picketlink/federation — pull request #157 by aljacinto (2013-03-20 02:53:11+00:00)
Title: SAML 1.1 Post Profile

These changes are for supporting SAML 1.1 Post Profile. If approved, I will add/change the picketlink-quickstarts and work on the signature support as well. Thanks.

picketlink-bindings/picketlink-tomcat-common/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/AbstractIDPValve.java:

- Put an end point where the SAMLResponse is going to be posted.
- Make target as the final destination (RelayState in SAMLv2).
- Added confirmation method in SubjectConfirmation per the standard post
profile.
- Set the recipient in the SAML11Response again per the standard.
- Use the strict post binding flag for post binding requested of the
holder. With this, if strict post binding flag is false then it will be
just the redirect (GET).

picketlink-core/src/main/java/org/picketlink/identity/federation/core/saml/v1/SAML11Constants.java
- Added constant for end point

picketlink-core/src/main/java/org/picketlink/identity/federation/core/saml/v2/holders/DestinationInfoHolder.java
- Added target property and corresponding constructor and getter

picketlink-core/src/main/java/org/picketlink/identity/federation/web/util/IDPWebRequestUtil.java
- Process the target property
- Changed the constructor to include target property
- Add builder method for target property

picketlink-core/src/main/java/org/picketlink/identity/federation/web/util/PostBindingUtil.java
- If the holder contains target then it will use target instead of
relayState.

picketlink-bindings/picketlink-tomcat5/src/main/java/org/picketlink/identity/federation/bindings/tomcat/sp/SAML11SPPostFormAuthenticator.java
- SP Authenticator for handling post changes from IdP