org.apache.cxf.rt.security.saml.xacml2

Class XACMLAuthorizingInterceptor

java.lang.Object

org.apache.cxf.phase.AbstractPhaseInterceptor<org.apache.cxf.message.Message>

org.apache.cxf.rt.security.saml.xacml2.AbstractXACMLAuthorizingInterceptor

org.apache.cxf.rt.security.saml.xacml2.XACMLAuthorizingInterceptor

All Implemented Interfaces:

org.apache.cxf.interceptor.Interceptor<org.apache.cxf.message.Message>, org.apache.cxf.phase.PhaseInterceptor<org.apache.cxf.message.Message>

public class XACMLAuthorizingInterceptor
extends AbstractXACMLAuthorizingInterceptor

An interceptor to perform an XACML 2.0 authorization request to a remote PDP using OpenSAML, and make an authorization decision based on the response. It takes the principal and roles from the SecurityContext, and uses the XACMLRequestBuilder to construct an XACML Request statement.

Constructor Summary

Constructors

Constructor and Description
XACMLAuthorizingInterceptor(PolicyDecisionPoint pdp)

Method Summary

Modifier and Type	Method and Description
protected org.opensaml.xacml.ctx.ResponseType	performRequest(org.opensaml.xacml.ctx.RequestType request, org.apache.cxf.message.Message message)

Methods inherited from class org.apache.cxf.rt.security.saml.xacml2.AbstractXACMLAuthorizingInterceptor

authorize, getRequestBuilder, handleMessage, handleObligations, setRequestBuilder

Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor

addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XACMLAuthorizingInterceptor

public XACMLAuthorizingInterceptor(PolicyDecisionPoint pdp)

Method Detail

performRequest

protected org.opensaml.xacml.ctx.ResponseType performRequest(org.opensaml.xacml.ctx.RequestType request,
                                                             org.apache.cxf.message.Message message)
                                                      throws Exception

Specified by:

performRequest in class AbstractXACMLAuthorizingInterceptor

Throws:

Exception