Skip navigation links

oracle.wsm.security.policy.scenario.policycompliance
Class AbstractSignedElementsAndPartsComplianceHandler

java.lang.Object
oracle.wsm.security.policy.scenario.policycompliance.AbstractSignedElementsAndPartsComplianceHandler

All Implemented Interfaces:

IPolicyCompliance

Direct Known Subclasses:

NEncryptedElementsAndPartsComplianceHandler, NSignedElementsAndPartsComplianceHandler

public abstract class AbstractSignedElementsAndPartsComplianceHandler

extends Object

implements IPolicyCompliance

Constructor Summary

AbstractSignedElementsAndPartsComplianceHandler()

Method Summary

abstract Compliance	checkCompliance(Map<String,Object> arguments)
protected List<? extends NodeWrapper.IElementsAttachments>	getAllMatchingHeadersForNamespace(String namespace, javax.xml.soap.SOAPMessage soapMessage) This method will take care of the situation when there is no local name for header and only namespace is provided.
protected boolean	getMatchingElement(Node signedNode, NodeWrapper.IElementsAttachments elementFromPolicy)
protected boolean	getMatchingElement(Node signedNode, NodeWrapper.IElementsAttachments elementFromPolicy, javax.xml.soap.SOAPMessage soapMessage, oracle.security.xmlsec.wss.WSSecurity wssSec) This method will implement depth-first search semantics to check whether the Elements from the policy is actually the same node or a child of the signed node from the soap message
protected List<? extends NodeWrapper.IElementsAttachments>	getSignatureConfirmationsInResponse(oracle.security.xmlsec.wss.WSSecurity wssSec)
protected boolean	isAttachmentProtected(javax.xml.soap.AttachmentPart attachmentPart, NodeWrapper.IElementsAttachments elementFromPolicy)
protected boolean	isIgnorableElementPresentInSoap(javax.xml.soap.SOAPMessage soapMessage, NodeWrapper.Elements elementFromPolicy) This method checks whether or not a NodeWrapper.Elements is presentin the soap message.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractSignedElementsAndPartsComplianceHandler

public AbstractSignedElementsAndPartsComplianceHandler()

Method Detail

checkCompliance

public abstract Compliance checkCompliance(Map<String,Object> arguments)

Specified by:

checkCompliance in interface IPolicyCompliance

getMatchingElement

protected boolean getMatchingElement(Node signedNode,
                                     NodeWrapper.IElementsAttachments elementFromPolicy,
                                     javax.xml.soap.SOAPMessage soapMessage,
                                     oracle.security.xmlsec.wss.WSSecurity wssSec)

This method will implement depth-first search semantics to check whether the Elements from the policy is actually the same node or a child of the signed node from the soap message

Parameters:

signedNode - This represents the node subtree that was signed.

requiredElementFromPolicy - This is an Elements object.

Returns:

A boolean indicating whether the node is same or child node.

getMatchingElement

protected boolean getMatchingElement(Node signedNode,
                                     NodeWrapper.IElementsAttachments elementFromPolicy)

getAllMatchingHeadersForNamespace

protected List<? extends NodeWrapper.IElementsAttachments> getAllMatchingHeadersForNamespace(String namespace,
                                                                                             javax.xml.soap.SOAPMessage soapMessage)
                                                                                      throws SecurityException

This method will take care of the situation when there is no local name for header and only namespace is provided. It will fetch a list of all matching header elements with this namespace.

Throws:

SecurityException

isIgnorableElementPresentInSoap

protected boolean isIgnorableElementPresentInSoap(javax.xml.soap.SOAPMessage soapMessage,
                                                  NodeWrapper.Elements elementFromPolicy)

This method checks whether or not a NodeWrapper.Elements is presentin the soap message. The policy is to check for policy compliance if an only if the said element is present inside the SOAPMessage

Core soap elements like Envelope, Body, Header if configured in the policy are safely ignored in the following logic.

Parameters:

soapMessage - An instance of the SOAPMessage object

elementFromPolicy - An instance of NodeWrapper.Elements class

isAttachmentProtected

protected boolean isAttachmentProtected(javax.xml.soap.AttachmentPart attachmentPart,
                                        NodeWrapper.IElementsAttachments elementFromPolicy)

getSignatureConfirmationsInResponse

protected List<? extends NodeWrapper.IElementsAttachments> getSignatureConfirmationsInResponse(oracle.security.xmlsec.wss.WSSecurity wssSec)

Skip navigation links