Java Attribute.getAttributeValues方法代码示例

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
private Map<String, String> getAssertionStatements(Assertion assertion) {

        Map<String, String> results = new HashMap<String, String>();

        if (assertion != null && assertion.getAttributeStatements() != null) {

            List<AttributeStatement> attributeStatementList = assertion.getAttributeStatements();


            for (AttributeStatement statement : attributeStatementList) {
                List<Attribute> attributesList = statement.getAttributes();
                for (Attribute attribute : attributesList) {
                    List<String> valueList = new ArrayList<>();
                    for (XMLObject xmlObject : attribute.getAttributeValues()) {
                        valueList.add(xmlObject.getDOM().getTextContent());
                    }
                    String value = StringUtils.join(valueList, ",");
                    results.put(attribute.getName(), value);
                }
            }

        }
        return results;
    }
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Get a list of string values for each value under a named Attribute in an Assertion from the SAML Response
 *
 * @param pSamlResponse Response with one assertion in it containing 0 or more attributes
 * @param pAttributeName Name of the attribute to get a list of values from
 * @return List of values for SAMLResponse/Assertion/Attribute[name=pAttributeName]
 */
private List<String> getAssertionAttributeStringValueList(Response pSamlResponse, String pAttributeName) {
  List<Attribute> lAttributesList = getResponseAttributes(pSamlResponse);

  for (Attribute lAttribute : lAttributesList) {
    if (!pAttributeName.equals(lAttribute.getName())) {
      continue;
    }
    List<XMLObject> lAttributeValues = lAttribute.getAttributeValues();

    return lAttributeValues.stream()
      // This could deserialise lXMLObject into a typed attribute but all attribute values we're interested in should just have plain text content
      .map(lAttrVal -> lAttrVal.getDOM().getTextContent())
      .collect(Collectors.toList());
  }

  return Collections.emptyList();
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
public static String getValueFromAttributeStatements(final List<AttributeStatement> attributeStatements, final String attributeKey) {
    if (attributeStatements == null || attributeStatements.size() < 1 || attributeKey == null) {
        return null;
    }
    for (AttributeStatement attributeStatement : attributeStatements) {
        if (attributeStatement == null || attributeStatements.size() < 1) {
            continue;
        }
        for (Attribute attribute : attributeStatement.getAttributes()) {
            if (attribute.getAttributeValues() != null && attribute.getAttributeValues().size() > 0) {
                String value = attribute.getAttributeValues().get(0).getDOM().getTextContent();
                s_logger.debug("SAML attribute name: " + attribute.getName() + " friendly-name:" + attribute.getFriendlyName() + " value:" + value);
                if (attributeKey.equals(attribute.getName()) || attributeKey.equals(attribute.getFriendlyName())) {
                    return value;
                }
            }
        }
    }
    return null;
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Add each assertion attributes and its values in the authentication data object.
 * 
 * @param assertion
 *            the assertion
 * @param authn
 *            the authentication data object
 * @throws DecryptionException
 * @throws SamlSecurityException
 */
protected void processAuthnAttributes(final Assertion assertion, final IInternalAuthentication authn)
		throws SamlSecurityException, DecryptionException {
	final List<Attribute> attributes = this.retrieveAttributes(assertion);
	if (!CollectionUtils.isEmpty(attributes)) {
		for (final Attribute attr : attributes) {
			if (attr != null) {
				final List<String> values = new ArrayList<String>();
				for (final XMLObject value : attr.getAttributeValues()) {
					if (value != null) {
						final String textContent = value.getDOM().getTextContent();
						if (StringUtils.hasText(textContent)) {
							values.add(textContent);
						}
					}
				}

				final String attrName = attr.getName();
				if (!CollectionUtils.isEmpty(values)) {
					authn.addAttribute(attrName, values);
				}
			}
		}
	}
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Test unmarshalling an attribute holding a CurrentAddress type. Example is from eIDAS specs.
 * <p>
 * The example contains the Base64-encoding of the following XML-snippet:
 * 
 * <pre>
 *  <eidas:LocatorDesignator>22</eidas:LocatorDesignator>
 *  <eidas:Thoroughfare>Arcacia Avenue</eidas:Thoroughfare>
 *  <eidas:PostName>London</eidas:PostName>
*   <eidas:PostCode>SW1A 1AA</eidas:Postcode>
 * </pre>
 * </p>
 * 
 * @throws Exception
 *           for errors.
 */
@Test
public void testUnmarshallExampleAttribute() throws Exception {

  final String xml = "<saml:Attribute FriendlyName=\"CurrentAddress\" Name=\"http://eidas.europa.eu/attributes/naturalperson/CurrentAddress\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">"
      + "<saml:AttributeValue xmlns:eidas=\"http://eidas.europa.eu/attributes/naturalperson\" xsi:type=\"eidas:CurrentAddressType\">"
      + "PGVpZGFzOkxvY2F0b3JEZXNpZ25hdG9yPjIyPC9laWRhczpMb2NhdG9yRGVzaWduYX\n"
      + "Rvcj48ZWlkYXM6VGhvcm91Z2hmYXJlPkFyY2FjaWEgQXZlbnVlPC9laWRhczpUaG9y\n"
      + "b3VnaGZhcmU+DQo8ZWlkYXM6UG9zdE5hbWU+TG9uZG9uPC9laWRhczpQb3N0TmFtZT\n"
      + "4NCjxlaWRhczpQb3N0Q29kZT5TVzFBIDFBQTwvZWlkYXM6UG9zdENvZGU+"
      + "</saml:AttributeValue>"
      + "</saml:Attribute>";

  Document doc = Configuration.getParserPool().parse(new ByteArrayInputStream(xml.getBytes("UTF-8")));
  Element elm = doc.getDocumentElement();

  Attribute attribute = OpenSAMLTestBase.unmarshall(elm, Attribute.class);
  Assert.assertNotNull(attribute);
  Assert.assertEquals(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_NAME, attribute.getName());
  Assert.assertEquals(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_FRIENDLY_NAME, attribute.getFriendlyName());

  List<XMLObject> values = attribute.getAttributeValues();
  Assert.assertTrue(values.size() == 1);
  Assert.assertTrue(values.get(0) instanceof CurrentAddressType);
  CurrentAddressType address = (CurrentAddressType) values.get(0);
  Assert.assertEquals("22", address.getLocatorDesignator());
  Assert.assertEquals("Arcacia Avenue", address.getThoroughfare());
  Assert.assertEquals("London", address.getPostName());
  Assert.assertEquals("SW1A 1AA", address.getPostCode());
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Test that creates an attribute and places a CurrentAddessType as a value.
 * 
 * @throws Exception
 *           for errors
 */
@Test
public void testAttributeCreate() throws Exception {

  Attribute attribute = OpenSAMLTestBase.createSamlObject(Attribute.class, Attribute.DEFAULT_ELEMENT_NAME);
  attribute.getNamespaceManager().registerNamespaceDeclaration(new Namespace(EidasConstants.EIDAS_NP_NS, "eidas"));
  attribute.setName(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_NAME);
  attribute.setFriendlyName(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_FRIENDLY_NAME);
  attribute.setNameFormat(Attribute.URI_REFERENCE);

  XMLObjectBuilder<CurrentAddressType> builder = OpenSAMLTestBase.getBuilder(CurrentAddressType.TYPE_NAME);
  CurrentAddressType address = builder.buildObject(AttributeValue.DEFAULT_ELEMENT_NAME, 
    new QName(EidasConstants.EIDAS_NP_NS, CurrentAddressType.TYPE_NAME.getLocalPart(), "eidas"));
  fill(address);

  attribute.getAttributeValues().add(address);

  Element attrElement = OpenSAMLTestBase.marshall(attribute);

  System.out.println(XMLHelper.prettyPrintXML(attrElement));

  // Make sure we inserted the correct namespace prefix while marshalling the CurrentAddressType
  Assert.assertTrue((new String(Base64.decode(attrElement.getFirstChild().getFirstChild().getNodeValue()))).startsWith("<eidas:"));

  // Unmarshall
  Attribute attribute2 = OpenSAMLTestBase.unmarshall(attrElement, Attribute.class);

  Assert.assertNotNull(attribute2);
  Assert.assertEquals(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_NAME, attribute2.getName());
  Assert.assertEquals(AttributeConstants.EIDAS_CURRENT_ADDRESS_ATTRIBUTE_FRIENDLY_NAME, attribute2.getFriendlyName());

  List<XMLObject> values = attribute.getAttributeValues();
  Assert.assertTrue(values.size() == 1);
  Assert.assertTrue(values.get(0) instanceof CurrentAddressType);
  CurrentAddressType address2 = (CurrentAddressType) values.get(0);
  verify(address, address2);
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
private String getValue(Attribute attribute) {
    List<XMLObject> attributeValues = attribute.getAttributeValues();
    if (attributeValues == null || attributeValues.size() == 0) {
        return null;
    }
    XMLObject xmlValue = attributeValues.iterator().next();
    return getString(xmlValue);
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Get a list of string values for each value under a named Attribute in an Assertion from the SAML Response
 *
 * @param pSamlResponse Response with one assertion in it containing 0 or more attributes
 * @param pAttributeName Name of the attribute to get a list of values from
 * @return List of values for SAMLResponse/Assertion/Attribute[name=pAttributeName]
 */
private String getAssertionAttributeStringValue(Response pSamlResponse, String pAttributeName) {
  List<Attribute> lAttributesList = getResponseAttributes(pSamlResponse);

  for (Attribute lAttribute : lAttributesList) {
    if (!pAttributeName.equals(lAttribute.getName())) {
      continue;
    }
    List<XMLObject> lAttributeValues = lAttribute.getAttributeValues();

    return lAttributeValues.get(0).getDOM().getTextContent();
  }

  return null;
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    if (configurationMediator.isSungardasSSO()) {
        Authentication result = super.authenticate(authentication);

        SAMLCredential credential = (SAMLCredential) result.getCredentials();
        Attribute attribute = credential.getAttribute(ALLOWED_LIST_ATTRIBUTE_NAME);
        if (attribute != null) {
            for (XMLObject object : attribute.getAttributeValues()) {
                String value = ((XSStringImpl) object).getValue();
                if (ADMIN_WILDCARD_EXP.equals(value)) {
                    LOG.warn("User ({}) has admin access, instance UUID: {}", credential.getNameID().getValue(), configurationMediator.getUUID());
                    return result;
                }
                if (configurationMediator.getUUID().equals(value)) {
                    return result;
                }
            }
        }

        LOG.error("User ({}) has not allowed to use this instance with UUID: {}", credential.getNameID().getValue(), configurationMediator.getUUID());

        userService.removeUser(result.getName());

        throw new AuthenticationServiceException("Access denied");
    } else {
        return super.authenticate(authentication);
    }
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
/**
 * Get the username from the SAML2 Assertion
 *
 * @param assertion SAML2 assertion
 * @return username
 */
public static String getUsernameFromAssertion(Assertion assertion) {

    String loginAttributeName = getLoginAttributeName();

    if (loginAttributeName != null) {
        // There can be multiple AttributeStatements in Assertion
        List<AttributeStatement> attributeStatements = assertion
                .getAttributeStatements();
        if (attributeStatements != null) {
            for (AttributeStatement attributeStatement : attributeStatements) {
                // There can be multiple Attributes in a
                // attributeStatement
                List<Attribute> attributes = attributeStatement
                        .getAttributes();
                if (attributes != null) {
                    for (Attribute attribute : attributes) {
                        String attributeName = attribute.getDOM()
                                .getAttribute("Name");
                        if (attributeName.equals(loginAttributeName)) {
                            List<XMLObject> attributeValues = attribute
                                    .getAttributeValues();
                            // There can be multiple attribute values in
                            // a attribute, but get the first one
                            return attributeValues.get(0).getDOM()
                                    .getTextContent();
                        }
                    }
                }
            }
        }
    }
    return assertion.getSubject().getNameID().getValue();
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
private String getValue(final Attribute attr) {
	if (attr == null) {
		return null;
	}
	
	if (attr.getAttributeValues() != null) {
		return getAttrValue(attr.getAttributeValues());
	}
	
	return null;
}
 

import org.opensaml.saml2.core.Attribute; //导入方法依赖的package包/类
private Collection<GrantedAuthority> roleRelatedAttributeToGrantedAuthorities( Attribute roleRelatedAttribute ) {

    Collection<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();

    if( roleRelatedAttribute != null && roleRelatedAttribute.hasChildren() ){

      List<XMLObject> roleXmlValues = roleRelatedAttribute.getAttributeValues();

      for( XMLObject xmlValue : roleXmlValues ) {

        if( xmlValue == null ){
          logger.warn( "Empty value for attribute '" + roleRelatedAttribute + "'" );
          continue;
        }

        String sanitizedValue = "";

        if( xmlValue instanceof XSStringImpl ) {
          sanitizedValue = ( ( XSStringImpl ) xmlValue ).getValue();
        } else if( xmlValue instanceof XSAnyImpl ) {
          sanitizedValue = ( ( XSAnyImpl ) xmlValue ).getTextContent();
        } else {
          logger.warn( "Unknown attribute type: " + xmlValue.toString() );
          continue;
        }

        // if there's a prefix configured, check it ( and trim it )
        if( getRoleRelatedAttributePrefix() != null && !getRoleRelatedAttributePrefix().isEmpty()
            && sanitizedValue.startsWith( getRoleRelatedAttributePrefix() ) ){

          sanitizedValue = sanitizedValue.replace( getRoleRelatedAttributePrefix(), "" );
        }

        // finally, add it to the authorities list as a granted authority
        if( sanitizedValue != null && !sanitizedValue.isEmpty() ) {
          authorities.add( new SimpleGrantedAuthority( sanitizedValue ) );
        }
      }
    }

    return authorities;
  }