public class HiveSaml2Client
extends org.pac4j.saml.client.SAML2Client
SAML2Client
using the HiveConf. Also, implements the generation of SAML requests using
HTTP-Redirect binding. //TODO: Add support for HTTP-Post binding for SAML request.
//TODO Note that this implementation is only to be used when HiveServer2 is not
deployed in HA mode. In case of HA mode, we should implement a
ReplayCacheProvider
such that the ReplayCache
is
shared between all HS2 instances. Ref: http://www.pac4j.org/docs/clients/saml.htmlauthnResponseValidator, configuration, contextProvider, credentialProvider, decrypter, idpMetadataResolver, logoutProfileHandler, logoutValidator, profileHandler, replayCache, signatureSigningParametersProvider, signatureTrustEngineProvider, soapPipelineProvider, spMetadataResolver, stateGenerator
Modifier and Type | Method and Description |
---|---|
static HiveSaml2Client |
get(HiveConf conf) |
void |
setRedirect(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
Generates a SAML request using the HTTP-Redirect Binding.
|
static void |
shutdown() |
String |
validate(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
Given a response which may contain a SAML Assertion, validates it.
|
clientInit, destroy, getAuthnResponseValidator, getConfiguration, getContextProvider, getIdentityProviderMetadataResolver, getIdentityProviderResolvedEntityId, getLogoutProfileHandler, getProfileHandler, getReplayCache, getServiceProviderMetadataResolver, getServiceProviderResolvedEntityId, getSignatureSigningParametersProvider, getSignatureTrustEngineProvider, getStateGenerator, initCredentialProvider, initDecrypter, initIdentityProviderMetadataResolver, initSAMLContextProvider, initSAMLLogoutProfileHandler, initSAMLLogoutResponseValidator, initSAMLProfileHandler, initSAMLReplayCache, initSAMLResponseValidator, initServiceProviderMetadataResolver, initSignatureSigningParametersProvider, initSignatureTrustEngineProvider, initSOAPPipelineProvider, notifySessionRenewal, setConfiguration, setLogoutProfileHandler, setStateGenerator
computeFinalCallbackUrl, defaultLogoutActionBuilder, defaultRedirectionActionBuilder, getAjaxRequestResolver, getCallbackUrl, getCallbackUrlResolver, getCodeVerifierSessionAttributeName, getCredentials, getLogoutAction, getLogoutActionBuilder, getNonceSessionAttributeName, getRedirectionAction, getRedirectionActionBuilder, getStateSessionAttributeName, getUrlResolver, internalInit, newDefaultCallbackUrlResolver, setAjaxRequestResolver, setCallbackUrl, setCallbackUrlResolver, setLogoutActionBuilder, setRedirectionActionBuilder, setUrlResolver, toString
addAuthorizationGenerator, addAuthorizationGenerators, defaultAuthenticator, defaultCredentialsExtractor, defaultProfileCreator, getAuthenticator, getAuthorizationGenerators, getCredentialsExtractor, getCustomProperties, getName, getProfileCreator, getProfileFactoryWhenNotAuthenticated, getUserProfile, renewUserProfile, retrieveCredentials, retrieveUserProfile, setAuthenticator, setAuthorizationGenerator, setAuthorizationGenerators, setAuthorizationGenerators, setCredentialsExtractor, setCustomProperties, setName, setProfileCreator, setProfileFactoryWhenNotAuthenticated
public static HiveSaml2Client get(HiveConf conf) throws HttpSamlAuthenticationException
HttpSamlAuthenticationException
public static void shutdown()
public void setRedirect(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) throws HttpSamlAuthenticationException
HttpSamlAuthenticationException
public String validate(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) throws HttpSamlAuthenticationException
request
- response
- HttpSamlAuthenticationException
- In case the assertion is not present or is
invalid.Copyright © 2022 The Apache Software Foundation. All rights reserved.