saml20-clj.sp.response — metabase/saml20-clj 2.0.0-alpha2

Code for parsing the XML response (as a String)from the IdP to an OpenSAML Response, and for basic operations like validating the signature and reading assertions.

Assertion->map clj

(Assertion->map assertion)

Returns the attributes and the 'audiences' for the given SAML assertion

assertion->subject-confirmation-datas clj

(assertion->subject-confirmation-datas assertion)

assertions clj

(assertions decrypted-response)

(assertions possibly-encrypted-response sp-private-key)

Returns the assertions (encrypted or not) of a SAML Response object

clone-response clj

(clone-response response)

Clone an OpenSAML response object.

decrypt-response clj

(decrypt-response response sp-private-key)

Decrypt response using sp-private-key if it has encrypted Assertions. If it does not have encrypted assertions, return response as-is.

default-validation-options clj

opensaml-assertions clj

(opensaml-assertions response)

response-status clj

(response-status response)

Parses and returns information about the status (i.e. successful or not), the version, addressing info etc. of the SAML response

Check the javadoc of OpenSAML at:

https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/org/opensaml/opensaml/2.5.3/opensaml-2.5.3-javadoc.jar/!/index.html

saml2-attr->name clj

subject clj

(subject assertion)

subject-confirmations clj

(subject-confirmations subject)

subject-data clj

(subject-data subject-confirmation)

validate clj

(validate response idp-cert sp-private-key)

(validate response idp-cert sp-private-key options)

Validate response. Returns decrypted response if valid.

validate-assertion clj multimethod

(validate-assertion validation response options)

Perform a validation operation on an Assertion.

validate-confirmation-datas clj macro

(validate-confirmation-datas [data-binding assertion] & body)

validate-response clj multimethod

(validate-response validation
                   possibly-encrypted-response
                   unencryped-response
                   options)

Perform a validation operation on a Response.