm

public void setSigDigestAlgorithm(java.lang.String sigDigestAlgorithm)

getEncDigestAlgorithm

public java.lang.String getEncDigestAlgorithm()

setEncDigestAlgorithm

public void setEncDigestAlgorithm(java.lang.String encDigestAlgorithm)

getSignatureParts

public java.util.List<WSEncryptionPart> getSignatureParts()

getSignatureUser

public java.lang.String getSignatureUser()

setSignatureUser

public void setSignatureUser(java.lang.String signatureUser)

getEncCrypto

public Crypto getEncCrypto()

setEncCrypto

public void setEncCrypto(Crypto encCrypto)

getEncKeyId

public int getEncKeyId()

setEncKeyId

public void setEncKeyId(int encKeyId)

getEncSymmAlgo

public java.lang.String getEncSymmAlgo()

setEncSymmAlgo

public void setEncSymmAlgo(java.lang.String encSymmAlgo)

getEncKeyTransport

public java.lang.String getEncKeyTransport()

setEncKeyTransport

public void setEncKeyTransport(java.lang.String encKeyTransport)

getEncUser

public java.lang.String getEncUser()

setEncUser

public void setEncUser(java.lang.String encUser)

getEncryptParts

public java.util.List<WSEncryptionPart> getEncryptParts()

getEncCert

public java.security.cert.X509Certificate getEncCert()

setEncCert

public void setEncCert(java.security.cert.X509Certificate encCert)

getTimeToLive

public int getTimeToLive()

setTimeToLive

public void setTimeToLive(int timeToLive)

getWssConfig

public WSSConfig getWssConfig()

Returns:

Returns the wssConfig.

setWssConfig

public void setWssConfig(WSSConfig wssConfig)

Parameters:

wssConfig - The wssConfig to set.

getSignatureValues

public java.util.List<byte[]> getSignatureValues()

Returns:

Returns the list of stored signature values.

getSecHeader

public WSSecHeader getSecHeader()

Returns:

Returns the secHeader.

setSecHeader

public void setSecHeader(WSSecHeader secHeader)

Parameters:

secHeader - The secHeader to set.

setUseDerivedKey

public void setUseDerivedKey(boolean derivedKey)

Parameters:

derivedKey - Set whether to derive keys as per the UsernameTokenProfile 1.1 spec. Default is true.

isUseDerivedKey

public boolean isUseDerivedKey()

Return whether to derive keys as per the UsernameTokenProfile 1.1 spec. Default is true.

setDerivedKeyIterations

public void setDerivedKeyIterations(int iterations)

Set the derived key iterations. Default is 1000.

Parameters:

iterations - The number of iterations to use when deriving a key

getDerivedKeyIterations

public int getDerivedKeyIterations()

Get the derived key iterations.

Returns:

The number of iterations to use when deriving a key

setUseDerivedKeyForMAC

public void setUseDerivedKeyForMAC(boolean useMac)

Whether to use the derived key for a MAC.

Parameters:

useMac - Whether to use the derived key for a MAC.

isUseDerivedKeyForMAC

public boolean isUseDerivedKeyForMAC()

Whether to use the derived key for a MAC.

Returns:

Whether to use the derived key for a MAC.

setUseSingleCert

public void setUseSingleCert(boolean useSingleCert)

Whether to use a single certificate or a whole certificate chain when constructing a BinarySecurityToken used for direct reference in Signature.

Parameters:

useSingleCert - true if only to use a single certificate

isUseSingleCert

public boolean isUseSingleCert()

Whether to use a single certificate or a whole certificate chain when constructing a BinarySecurityToken used for direct reference in Signature.

Returns:

whether to use a single certificate

setEnableRevocation

public void setEnableRevocation(boolean enableRevocation)

Set whether to enable CRL checking or not when verifying trust in a certificate.

Parameters:

enableRevocation - whether to enable CRL checking

isRevocationEnabled

public boolean isRevocationEnabled()

Get whether to enable CRL checking or not when verifying trust in a certificate.

Returns:

whether to enable CRL checking

isRequireSignedEncryptedDataElements

public boolean isRequireSignedEncryptedDataElements()

Returns:

whether EncryptedData elements are required to be signed

setRequireSignedEncryptedDataElements

public void setRequireSignedEncryptedDataElements(boolean requireSignedEncryptedDataElements)

Configure the engine to verify that EncryptedData elements are in a signed subtree of the document. This can be used to prevent some wrapping based attacks when encrypt-before-sign token protection is selected.

Parameters:

requireSignedEncryptedDataElements -

setCallbackHandler

public void setCallbackHandler(javax.security.auth.callback.CallbackHandler cb)

Sets the CallbackHandler used for this request

Parameters:

cb -

getCallbackHandler

public javax.security.auth.callback.CallbackHandler getCallbackHandler()

Returns the CallbackHandler used for this request.

Returns:

the CallbackHandler used for this request.

getValidator

public Validator getValidator(javax.xml.namespace.QName qName)
                       throws WSSecurityException

Get the Validator instance corresponding to the QName

Parameters:

qName - the QName with which to find a Validator instance

Returns:

the Validator instance corresponding to the QName

Throws:

WSSecurityException

setTimestampReplayCache

public void setTimestampReplayCache(ReplayCache newCache)

Set the replay cache for Timestamps

getTimestampReplayCache

public ReplayCache getTimestampReplayCache()

Get the replay cache for Timestamps

setNonceReplayCache

public void setNonceReplayCache(ReplayCache newCache)

Set the replay cache for Nonces

getNonceReplayCache

public ReplayCache getNonceReplayCache()

Get the replay cache for Nonces

setSubjectCertConstraints

public void setSubjectCertConstraints(java.util.Collection<java.util.regex.Pattern> subjectCertConstraints)

Set the Signature Subject Cert Constraints

getSubjectCertConstraints

public java.util.Collection<java.util.regex.Pattern> getSubjectCertConstraints()

Get the Signature Subject Cert Constraints

isAppendSignatureAfterTimestamp

public boolean isAppendSignatureAfterTimestamp()

setAppendSignatureAfterTimestamp

public void setAppendSignatureAfterTimestamp(boolean appendSignatureAfterTimestamp)

getAlgorithmSuite

public AlgorithmSuite getAlgorithmSuite()

setAlgorithmSuite

public void setAlgorithmSuite(AlgorithmSuite algorithmSuite)

getSamlAlgorithmSuite

public AlgorithmSuite getSamlAlgorithmSuite()

setSamlAlgorithmSuite

public void setSamlAlgorithmSuite(AlgorithmSuite samlAlgorithmSuite)