jboss-identity-commits
February 2009
jboss-identity-commits@lists.jboss.org
- 1 participants
- 92 discussions
JBoss Identity SVN: r271 - in idm/trunk: idm/src/main/java/org/jboss/identity/idm/impl/repository and 2 other directories.
by jboss-identity-commits＠lists.jboss.org
Author: bdaw
Date: 2009-02-02 08:39:43 -0500 (Mon, 02 Feb 2009)
New Revision: 271
Added:
idm/trunk/idm/src/test/resources/jboss-cache-config.xml
idm/trunk/parent/logging.properties
Removed:
idm/trunk/idm/src/test/resources/logging.properties
Modified:
idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/IdentityStoreCacheSupport.java
idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/JBossCacheIdentityStoreWrapper.java
idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/repository/AbstractIdentityStoreRepository.java
idm/trunk/idm/src/test/resources/organization-test-config.xml
idm/trunk/parent/pom.xml
Log:
- add option to wrap any store in repository with cache
Modified: idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/IdentityStoreCacheSupport.java
===================================================================
--- idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/IdentityStoreCacheSupport.java 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/IdentityStoreCacheSupport.java 2009-02-02 13:39:43 UTC (rev 271)
@@ -317,7 +317,7 @@
if (getLog().isLoggable(Level.FINER))
{
- getLog().finer(this.toString() + "IdentityObject storred in cache: " + io.getName() + "; " + io.getId());
+ getLog().finer(this.toString() + "IdentityObject stored in cache: " + io.getName() + "; " + io.getId());
}
}
@@ -350,7 +350,7 @@
if (getLog().isLoggable(Level.FINER))
{
- getLog().finer(this.toString() + "IdentityObject storred in cache with attributes map: " + io.getName() + "; " + io.getId()
+ getLog().finer(this.toString() + "IdentityObject stored in cache with attributes map: " + io.getName() + "; " + io.getId()
+ "; type=" + io.getIdentityType().getName() );
}
}
Modified: idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/JBossCacheIdentityStoreWrapper.java
===================================================================
--- idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/JBossCacheIdentityStoreWrapper.java 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/cache/JBossCacheIdentityStoreWrapper.java 2009-02-02 13:39:43 UTC (rev 271)
@@ -48,6 +48,7 @@
import java.util.Collection;
import java.util.Set;
import java.util.logging.Logger;
+import java.io.File;
/**
* IdentityStore implementation that wraps another IdentityStore and uses JBossCache to cache results.
@@ -71,26 +72,16 @@
// with many updates it can add additional cost
private boolean reloadAttributesToCacheOnUpdate = true;
- public JBossCacheIdentityStoreWrapper(IdentityStore identityStore)
+ public JBossCacheIdentityStoreWrapper(IdentityStore identityStore, String cacheConfigurationFile) throws IdentityException
{
this.identityStore = identityStore;
-
Configuration config = new Configuration();
-
-// config.setTransactionManagerLookupClass( GenericTransactionManagerLookup.class.getName() );
-//
-// config.setIsolationLevel(IsolationLevel.READ_COMMITTED);
-//
-// config.setCacheMode(Configuration.CacheMode.LOCAL);
-//
-// config.setLockAcquisitionTimeout(15000);
-
CacheFactory factory = new DefaultCacheFactory();
- this.cache = factory.createCache(config);
+ this.cache = factory.createCache(cacheConfigurationFile);
this.cache.start();
Modified: idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/repository/AbstractIdentityStoreRepository.java
===================================================================
--- idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/repository/AbstractIdentityStoreRepository.java 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/idm/src/main/java/org/jboss/identity/idm/impl/repository/AbstractIdentityStoreRepository.java 2009-02-02 13:39:43 UTC (rev 271)
@@ -31,12 +31,14 @@
import org.jboss.identity.idm.spi.configuration.metadata.IdentityRepositoryConfigurationMetaData;
import org.jboss.identity.idm.spi.configuration.metadata.IdentityStoreMappingMetaData;
import org.jboss.identity.idm.exception.IdentityException;
+import org.jboss.identity.idm.impl.cache.JBossCacheIdentityStoreWrapper;
import java.util.Set;
import java.util.Map;
import java.util.HashSet;
import java.util.List;
import java.util.HashMap;
+import java.io.File;
/**
* @author <a href="mailto:boleslaw.dawidowicz at redhat.com">Boleslaw Dawidowicz</a>
@@ -52,8 +54,12 @@
protected IdentityStore defaultIdentityStore;
protected AttributeStore defaultAttributeStore;
-
+ public static final String CACHE_OPTION = "cache";
+
+ public static final String CACHE_CONFIG_FILE_OPTION = "cache.config-file";
+
+
public void bootstrap(IdentityRepositoryConfigurationMetaData configurationMD,
Map<String, IdentityStore> bootstrappedIdentityStores,
Map<String, AttributeStore> bootstrappedAttributeStores) throws IdentityException
@@ -70,6 +76,28 @@
if (isId != null && bootstrappedIdentityStores.keySet().contains(isId))
{
defaultIdentityStore = bootstrappedIdentityStores.get(isId);
+
+ String cacheOption = configurationMD.getOptionSingleValue(CACHE_OPTION);
+
+ if (cacheOption != null && cacheOption.equalsIgnoreCase("true"))
+ {
+ String cacheConfig = configurationMD.getOptionSingleValue(CACHE_CONFIG_FILE_OPTION);
+
+ if (cacheConfig == null)
+ {
+ throw new IdentityException(CACHE_CONFIG_FILE_OPTION + " is missing in the repository configuration");
+ }
+
+ File cacheConfigFile = new File(cacheConfig);
+
+ if(!cacheConfigFile.exists())
+ {
+ throw new IdentityException("JBoss Cache config file specified in option \"" + CACHE_CONFIG_FILE_OPTION +
+ "\" doesn't exist: " + cacheConfig);
+ }
+
+ defaultIdentityStore = new JBossCacheIdentityStoreWrapper(defaultIdentityStore, cacheConfig);
+ }
}
for (IdentityStoreMappingMetaData identityStoreMappingMetaData : configurationMD.getIdentityStoreToIdentityObjectTypeMappings())
@@ -79,6 +107,28 @@
IdentityStore store = bootstrappedIdentityStores.get(storeId);
+ String cacheOption = identityStoreMappingMetaData.getOptionSingleValue(CACHE_OPTION);
+
+ if (cacheOption != null && cacheOption.equalsIgnoreCase("true"))
+ {
+ String cacheConfig = identityStoreMappingMetaData.getOptionSingleValue(CACHE_CONFIG_FILE_OPTION);
+
+ if (cacheConfig == null)
+ {
+ throw new IdentityException(CACHE_CONFIG_FILE_OPTION + " is missing in the repository identity-store-mapping configuration");
+ }
+
+ File cacheConfigFile = new File(cacheConfig);
+
+ if(!cacheConfigFile.exists())
+ {
+ throw new IdentityException("JBoss Cache config file specified in option \"" + CACHE_CONFIG_FILE_OPTION +
+ "\" doesn't exist: " + cacheConfig);
+ }
+
+ store = new JBossCacheIdentityStoreWrapper(store, cacheConfig);
+ }
+
if (store == null)
{
throw new IdentityException("Mapped IdentityStore not available: " + storeId);
Added: idm/trunk/idm/src/test/resources/jboss-cache-config.xml
===================================================================
--- idm/trunk/idm/src/test/resources/jboss-cache-config.xml (rev 0)
+++ idm/trunk/idm/src/test/resources/jboss-cache-config.xml 2009-02-02 13:39:43 UTC (rev 271)
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<jbosscache xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xmlns="urn:jboss:jbosscache-core:config:3.0">
+
+</jbosscache>
\ No newline at end of file
Deleted: idm/trunk/idm/src/test/resources/logging.properties
===================================================================
--- idm/trunk/idm/src/test/resources/logging.properties 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/idm/src/test/resources/logging.properties 2009-02-02 13:39:43 UTC (rev 271)
@@ -1,61 +0,0 @@
-# Properties file which configures the operation of the JDK
-# logging facility.
-
-# The system will look for this config file, first using
-# a System property specified at startup:
-#
-# >java -Djava.util.logging.config.file=myLoggingConfigFilePath
-#
-# If this property is not specified, then the config file is
-# retrieved from its default location at:
-#
-# JDK_HOME/jre/lib/logging.properties
-
-# Global logging properties.
-# ------------------------------------------
-# The set of handlers to be loaded upon startup.
-# Comma-separated list of class names.
-# (? LogManager docs say no comma here, but JDK example has comma.)
-handlers=java.util.logging.FileHandler, java.util.logging.ConsoleHandler
-
-# Default global logging level.
-# Loggers and Handlers may override this level
-.level=FINER
-
-# Loggers
-# ------------------------------------------
-# Loggers are usually attached to packages.
-# Here, the level for each package is specified.
-# The global level is used by default, so levels
-# specified here simply act as an override.
-
-#myapp.ui.level=ALL
-#myapp.business.level=CONFIG
-#myapp.data.level=SEVERE
-
-# Handlers
-# -----------------------------------------
-
-# --- ConsoleHandler ---
-# Override of global logging level
-java.util.logging.ConsoleHandler.level=FINER
-java.util.logging.ConsoleHandler.formatter=java.util.logging.SimpleFormatter
-
-# --- FileHandler ---
-# Override of global logging level
-java.util.logging.FileHandler.level=ALL
-
-# Naming style for the output file:
-# (The output file is placed in the directory
-# defined by the "user.home" System property.)
-java.util.logging.FileHandler.pattern=%h/java%u.log
-
-# Limiting size of output file in bytes:
-java.util.logging.FileHandler.limit=50000
-
-# Number of output files to cycle through, by appending an
-# integer to the base file name:
-java.util.logging.FileHandler.count=1
-
-# Style of output (Simple or XML):
-java.util.logging.FileHandler.formatter=java.util.logging.SimpleFormatter
\ No newline at end of file
Modified: idm/trunk/idm/src/test/resources/organization-test-config.xml
===================================================================
--- idm/trunk/idm/src/test/resources/organization-test-config.xml 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/idm/src/test/resources/organization-test-config.xml 2009-02-02 13:39:43 UTC (rev 271)
@@ -83,7 +83,16 @@
<identity-object-type>ORGANIZATION_UNIT</identity-object-type>
<identity-object-type>DEPARTMENT</identity-object-type>
</identity-object-types>
- <options/>
+ <options>
+ <option>
+ <name>cache</name>
+ <value>true</value>
+ </option>
+ <option>
+ <name>cache.config-file</name>
+ <value>src/test/resources/jboss-cache-config.xml</value>
+ </option>
+ </options>
</identity-store-mapping>
</identity-store-mappings>
<options>
@@ -121,7 +130,16 @@
<identity-object-type>ORGANIZATION_UNIT</identity-object-type>
<identity-object-type>OFFICE</identity-object-type>
</identity-object-types>
- <options/>
+ <options>
+ <option>
+ <name>cache</name>
+ <value>true</value>
+ </option>
+ <option>
+ <name>cache.config-file</name>
+ <value>src/test/resources/jboss-cache-config.xml</value>
+ </option>
+ </options>
</identity-store-mapping>
</identity-store-mappings>
<options>
Copied: idm/trunk/parent/logging.properties (from rev 260, idm/trunk/idm/src/test/resources/logging.properties)
===================================================================
--- idm/trunk/parent/logging.properties (rev 0)
+++ idm/trunk/parent/logging.properties 2009-02-02 13:39:43 UTC (rev 271)
@@ -0,0 +1,63 @@
+# Properties file which configures the operation of the JDK
+# logging facility.
+
+# The system will look for this config file, first using
+# a System property specified at startup:
+#
+# >java -Djava.util.logging.config.file=myLoggingConfigFilePath
+#
+# If this property is not specified, then the config file is
+# retrieved from its default location at:
+#
+# JDK_HOME/jre/lib/logging.properties
+
+# Global logging properties.
+# ------------------------------------------
+# The set of handlers to be loaded upon startup.
+# Comma-separated list of class names.
+# (? LogManager docs say no comma here, but JDK example has comma.)
+handlers=java.util.logging.FileHandler, java.util.logging.ConsoleHandler
+
+# Default global logging level.
+# Loggers and Handlers may override this level
+.level=SEVERE
+
+# Loggers
+# ------------------------------------------
+# Loggers are usually attached to packages.
+# Here, the level for each package is specified.
+# The global level is used by default, so levels
+# specified here simply act as an override.
+
+#myapp.ui.level=ALL
+#myapp.business.level=CONFIG
+#myapp.data.level=SEVERE
+
+org.jboss.identity.idm.level=FINER
+
+# Handlers
+# -----------------------------------------
+
+# --- ConsoleHandler ---
+# Override of global logging level
+java.util.logging.ConsoleHandler.level=ALL
+java.util.logging.ConsoleHandler.formatter=java.util.logging.SimpleFormatter
+
+# --- FileHandler ---
+# Override of global logging level
+java.util.logging.FileHandler.level=ALL
+
+# Naming style for the output file:
+# (The output file is placed in the directory
+# defined by the "user.home" System property.)
+java.util.logging.FileHandler.pattern=%h/java%u.log
+
+# Limiting size of output file in bytes:
+java.util.logging.FileHandler.limit=50000
+
+# Number of output files to cycle through, by appending an
+# integer to the base file name:
+java.util.logging.FileHandler.count=1
+
+# Style of output (Simple or XML):
+java.util.logging.FileHandler.formatter=java.util.logging.SimpleFormatter
\ No newline at end of file
Modified: idm/trunk/parent/pom.xml
===================================================================
--- idm/trunk/parent/pom.xml 2009-02-02 06:07:32 UTC (rev 270)
+++ idm/trunk/parent/pom.xml 2009-02-02 13:39:43 UTC (rev 271)
@@ -1,101 +1,107 @@
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
- <parent>
- <groupId>org.jboss</groupId>
- <artifactId>jboss-parent</artifactId>
- <version>3</version>
- </parent>
- <modelVersion>4.0.0</modelVersion>
- <groupId>org.jboss.identity</groupId>
- <artifactId>idm-parent</artifactId>
- <packaging>pom</packaging>
- <version>1.0.0-SNAPSHOT</version>
- <name>JBoss Identity IDM- Parent</name>
- <url>http://labs.jboss.org/portal/jbosssecurity/</url>
- <description>JBoss Identity is a cross-cutting project that handles identity needs for the JEMS projects</description>
- <licenses>
- <license>
- <name>lgpl</name>
- <url>http://repository.jboss.com/licenses/lgpl.txt</url>
- </license>
- </licenses>
- <organization>
- <name>JBoss Inc.</name>
- <url>http://www.jboss.org</url>
- </organization>
- <scm>
- <connection>scm:svn:http://anonsvn.jboss.org/repos/jbossidentity/idm/trunk</connection>
- <developerConnection>scm:svn:https://svn.jboss.org/repos/jbossidentity/idm/trunk</developerConnection>
- </scm>
+ <parent>
+ <groupId>org.jboss</groupId>
+ <artifactId>jboss-parent</artifactId>
+ <version>3</version>
+ </parent>
+ <modelVersion>4.0.0</modelVersion>
+ <groupId>org.jboss.identity</groupId>
+ <artifactId>idm-parent</artifactId>
+ <packaging>pom</packaging>
+ <version>1.0.0-SNAPSHOT</version>
+ <name>JBoss Identity IDM- Parent</name>
+ <url>http://labs.jboss.org/portal/jbosssecurity/</url>
+ <description>JBoss Identity is a cross-cutting project that handles identity needs for the JEMS projects</description>
+ <licenses>
+ <license>
+ <name>lgpl</name>
+ <url>http://repository.jboss.com/licenses/lgpl.txt</url>
+ </license>
+ </licenses>
+ <organization>
+ <name>JBoss Inc.</name>
+ <url>http://www.jboss.org</url>
+ </organization>
+ <scm>
+ <connection>scm:svn:http://anonsvn.jboss.org/repos/jbossidentity/idm/trunk</connection>
+ <developerConnection>scm:svn:https://svn.jboss.org/repos/jbossidentity/idm/trunk</developerConnection>
+ </scm>
- <build>
- <plugins>
- <plugin>
- <artifactId>maven-release-plugin</artifactId>
- <configuration>
- <tagBase>https://svn.jboss.org/repos/jbossidentity/tags</tagBase>
- </configuration>
- </plugin>
- </plugins>
- <pluginManagement>
- <plugins>
- <plugin>
- <artifactId>maven-surefire-plugin</artifactId>
- <configuration>
- <printSummary>true</printSummary>
- <disableXmlReport>false</disableXmlReport>
- <testFailureIgnore>false</testFailureIgnore>
- <includes>
- <include>**/*TestCase.java</include>
- </includes>
- <forkMode>pertest</forkMode>
- <argLine>${surefire.jvm.args}</argLine>
- <useFile>false</useFile>
- <trimStackTrace>false</trimStackTrace>
- </configuration>
- </plugin>
- </plugins>
- </pluginManagement>
- </build>
+ <build>
+ <plugins>
+ <plugin>
+ <artifactId>maven-release-plugin</artifactId>
+ <configuration>
+ <tagBase>https://svn.jboss.org/repos/jbossidentity/tags</tagBase>
+ </configuration>
+ </plugin>
+ </plugins>
+ <pluginManagement>
+ <plugins>
+ <plugin>
+ <artifactId>maven-surefire-plugin</artifactId>
+ <configuration>
+ <printSummary>true</printSummary>
+ <disableXmlReport>false</disableXmlReport>
+ <testFailureIgnore>false</testFailureIgnore>
+ <includes>
+ <include>**/*TestCase.java</include>
+ </includes>
+ <forkMode>pertest</forkMode>
+ <argLine>${surefire.jvm.args}</argLine>
+ <useFile>false</useFile>
+ <trimStackTrace>false</trimStackTrace>
+ <systemProperties>
+ <property>
+ <name>java.util.logging.config.file</name>
+ <value>../parent/logging.properties</value>
+ </property>
+ </systemProperties>
+ </configuration>
+ </plugin>
+ </plugins>
+ </pluginManagement>
+ </build>
- <repositories>
- <repository>
- <id>repository.jboss.org</id>
- <name>JBoss Repository</name>
- <layout>default</layout>
- <url>http://repository.jboss.org/maven2/</url>
- <snapshots>
- <enabled>false</enabled>
- </snapshots>
- </repository>
+ <repositories>
+ <repository>
+ <id>repository.jboss.org</id>
+ <name>JBoss Repository</name>
+ <layout>default</layout>
+ <url>http://repository.jboss.org/maven2/</url>
+ <snapshots>
+ <enabled>false</enabled>
+ </snapshots>
+ </repository>
- <repository>
- <id>snapshots.jboss.org</id>
- <name>JBoss Snapshots Repository</name>
- <layout>default</layout>
- <url>http://snapshots.jboss.org/maven2/</url>
- <snapshots>
- <enabled>true</enabled>
- </snapshots>
- <releases>
- <enabled>false</enabled>
- </releases>
- </repository>
- </repositories>
+ <repository>
+ <id>snapshots.jboss.org</id>
+ <name>JBoss Snapshots Repository</name>
+ <layout>default</layout>
+ <url>http://snapshots.jboss.org/maven2/</url>
+ <snapshots>
+ <enabled>true</enabled>
+ </snapshots>
+ <releases>
+ <enabled>false</enabled>
+ </releases>
+ </repository>
+ </repositories>
- <dependencyManagement>
- <dependencies>
- <dependency>
- <groupId>junit</groupId>
- <artifactId>junit</artifactId>
- <version>3.8.1</version>
- <scope>test</scope>
- </dependency>
- <dependency>
- <groupId>javax.persistence</groupId>
- <artifactId>persistence-api</artifactId>
- <version>1.0</version>
- </dependency>
- </dependencies>
- </dependencyManagement>
+ <dependencyManagement>
+ <dependencies>
+ <dependency>
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ <version>3.8.1</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>javax.persistence</groupId>
+ <artifactId>persistence-api</artifactId>
+ <version>1.0</version>
+ </dependency>
+ </dependencies>
+ </dependencyManagement>
</project>
15 years, 3 months
- 1
- 0
JBoss Identity SVN: r270 - identity-federation/trunk/doc/DeveloperGuide/src/main/docbook.
by jboss-identity-commits＠lists.jboss.org
Author: anil.saldhana(a)jboss.com
Date: 2009-02-02 01:07:32 -0500 (Mon, 02 Feb 2009)
New Revision: 270
Modified:
identity-federation/trunk/doc/DeveloperGuide/src/main/docbook/DeveloperGuide.xml
Log:
dev guide
Modified: identity-federation/trunk/doc/DeveloperGuide/src/main/docbook/DeveloperGuide.xml
===================================================================
--- identity-federation/trunk/doc/DeveloperGuide/src/main/docbook/DeveloperGuide.xml 2009-01-30 22:38:30 UTC (rev 269)
+++ identity-federation/trunk/doc/DeveloperGuide/src/main/docbook/DeveloperGuide.xml 2009-02-02 06:07:32 UTC (rev 270)
@@ -3,7 +3,7 @@
"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
<!ENTITY % RH-ENTITIES SYSTEM "Common_Config/rh-entities.ent">
]>
-<book>
+<book>
<bookinfo>
<title>JBoss Identity Federation</title>
@@ -19,7 +19,7 @@
</bookinfo>
<preface>
- <title>What this Book Covers</title>
+ <title>What this Book Covers?</title>
<para>This book aims to help you become familiar with JBoss Identity
Federation in order that you can use it to develop your own Federated
@@ -28,14 +28,12 @@
<para>Part I 'Getting Started' introduces the federated identity
technologies that are provided in this product.</para>
- <para>Part II 'Simple Usage' takes a look at the use cases that you can
- implement that meets majority of requirements.</para>
-
- <para>Part III 'Advanced Usage' goes on to look at how you can add
- advanced features to your use cases such as trust management and XML
- Digital Signatures.</para>
+ <para>Part II 'Developer Usage' takes a look at the API and Object Model
+ available to you to create applications and services for your needs with
+ Federated Identity.
+ </para>
</preface>
-
+
<part>
<title>Getting Started</title>
@@ -44,10 +42,12 @@
<para>JBoss Identity Federation allows you to implement SAML v2.0 based
services and applications. It also has support for Oasis WS-Trust based
- applications.</para>
+ applications.
+ </para>
<para>With JBoss Identity Federation, you have the following
- features.</para>
+ features.
+ </para>
<itemizedlist>
<listitem>
@@ -81,15 +81,12 @@
bindings using the object model provided in this product.</para>
</chapter>
- <chapter>
- <title>Simple Usage</title>
+ </part>
+
+ <part>
+ <title>Developer Usage</title>
- <para>In this chapter, we will look at usage of JBoss Identity
- Federation to help you obtain a platform to implement federated identity
- based services (including centralized identity services
- and Single Sign-On (SSO) for applications).</para>
-
- <section>
+ <chapter id="identity-api">
<title>Identity API for SAML v2</title>
<note>
<para>Use SAML2Request API class for creating SAML request objects.</para>
@@ -149,326 +146,26 @@
ByteArrayOutputStream baos = new ByteArrayOutputStream();
saml2Response.marshall(rt, baos);
</programlisting>
- </section>
-
- <section> <!-- Section: SAML HTTP/Redirect Binding -->
- <title>SAML v2 HTTP/Redirect Binding</title>
- <para>This section will talk about the configuration information to
- support the HTTP/Redirect binding which will provide centralized
- identity services as well as web SSO for your applications.
- </para>
- <mediaobject>
- <imageobject>
- <imagedata fileref="../../../../images/HubNSpokeArchitecture.png" format="PNG"
- contentwidth="6in" contentdepth="6in"/>
- </imageobject>
- <caption align="right">
- <para>
- <emphasis role="bold">Hub and Spoke Architecture for the SAML v2 based Web SSO</emphasis>
- </para>
- </caption>
- </mediaobject>
- <para>The architecture follows the Hub and Spoke architecture of Identity Management.
- An Identity Provider (IDP) acts as the central source (hub) for identity and role
- information to all the applications (Service Providers/SP). The spokes are the
- Service Providers (SP).
- </para>
- <note>
- <para>The IDP and the SP can be a JBoss Application Server or a Tomcat instance.
- </para>
- </note>
-
-
- <section><!-- Section on configuring the Identity Provider -->
- <title>Configuring the Identity Provider (IDP) </title>
-
- <note>
- <title>Check list for configuring the IDP</title>
- <orderedlist>
- <listitem>Configure the IDP as a secure web application.
- </listitem>
- <listitem>Configure the web.xml to either allow FORM or BASIC authentication.
- </listitem>
- <listitem>Configure the context.xml for IDP valves.
- </listitem>
- <listitem>Configure the jboss-idfed.xml for IDP configuration.
- </listitem>
- </orderedlist>
- </note>
-
- <para>The IDP can be a JBoss Application Server or a Tomcat instance.
- </para>
- <para>
- You need to configure a web application as the Identity provider.
- </para>
-
-
- <section><!-- Section on configuring web app security -->
- <title>Configure the web application security for the IDP</title>
- <para>The web application needs to have FORM or BASIC based security enabled in its web.xml.
- We recommend the use of FORM based web application security as it gives you the ability to
- customize the login page.</para>
- <para>The web.xml needs to have a configuration such as the following:
- </para>
- <programlisting role="XML">
- <?xml version="1.0" encoding="ISO-8859-1"?>
-<web-app xmlns="http://java.sun.com/xml/ns/javaee"
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
- version="2.5">
-
- <display-name>IDP</display-name>
- <description>IDP</description>
-
- <!-- Define a security constraint that gives unlimited access to images -->
- <security-constraint>
- <web-resource-collection>
- <web-resource-name>Images</web-resource-name>
- <url-pattern>/images/*</url-pattern>
- </web-resource-collection>
- </security-constraint>
-
- <!-- Define a Security Constraint on this Application -->
- <security-constraint>
- <web-resource-collection>
- <web-resource-name>IDP</web-resource-name>
- <url-pattern>/*</url-pattern>
- </web-resource-collection>
- <auth-constraint>
- <role-name>manager</role-name>
- </auth-constraint>
- </security-constraint>
-
- <!-- Define the Login Configuration for this Application -->
- <login-config>
- <auth-method>FORM</auth-method>
- <realm-name>IDP Application</realm-name>
- <form-login-config>
- <form-login-page>/jsp/login.jsp</form-login-page>
- <form-error-page>/jsp/loginerror.jsp</form-error-page>
- </form-login-config>
- </login-config>
-
- <!-- Security roles referenced by this web application -->
- <security-role>
- <description>
- The role that is required to log in to the IDP Application
- </description>
- <role-name>manager</role-name>
- </security-role>
-</web-app>
- </programlisting>
-
-
- <note>
- <para> Remember to configure the realm or login modules for your IDP as per the Tomcat or
- JBoss AS documentation on "securing your web application".
- </para>
- <ulink url="http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html">Tomcat Realm</ulink>
- and
- <ulink url="http://jboss.org/community/docs/DOC-10760">JBoss AS Security</ulink>
- </note>
-
-
- </section> <!-- Section on configuring web app security - IDP -->
-
-
- <section> <!-- Configure the IDP Valves -->
- <title>Configure the IDP Valves</title>
- <para> Create a <emphasis role="italic">context.xml</emphasis> file for configuring
- the valves for the IDP.
- </para>
- <para> The context.xml file should look like:
- </para>
- <programlisting role="xml">
- <Context>
- <Valve
- className="org.jboss.identity.federation.bindings.tomcat.idp.IDPRedirectValve"
- />
- </Context>
- </programlisting>
-
- <note>
- <para>If the IDP is running in Apache Tomcat, then place the context.xml in
- <emphasis role="bold">META-INF</emphasis> of your IDP web application.
- </para>
- </note>
-
- <note>
- <para> If the IDP is running in JBoss Application Server, then place the context.xml in
- <emphasis role="bold">WEB-INF</emphasis> of your IDP web application.
- </para>
- </note>
-
- </section> <!-- Section: configure IDP valves -->
-
- <section> <!-- Section: Configure IDFed Config File - IDP -->
- <title>Configure the JBoss Identity Federation configuration file (jboss-idfed.xml)</title>
- <para>Configure <emphasis role="italic">jboss-idfed.xml</emphasis> in WEB-INF of your
- IDP web application</para>
- <programlisting role="xml">
- <JBossIDP xmlns="urn:jboss:identity-federation:config:1.0" >
- <IdentityURL>http://localhost:8080/idp</IdentityURL>
- </JBossIDP>
- </programlisting>
-
- <para>In this configuration file, you are providing the URL of your IDP.
- This is the URL that gets added as the issuer in the outgoing SAML2 assertions
- to the Service Providers.
- </para>
- </section><!-- End Section: Configure IDFed Config File - IDP -->
-
- </section> <!-- End Section on configuring the Identity Provider -->
-
-
- <section> <!-- Section:configure the SP -->
- <title>Configure the Service Provider (SP)</title>
- <note>
- <title>Check List for configuring the Service Provider.
- </title>
- <orderedlist>
- <listitem>Configure the SP as a secure FORM authentication based web application.
- </listitem>
- <listitem>Configure the web.xml of the SP web application.
- </listitem>
- <listitem>Configure the context.xml for the SP valves.
- </listitem>
- <listitem>Configure the jboss-idfed.xml for the SP configuration.
- </listitem>
- </orderedlist>
- </note>
-
-
- <para>The SP can be a JBoss Application Server or a Tomcat instance.
- </para>
- <para>
- You need to configure a web application as the Service Provider(SP).
- </para>
-
-
- <section><!-- Section on configuring web app security -->
- <title>Configure the web application security for the SP</title>
- <para>The web application needs to have FORM based security enabled in its web.xml.
- </para>
- <para>The web.xml needs to have a configuration such as the following:
- </para>
-
- <programlisting role="XML">
-
- <?xml version="1.0" encoding="ISO-8859-1"?>
-<web-app xmlns="http://java.sun.com/xml/ns/javaee"
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
- version="2.5">
-
- <display-name>Test SALES Application</display-name>
- <description>
- Just a Test SP
- </description>
-
- <!-- Define a Security Constraint on this Application -->
- <security-constraint>
- <web-resource-collection>
- <web-resource-name>SALES Application</web-resource-name>
- <url-pattern>/*</url-pattern>
- </web-resource-collection>
- <auth-constraint>
- <role-name>manager</role-name>
- </auth-constraint>
- </security-constraint>
-
- <!-- Define a security constraint that gives unlimted access to freezone -->
- <security-constraint>
- <web-resource-collection>
- <web-resource-name>freezone</web-resource-name>
- <url-pattern>/freezone/*</url-pattern>
- </web-resource-collection>
- </security-constraint>
-
- <!-- Define the Login Configuration for this Application -->
- <login-config>
- <auth-method>FORM</auth-method>
- <realm-name>Tomcat SALES Application</realm-name>
- <form-login-config>
- <form-login-page>/jsp/login.jsp</form-login-page>
- <form-error-page>/jsp/loginerror.jsp</form-error-page>
- </form-login-config>
- </login-config>
-
- <!-- Security roles referenced by this web application -->
- <security-role>
- <description>
- The role that is required to log in to the SP Application
- </description>
- <role-name>manager</role-name>
- </security-role>
-</web-app>
-
- </programlisting>
-
- <warning>
- <para>
- The SP web application should be configured with FORM based authentication.
- </para>
- </warning>
-
- </section> <!-- Section on configuring web app security - SP -->
-
-
- <section> <!-- Configure the SP Valves -->
- <title>Configure the SP Valves</title>
- <para> Create a <emphasis role="italic">context.xml</emphasis> file for configuring
- the valves for the SP.
- </para>
- <para> The context.xml file should look like:
- </para>
- <programlisting role="xml">
-
- <Context>
- <Valve
- className="org.jboss.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator"
- />
- </Context>
-
- </programlisting>
-
- <note>
- <para>If the SP is running in Apache Tomcat, then place the context.xml in
- <emphasis role="bold">META-INF</emphasis> of your SP web application.
- </para>
- </note>
-
- <note>
- <para> If the SP is running in JBoss Application Server, then place the context.xml in
- <emphasis role="bold">WEB-INF</emphasis> of your SP web application.
- </para>
- </note>
-
- </section> <!-- Section: configure SP valves -->
-
- <section> <!-- Section: Configure IDFed Config File - SP -->
- <title>Configure the JBoss Identity Federation configuration file (jboss-idfed.xml)</title>
- <para>Configure <emphasis role="italic">jboss-idfed.xml</emphasis> in WEB-INF of your
- SP web application</para>
-
- <programlisting role="xml">
-
- <JBossSP xmlns="urn:jboss:identity-federation:config:1.0">
- <IdentityURL>http://localhost:8080/idp</IdentityURL>
- <ServiceURL>http://localhost:8080/sales</ServiceURL>
- </JBossSP>
-
- </programlisting>
-
- <para>
- In this configuration file, we define the URLs for the service provider and
- the identity provider.
- </para>
- </section><!-- End Section: Configure IDFed Config File - SP -->
-
- </section><!-- End Section:configure the SP -->
-
- </section><!-- End Section: SAML HTTP/Redirect Binding -->
- </chapter>
+ </chapter> <!-- End Section on Identity API Usage -->
+
+ <chapter id="jaxb-object-model"> <!-- Object Model -->
+ <title> JAXB2 Based Object Model for SAML and WS-Trust</title>
+ <para> JBoss Identity Federation contains an object model for SAMLv2 and WS-Trust v1.3
+ applications. The object model is very useful for developers who want to build advanced
+ applications that are not fully supported by the Identity API from the previous section.
+ </para>
+ <tip>
+ <title>Object Model for SAML v2</title>
+ <para><emphasis role="italic">org.jboss.identity.federation.saml.v2</emphasis> is
+ the package that contains the object model.</para>
+ </tip>
+ <tip>
+ <title>Object Model for WS-Trust v1.3</title>
+ <para><emphasis role="italic">org.jboss.identity.federation.ws.trust</emphasis> is
+ the package that contains the object model.</para>
+ </tip>
+ </chapter>
</part>
+
+
</book>
15 years, 3 months
- 1
- 0