org.opensaml.security.trust.impl

Class ChainingTrustEngine<TokenType>

java.lang.Object

org.opensaml.security.trust.impl.ChainingTrustEngine<TokenType>

Type Parameters:

TokenType - the token type this trust engine evaluates

All Implemented Interfaces:

TrustEngine<TokenType>

public class ChainingTrustEngine<TokenType>
extends java.lang.Object
implements TrustEngine<TokenType>

Evaluate a token in sequence using a chain of subordinate trust engines. If the token may be established as trusted by any of the subordinate engines, the token is considered trusted. Otherwise it is considered untrusted.

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.List<TrustEngine<? super TokenType>>	engines The chain of subordinate trust engines.
private org.slf4j.Logger	log Class logger.

Constructor Summary

Constructors

Constructor and Description
ChainingTrustEngine(java.util.List<TrustEngine<? super TokenType>> chain) Constructor.

Method Summary

Modifier and Type	Method and Description
java.util.List<TrustEngine<? super TokenType>>	getChain() Get the list of configured trust engines which constitute the trust evaluation chain.
boolean	validate(TokenType token, net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria) Validates the token against trusted information obtained in an implementation-specific manner.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

engines

@Nonnull
 @NonnullElements
private java.util.List<TrustEngine<? super TokenType>> engines

The chain of subordinate trust engines.

Constructor Detail

ChainingTrustEngine

public ChainingTrustEngine(@Nonnull
                           java.util.List<TrustEngine<? super TokenType>> chain)

Constructor.

Parameters:

chain - the list of trust engines in the chain

Method Detail

getChain

@Nonnull
 @NonnullElements
 @Unmodifiable
 @NotLive
public java.util.List<TrustEngine<? super TokenType>> getChain()

Get the list of configured trust engines which constitute the trust evaluation chain.

Returns:

the modifiable list of trust engines in the chain

validate

public boolean validate(@Nonnull
                        TokenType token,
                        @Nullable
                        net.shibboleth.utilities.java.support.resolver.CriteriaSet trustBasisCriteria)
                 throws SecurityException

Validates the token against trusted information obtained in an implementation-specific manner.

Specified by:

validate in interface TrustEngine<TokenType>

Parameters:

token - security token to validate

trustBasisCriteria - criteria used to describe and/or resolve the information which serves as the basis for trust evaluation

Returns:

true iff the token is trusted and valid

Throws:

SecurityException - thrown if there is a problem validating the security token