org.codice.ddf.security.idp.binding.post.PostResponseCreator.java Source code

Introduction

Here is the source code for org.codice.ddf.security.idp.binding.post.PostResponseCreator.java

Source

/**
 * Copyright (c) Codice Foundation
 *
 * <p>This is free software: you can redistribute it and/or modify it under the terms of the GNU
 * Lesser General Public License as published by the Free Software Foundation, either version 3 of
 * the License, or any later version.
 *
 * <p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Lesser General Public License for more details. A copy of the GNU Lesser General Public
 * License is distributed along with this program and can be found at
 * <http://www.gnu.org/licenses/lgpl.html>.
 */
package org.codice.ddf.security.idp.binding.post;

import ddf.security.samlp.SamlProtocol.Binding;
import ddf.security.samlp.SimpleSign;
import ddf.security.samlp.SystemCrypto;
import ddf.security.samlp.impl.EntityInformation;
import java.io.IOException;
import java.io.InputStream;
import java.nio.charset.StandardCharsets;
import java.util.Base64;
import java.util.List;
import java.util.Map;
import java.util.Set;
import javax.ws.rs.core.NewCookie;
import javax.ws.rs.core.Response;
import org.apache.commons.io.IOUtils;
import org.apache.cxf.helpers.DOMUtils;
import org.apache.wss4j.common.ext.WSSecurityException;
import org.apache.wss4j.common.saml.OpenSAMLUtil;
import org.apache.wss4j.common.util.DOM2Writer;
import org.codice.ddf.security.idp.binding.api.ResponseCreator;
import org.codice.ddf.security.idp.binding.api.impl.ResponseCreatorImpl;
import org.codice.ddf.security.idp.plugin.SamlPresignPlugin;
import org.codice.ddf.security.idp.server.Idp;
import org.codice.ddf.security.idp.server.IdpEndpoint;
import org.opensaml.saml.saml2.core.AuthnRequest;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.w3c.dom.Document;

public class PostResponseCreator extends ResponseCreatorImpl implements ResponseCreator {

    private static final Logger LOGGER = LoggerFactory.getLogger(PostResponseCreator.class);

    private String postResponseForm;

    public PostResponseCreator(SystemCrypto systemCrypto, Map<String, EntityInformation> serviceProviders,
            Set<SamlPresignPlugin> presignPlugins, List<String> spMetadata, Set<Binding> supportedBindings) {
        super(systemCrypto, serviceProviders, presignPlugins, spMetadata, supportedBindings);
        try (InputStream postMessageStream = IdpEndpoint.class
                .getResourceAsStream("/templates/postResponse.handlebars")) {
            postResponseForm = IOUtils.toString(postMessageStream, StandardCharsets.UTF_8);
        } catch (IOException e) {
            LOGGER.info("Unable to load the POST response template.");
        }
    }

    @Override
    public Response getSamlpResponse(String relayState, AuthnRequest authnRequest,
            org.opensaml.saml.saml2.core.Response samlResponse, NewCookie cookie)
            throws WSSecurityException, SimpleSign.SignatureException {
        LOGGER.debug("Configuring SAML Response for POST.");

        Document doc = DOMUtils.createDocument();
        doc.appendChild(doc.createElement("root"));

        org.opensaml.saml.saml2.core.Response processingResponse = processPresignPlugins(authnRequest,
                samlResponse);

        LOGGER.debug("Signing SAML POST Response.");
        getSimpleSign().signSamlObject(processingResponse);

        LOGGER.debug("Converting SAML Response to DOM");
        String assertionResponse = DOM2Writer.nodeToString(OpenSAMLUtil.toDom(processingResponse, doc));
        String encodedSamlResponse = Base64.getEncoder()
                .encodeToString(assertionResponse.getBytes(StandardCharsets.UTF_8));
        String assertionConsumerServiceURL = getAssertionConsumerServiceURL(authnRequest);

        String postForm = createPostResponse(encodedSamlResponse, relayState, assertionConsumerServiceURL);
        Response.ResponseBuilder ok = Response.ok(postForm);
        if (cookie != null) {
            ok = ok.cookie(cookie);
        }
        return ok.build();
    }

    private String createPostResponse(String samlResponse, String relayState, String acsUrl) {
        String submitFormUpdated = postResponseForm.replace("{{" + Idp.ACS_URL + "}}", acsUrl)
                .replace("{{" + Idp.SAML_RESPONSE + "}}", samlResponse);

        if (relayState != null) {
            submitFormUpdated = submitFormUpdated.replace("{{" + Idp.RELAY_STATE + "}}",
                    "<input type=\"hidden\" name=\"RelayState\" value=\"" + relayState + "\"/>");
        } else {
            submitFormUpdated = submitFormUpdated.replace("{{" + Idp.RELAY_STATE + "}}", "");
        }

        return submitFormUpdated;
    }
}