electric.soap.security.guards
Class SignatureGuard

java.lang.Object
  electric.soap.security.guards.SignatureGuard

All Implemented Interfaces:

IEXMLLoggingConstants, IGLUELoggingConstants, ILoggingConstants, ISOAPConstants, IWSSConstants, IWSSGuard

public class SignatureGuard

extends java.lang.Object

implements IWSSGuard, ISOAPConstants, IWSSConstants, IGLUELoggingConstants

SignatureGuard tests if certains parts of the soap message are signed by a trusted certificate.

Author:

webMethods

Field Summary

Fields inherited from interface electric.soap.ISOAPConstants

ACTOR, ASYNC, BODY, DETAIL, ENCODING_STYLE, ENVELOPE, EXCEPTION, FAULT, FAULT_ACTOR, FAULT_CODE, FAULT_STRING, GET_SOAP_ACTOR, GET_SOAP_CODE, HEADER, MUST_UNDERSTAND, NEXT_ACTOR, OPTIMIZED_HEADER, SET_SOAP_ACTOR, SET_SOAP_CODE, SET_SOAP_DETAIL, SOAP_ACTION_HEADER, SOAP_BINDING, SOAP_ENCODING, SOAP_ENCODING_PREFIX, SOAP_ENVELOPE, SOAP_HTTP_TRANSPORT, SOAP_PREFIX, SOAP11_BINDING, SOAP11_ENCODING, SOAP11_ENVELOPE, SOAP12, SOAP12_BINDING, SOAP12_ENCODING, SOAP12_ENVELOPE, SOAP12_HTTP_CONTENT_TYPE, STACKTRACE, TME_PREFIX, UNDERSTOOD, XSD_PREFIX, XSI_PREFIX, XSI_SUFFIX

Fields inherited from interface electric.soap.security.IWSSConstants

PASSWORD_DIGEST, PASSWORD_TEXT, SECURITY, SECURITY_TOKEN_REFERENCE, URI_ATTRIBUTE, WSSE_NAMESPACE, WSSE_PREFIX, WSU_NAMESPACE, WSU_PREFIX, X509_ENCODING_TYPE

Fields inherited from interface electric.glue.IGLUELoggingConstants

CLUSTER_DEBUG_EVENT, CLUSTER_EVENT, CONSOLE_DEBUG_EVENT, DEPLOY_EVENT, DETECTORS_EVENT, HTTP_EVENT, JMS_EVENT, REBINDING_EVENT, SECURITY_DEBUG_EVENT, SECURITY_DETAIL_EVENT, SERVLET_EVENT, SOAP_EVENT

Fields inherited from interface electric.xml.IEXMLLoggingConstants

MAPPING_EVENT, SCHEMA_EVENT

Fields inherited from interface electric.util.log.ILoggingConstants

CLASSLOADER_EVENT, COMMAND_EVENT, COMMENT_EVENT, CONFIG_EVENT, DEBUG_EVENT, ELECTRIC_LOGGING_PROPERTY, ERROR_EVENT, EXCEPTION_EVENT, FILE_EVENT, LICENSE_EVENT, RESOURCES_EVENT, SECURITY_EVENT, SHUTDOWN_EVENT, SOURCE_EVENT, SQL_EVENT, STARTUP_EVENT, WARNING_EVENT

Constructor Summary

SignatureGuard(WSSSignature signatureSpec)

Method Summary

boolean

authorize(SOAPMessage message, java.util.Vector signatures, java.util.Vector encryptions, java.util.Vector principalList, java.util.Vector authorizationCredentials) todo: confirm certificate is actually trusted

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SignatureGuard

public SignatureGuard(WSSSignature signatureSpec)

Parameters:

signatureSpec -

Method Detail

authorize

public boolean authorize(SOAPMessage message,
                         java.util.Vector signatures,
                         java.util.Vector encryptions,
                         java.util.Vector principalList,
                         java.util.Vector authorizationCredentials)

todo: confirm certificate is actually trusted

Specified by:

authorize in interface IWSSGuard

Parameters:

message -

signatures -

principalList -

authorizationCredentials -

Returns:

true if this guard authorizes the message.