/**
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.cxf.ws.security.policy;
import java.util.Arrays;
import java.util.List;
import javax.xml.namespace.QName;
import org.apache.cxf.Bus;
import org.apache.cxf.common.injection.NoJSR250Annotations;
import org.apache.cxf.ws.policy.AssertionBuilderLoader;
import org.apache.cxf.ws.policy.AssertionBuilderRegistry;
import org.apache.cxf.ws.policy.PolicyBuilder;
import org.apache.cxf.ws.policy.PolicyInterceptorProviderLoader;
import org.apache.cxf.ws.policy.PolicyInterceptorProviderRegistry;
import org.apache.cxf.ws.policy.builder.primitive.PrimitiveAssertionBuilder;
import org.apache.cxf.ws.security.policy.builders.AlgorithmSuiteBuilder;
import org.apache.cxf.ws.security.policy.builders.AsymmetricBindingBuilder;
import org.apache.cxf.ws.security.policy.builders.ContentEncryptedElementsBuilder;
import org.apache.cxf.ws.security.policy.builders.EncryptedElementsBuilder;
import org.apache.cxf.ws.security.policy.builders.EncryptedPartsBuilder;
import org.apache.cxf.ws.security.policy.builders.HttpsTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.InitiatorTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.IssuedTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.KeyValueTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.LayoutBuilder;
import org.apache.cxf.ws.security.policy.builders.ProtectionTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.RecipientTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.RequiredElementsBuilder;
import org.apache.cxf.ws.security.policy.builders.RequiredPartsBuilder;
import org.apache.cxf.ws.security.policy.builders.SamlTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.SecureConversationTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.SecurityContextTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.SignedElementsBuilder;
import org.apache.cxf.ws.security.policy.builders.SignedPartsBuilder;
import org.apache.cxf.ws.security.policy.builders.SupportingTokens12Builder;
import org.apache.cxf.ws.security.policy.builders.SupportingTokensBuilder;
import org.apache.cxf.ws.security.policy.builders.SymmetricBindingBuilder;
import org.apache.cxf.ws.security.policy.builders.TransportBindingBuilder;
import org.apache.cxf.ws.security.policy.builders.TransportTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.Trust10Builder;
import org.apache.cxf.ws.security.policy.builders.Trust13Builder;
import org.apache.cxf.ws.security.policy.builders.UsernameTokenBuilder;
import org.apache.cxf.ws.security.policy.builders.WSS10Builder;
import org.apache.cxf.ws.security.policy.builders.WSS11Builder;
import org.apache.cxf.ws.security.policy.builders.X509TokenBuilder;
import org.apache.cxf.ws.security.policy.interceptors.HttpsTokenInterceptorProvider;
import org.apache.cxf.ws.security.policy.interceptors.IssuedTokenInterceptorProvider;
import org.apache.cxf.ws.security.policy.interceptors.SecureConversationTokenInterceptorProvider;
import org.apache.cxf.ws.security.policy.interceptors.UsernameTokenInterceptorProvider;
import org.apache.cxf.ws.security.policy.interceptors.WSSecurityInterceptorProvider;
import org.apache.cxf.ws.security.policy.interceptors.WSSecurityPolicyInterceptorProvider;
@NoJSR250Annotations
public final class WSSecurityPolicyLoader implements PolicyInterceptorProviderLoader, AssertionBuilderLoader {
Bus bus;
public WSSecurityPolicyLoader(Bus b) {
bus = b;
registerBuilders();
try {
registerProviders();
} catch (Throwable t) {
//probably wss4j isn't found or something. We'll ignore this
//as the policy framework will then not find the providers
//and error out at that point. If nothing uses ws-securitypolicy
//no warnings/errors will display
}
}
public void registerBuilders() {
AssertionBuilderRegistry reg = bus.getExtension(AssertionBuilderRegistry.class);
if (reg == null) {
return;
}
PolicyBuilder pbuild = bus.getExtension(PolicyBuilder.class);
reg.registerBuilder(new AlgorithmSuiteBuilder());
reg.registerBuilder(new AsymmetricBindingBuilder(pbuild));
reg.registerBuilder(new ContentEncryptedElementsBuilder());
reg.registerBuilder(new EncryptedElementsBuilder());
reg.registerBuilder(new EncryptedPartsBuilder());
reg.registerBuilder(new HttpsTokenBuilder(pbuild));
reg.registerBuilder(new InitiatorTokenBuilder(pbuild));
reg.registerBuilder(new IssuedTokenBuilder(pbuild));
reg.registerBuilder(new LayoutBuilder());
reg.registerBuilder(new ProtectionTokenBuilder(pbuild));
reg.registerBuilder(new RecipientTokenBuilder(pbuild));
reg.registerBuilder(new RequiredElementsBuilder());
reg.registerBuilder(new RequiredPartsBuilder());
reg.registerBuilder(new SamlTokenBuilder(pbuild));
reg.registerBuilder(new SecureConversationTokenBuilder(pbuild));
reg.registerBuilder(new SecurityContextTokenBuilder());
reg.registerBuilder(new SignedElementsBuilder());
reg.registerBuilder(new SignedPartsBuilder());
reg.registerBuilder(new SupportingTokens12Builder(pbuild));
reg.registerBuilder(new SupportingTokensBuilder(pbuild));
reg.registerBuilder(new SymmetricBindingBuilder(pbuild));
reg.registerBuilder(new TransportBindingBuilder(pbuild));
reg.registerBuilder(new TransportTokenBuilder(pbuild));
reg.registerBuilder(new Trust10Builder());
reg.registerBuilder(new Trust13Builder());
reg.registerBuilder(new UsernameTokenBuilder(pbuild));
reg.registerBuilder(new KeyValueTokenBuilder());
reg.registerBuilder(new WSS10Builder());
reg.registerBuilder(new WSS11Builder());
reg.registerBuilder(new X509TokenBuilder(pbuild));
//add generic assertions for these known things to prevent warnings
List<QName> others = Arrays.asList(new QName[] {
SP12Constants.INCLUDE_TIMESTAMP, SP11Constants.INCLUDE_TIMESTAMP,
SP12Constants.ENCRYPT_SIGNATURE, SP11Constants.ENCRYPT_SIGNATURE,
SP12Constants.ONLY_SIGN_ENTIRE_HEADERS_AND_BODY,
new QName(SP11Constants.SP_NS, SP11Constants.ONLY_SIGN_ENTIRE_HEADERS_AND_BODY),
SP12Constants.WSS_X509_V1_TOKEN_10,
SP12Constants.WSS_X509_V1_TOKEN_11,
SP12Constants.WSS_X509_V3_TOKEN_10,
SP12Constants.WSS_X509_V3_TOKEN_11,
SP11Constants.WSS_X509_V1_TOKEN_10,
SP11Constants.WSS_X509_V1_TOKEN_11,
SP11Constants.WSS_X509_V3_TOKEN_10,
SP11Constants.WSS_X509_V3_TOKEN_11,
SP12Constants.WSS_X509_PKCS7_TOKEN_11,
SP12Constants.WSS_X509_PKI_PATH_V1_TOKEN_11,
SP11Constants.WSS_X509_PKCS7_TOKEN_11,
SP11Constants.WSS_X509_PKI_PATH_V1_TOKEN_11,
SP12Constants.REQUIRE_THUMBPRINT_REFERENCE,
SP11Constants.REQUIRE_THUMBPRINT_REFERENCE,
SP12Constants.REQUIRE_DERIVED_KEYS,
SP11Constants.REQUIRE_DERIVED_KEYS,
SP12Constants.REQUIRE_INTERNAL_REFERENCE,
SP11Constants.REQUIRE_INTERNAL_REFERENCE,
SP12Constants.REQUIRE_ISSUER_SERIAL_REFERENCE,
SP11Constants.REQUIRE_ISSUER_SERIAL_REFERENCE,
new QName(SP12Constants.SP_NS, SP12Constants.ENCRYPT_BEFORE_SIGNING),
new QName(SP11Constants.SP_NS, SP11Constants.ENCRYPT_BEFORE_SIGNING),
});
reg.registerBuilder(new PrimitiveAssertionBuilder(others));
}
public void registerProviders() {
//interceptor providers for all of the above
PolicyInterceptorProviderRegistry reg = bus.getExtension(PolicyInterceptorProviderRegistry.class);
if (reg == null) {
return;
}
reg.register(new WSSecurityPolicyInterceptorProvider());
reg.register(new WSSecurityInterceptorProvider());
reg.register(new HttpsTokenInterceptorProvider());
reg.register(new IssuedTokenInterceptorProvider());
reg.register(new UsernameTokenInterceptorProvider(bus));
reg.register(new SecureConversationTokenInterceptorProvider());
}
}