org.opensaml.profile.action.impl

Class HttpServletRequestMessageChannelSecurity

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.impl.AbstractMessageChannelSecurity

org.opensaml.profile.action.impl.HttpServletRequestMessageChannelSecurity

All Implemented Interfaces:

net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.DestructableComponent, net.shibboleth.utilities.java.support.component.InitializableComponent, ProfileAction

public class HttpServletRequestMessageChannelSecurity
extends AbstractMessageChannelSecurity

Profile action which populates a MessageChannelSecurityContext based on a HttpServletRequest.

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	defaultPortInsecure Flag controlling whether traffic on the default TLS port is "secure".

Constructor Summary

Constructors

Constructor and Description
HttpServletRequestMessageChannelSecurity() Constructor.

Method Summary

Modifier and Type	Method and Description
protected void	doExecute(ProfileRequestContext profileRequestContext) Performs this action.
protected void	doInitialize()
void	setDefaultPortInsecure(boolean flag) Set whether traffic on the default TLS port is "secure" for the purposes of this action.

Methods inherited from class org.opensaml.profile.action.impl.AbstractMessageChannelSecurity

doPreExecute, getParentContext, setParentContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

defaultPortInsecure

private boolean defaultPortInsecure

Flag controlling whether traffic on the default TLS port is "secure".

Constructor Detail

HttpServletRequestMessageChannelSecurity

public HttpServletRequestMessageChannelSecurity()

Constructor.

Method Detail

setDefaultPortInsecure

public void setDefaultPortInsecure(boolean flag)

Set whether traffic on the default TLS port is "secure" for the purposes of this action.

Defaults to "true"

Ordinarily TLS is considered a "secure" channel, but traffic to a default port meant for browser access tends to rely on server certificates that are unsuited to secure messaging use cases. This flag allows software layers to recognize traffic on this port as "insecure" and needing additional security measures.

Parameters:

flag - flag to set

doInitialize

protected void doInitialize()
                     throws net.shibboleth.utilities.java.support.component.ComponentInitializationException

Overrides:

doInitialize in class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

Throws:

net.shibboleth.utilities.java.support.component.ComponentInitializationException

doExecute

protected void doExecute(ProfileRequestContext profileRequestContext)

Performs this action. Actions must override this method to perform their work.

Overrides:

doExecute in class AbstractProfileAction

Parameters:

profileRequestContext - the current IdP profile request context