org.apache.cxf.sts.token.validator

Class X509TokenValidator

java.lang.Object

org.apache.cxf.sts.token.validator.X509TokenValidator

All Implemented Interfaces:

TokenValidator

public class X509TokenValidator
extends Object
implements TokenValidator

This class validates an X.509 V.3 certificate (received as a BinarySecurityToken or an X509Data DOM Element). The cert must be known (or trusted) by the STS crypto object.

Field Summary

Fields

Modifier and Type	Field and Description
static String	BASE64_ENCODING
static String	X509_V3_TYPE

Constructor Summary

Constructors

Constructor and Description
X509TokenValidator()

Method Summary

Modifier and Type	Method and Description
boolean	canHandleToken(ReceivedToken validateTarget) Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.
boolean	canHandleToken(ReceivedToken validateTarget, String realm) Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.
void	setSubjectConstraints(List<String> subjectConstraints) Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate
void	setValidator(org.apache.wss4j.dom.validate.Validator validator) Set the WSS4J Validator instance to use to validate the token.
TokenValidatorResponse	validateToken(TokenValidatorParameters tokenParameters) Validate a Token using the given TokenValidatorParameters.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_V3_TYPE

public static final String X509_V3_TYPE

See Also:

Constant Field Values

BASE64_ENCODING

public static final String BASE64_ENCODING

See Also:

Constant Field Values

Constructor Detail

X509TokenValidator

public X509TokenValidator()

Method Detail

setSubjectConstraints

public void setSubjectConstraints(List<String> subjectConstraints)

Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate

setValidator

public void setValidator(org.apache.wss4j.dom.validate.Validator validator)

Set the WSS4J Validator instance to use to validate the token.

Parameters:

validator - the WSS4J Validator instance to use to validate the token

canHandleToken

public boolean canHandleToken(ReceivedToken validateTarget)

Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument.

Specified by:

canHandleToken in interface TokenValidator

canHandleToken

public boolean canHandleToken(ReceivedToken validateTarget,
                              String realm)

Return true if this TokenValidator implementation is capable of validating the ReceivedToken argument. The realm is ignored in this token Validator.

Specified by:

canHandleToken in interface TokenValidator

validateToken

public TokenValidatorResponse validateToken(TokenValidatorParameters tokenParameters)

Validate a Token using the given TokenValidatorParameters.

Specified by:

validateToken in interface TokenValidator