Constructor Detail

• AbstractBindingPolicyValidator

  public AbstractBindingPolicyValidator()

Method Detail

• validateTimestamp

  protected boolean validateTimestamp(boolean includeTimestamp,
                          boolean transportBinding,
                          org.apache.wss4j.dom.handler.WSHandlerResult results,
                          List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults,
                          Message message)

  Validate a Timestamp

  Parameters:

  includeTimestamp - whether a Timestamp must be included or not

  transportBinding - whether the Transport binding is in use or not

  signedResults - the signed results list

  message - the Message object

  Returns:

  whether the Timestamp policy is valid or not

• validateEntireHeaderAndBodySignatures

  protected boolean validateEntireHeaderAndBodySignatures(List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults)

  Validate the entire header and body signature property.

• checkProperties

  protected boolean checkProperties(org.apache.wss4j.policy.model.AbstractSymmetricAsymmetricBinding binding,
                        AssertionInfo ai,
                        AssertionInfoMap aim,
                        org.apache.wss4j.dom.handler.WSHandlerResult results,
                        List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults,
                        Message message)

  Check various properties set in the policy of the binding

• checkProtectionOrder

  protected boolean checkProtectionOrder(org.apache.wss4j.policy.model.AbstractSymmetricAsymmetricBinding binding,
                             AssertionInfoMap aim,
                             AssertionInfo ai,
                             List<org.apache.wss4j.dom.WSSecurityEngineResult> results)

  Check the Protection Order of the binding

• checkDerivedKeys

  protected boolean checkDerivedKeys(org.apache.wss4j.policy.model.AbstractTokenWrapper tokenWrapper,
                         boolean hasDerivedKeys,
                         List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults,
                         List<org.apache.wss4j.dom.WSSecurityEngineResult> encryptedResults)

  Check the derived key requirement.

• isTokenProtected

  protected boolean isTokenProtected(List<org.apache.wss4j.dom.WSSecurityEngineResult> results,
                         List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults)

  Check whether the token protection policy is followed. In other words, check that the signature token was itself signed.

• isSignatureEncrypted

  protected boolean isSignatureEncrypted(List<org.apache.wss4j.dom.WSSecurityEngineResult> results)

  Check whether the primary Signature (and all SignatureConfirmation) elements were encrypted