September 2011 - picketlink-commits

Picketlink SVN: r1253 - in social/trunk/webapps/picketlink-reg: resources and 1 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-24 00:26:42 -0400 (Sat, 24 Sep 2011) New Revision: 1253 Added: social/trunk/webapps/picketlink-reg/resources/ social/trunk/webapps/picketlink-reg/resources/META-INF/ social/trunk/webapps/picketlink-reg/resources/WEB-INF/ social/trunk/webapps/picketlink-reg/resources/WEB-INF/context.xml social/trunk/webapps/picketlink-reg/resources/WEB-INF/jboss-web.xml social/trunk/webapps/picketlink-reg/resources/WEB-INF/web.xml social/trunk/webapps/picketlink-reg/resources/index.jsp Log: social regist Added: social/trunk/webapps/picketlink-reg/resources/WEB-INF/context.xml =================================================================== --- social/trunk/webapps/picketlink-reg/resources/WEB-INF/context.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/resources/WEB-INF/context.xml 2011-09-24 04:26:42 UTC (rev 1253) @@ -0,0 +1,9 @@ +<Context> + <Valve className="org.picketlink.social.auth.ExternalAuthenticator" + returnURL="http://localhost:8080/picketlink-reg/" + scope="email" + clientID="YOUR_CLIENT_ID" + clientSecret="YOUR_CLIENT_SECRET" + roleString="user"/> + <Valve className="org.picketlink.social.reg.RegistrationValve"/> +</Context> Added: social/trunk/webapps/picketlink-reg/resources/WEB-INF/jboss-web.xml =================================================================== --- social/trunk/webapps/picketlink-reg/resources/WEB-INF/jboss-web.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/resources/WEB-INF/jboss-web.xml 2011-09-24 04:26:42 UTC (rev 1253) @@ -0,0 +1,3 @@ +<jboss-web> + <security-domain>external_auth</security-domain> +</jboss-web> Added: social/trunk/webapps/picketlink-reg/resources/WEB-INF/web.xml =================================================================== --- social/trunk/webapps/picketlink-reg/resources/WEB-INF/web.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/resources/WEB-INF/web.xml 2011-09-24 04:26:42 UTC (rev 1253) @@ -0,0 +1,45 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PicketLink Social Registration Application</display-name> + <description> + Registration Web Application for the PicketLink Social Project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Images</web-resource-name> + <url-pattern>/images/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Manager command</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>user</role-name> + </auth-constraint> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>PicketLink IDP Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/login-error.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <role-name>user</role-name> + </security-role> +</web-app> Added: social/trunk/webapps/picketlink-reg/resources/index.jsp =================================================================== --- social/trunk/webapps/picketlink-reg/resources/index.jsp (rev 0) +++ social/trunk/webapps/picketlink-reg/resources/index.jsp 2011-09-24 04:26:42 UTC (rev 1253) @@ -0,0 +1,27 @@ +<%@ page import="org.picketlink.social.reg.UserRegistration" %> + +<% + String fullName = request.getUserPrincipal().getName(); + String email = null; + UserRegistration user = (UserRegistration)session.getAttribute("user"); + if(user != null) + { + fullName = user.getFirstName() + " " + user.getLastName(); + email = user.getEmail(); + } +%> + +<html> +<body> + +<div align="center"> +<h1>PicketLink Social Registration</h1> +<br/> +Welcome <%=fullName%> + +<br/> +Your email address is:<%=email%> + +<br/> + +</div>

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1252 - social/trunk/social/src/main/java/org/picketlink/social/auth.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-24 00:26:04 -0400 (Sat, 24 Sep 2011) New Revision: 1252 Modified: social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java Log: add addtn attrib Modified: social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java =================================================================== --- social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java 2011-09-24 04:25:22 UTC (rev 1251) +++ social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java 2011-09-24 04:26:04 UTC (rev 1252) @@ -68,7 +68,7 @@ protected String clientSecret; protected String facebookScope = "email"; - private String requiredAttributes = "name,email,ax_firstName,ax_lastName,ax_fullName"; + private String requiredAttributes = "name,email,ax_firstName,ax_lastName,ax_fullName,ax_email"; private String optionalAttributes = null;

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1251 - social/trunk/facebook/src/main/java/org/picketlink/social/facebook.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-24 00:25:22 -0400 (Sat, 24 Sep 2011) New Revision: 1251 Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookPrincipal.java Log: add tostring Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookPrincipal.java =================================================================== --- social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookPrincipal.java 2011-09-24 04:24:50 UTC (rev 1250) +++ social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookPrincipal.java 2011-09-24 04:25:22 UTC (rev 1251) @@ -140,4 +140,11 @@ { this.email = email; } -} + + @Override + public String toString() + { + return "FacebookPrincipal [id=" + id + ", name=" + name + ", firstName=" + firstName + ", lastName=" + lastName + + ", gender=" + gender + ", timezone=" + timezone + ", locale=" + locale + ", email=" + email + "]"; + } +} \ No newline at end of file

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1250 - in social/trunk/webapps: picketlink-reg and 4 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-24 00:24:50 -0400 (Sat, 24 Sep 2011) New Revision: 1250 Added: social/trunk/webapps/picketlink-reg/ social/trunk/webapps/picketlink-reg/pom.xml social/trunk/webapps/picketlink-reg/src/ social/trunk/webapps/picketlink-reg/src/main/ social/trunk/webapps/picketlink-reg/src/main/webapp/ social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/ social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/context.xml social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/jboss-web.xml social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/web.xml social/trunk/webapps/picketlink-reg/src/main/webapp/index.jsp Modified: social/trunk/webapps/pom.xml Log: add a social registration page Added: social/trunk/webapps/picketlink-reg/pom.xml =================================================================== --- social/trunk/webapps/picketlink-reg/pom.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/pom.xml 2011-09-24 04:24:50 UTC (rev 1250) @@ -0,0 +1,39 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-social-webapps</artifactId> + <version>2.0.0-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>picketlink-reg</artifactId> + <packaging>war</packaging> + <name>PicketLink Social Registration</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Social Registration</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>picketlink-reg</warName> + <webappDirectory>${basedir}/resources/</webappDirectory> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Property changes on: social/trunk/webapps/picketlink-reg/pom.xml ___________________________________________________________________ Added: svn:executable + * Added: social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/context.xml =================================================================== --- social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/context.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/context.xml 2011-09-24 04:24:50 UTC (rev 1250) @@ -0,0 +1,9 @@ +<Context> + <Valve className="org.picketlink.social.auth.ExternalAuthenticator" + returnURL="http://localhost:8080/picketlink-reg/" + scope="email" + clientID="YOUR_CLIENT_ID" + clientSecret="YOUR_CLIENT_SECRET" + roleString="user"/> + <Valve className="org.picketlink.social.reg.RegistrationValve"/> +</Context> Added: social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-24 04:24:50 UTC (rev 1250) @@ -0,0 +1,3 @@ +<jboss-web> + <security-domain>external_auth</security-domain> +</jboss-web> Property changes on: social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/web.xml =================================================================== --- social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/web.xml (rev 0) +++ social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/web.xml 2011-09-24 04:24:50 UTC (rev 1250) @@ -0,0 +1,45 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PicketLink Social Registration Application</display-name> + <description> + Registration Web Application for the PicketLink Social Project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Images</web-resource-name> + <url-pattern>/images/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Manager command</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>user</role-name> + </auth-constraint> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>PicketLink IDP Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/login-error.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <role-name>user</role-name> + </security-role> +</web-app> Property changes on: social/trunk/webapps/picketlink-reg/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: social/trunk/webapps/picketlink-reg/src/main/webapp/index.jsp =================================================================== --- social/trunk/webapps/picketlink-reg/src/main/webapp/index.jsp (rev 0) +++ social/trunk/webapps/picketlink-reg/src/main/webapp/index.jsp 2011-09-24 04:24:50 UTC (rev 1250) @@ -0,0 +1,27 @@ +<%@ page import="org.picketlink.social.reg.UserRegistration" %> + +<% + String fullName = request.getUserPrincipal().getName(); + String email = null; + UserRegistration user = (UserRegistration)session.getAttribute("user"); + if(user != null) + { + fullName = user.getFirstName() + " " + user.getLastName(); + email = user.getEmail(); + } +%> + +<html> +<body> + +<div align="center"> +<h1>PicketLink Social Registration</h1> +<br/> +Welcome <%=fullName%> + +<br/> +Your email address is:<%=email%> + +<br/> + +</div> Property changes on: social/trunk/webapps/picketlink-reg/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Modified: social/trunk/webapps/pom.xml =================================================================== --- social/trunk/webapps/pom.xml 2011-09-22 19:02:02 UTC (rev 1249) +++ social/trunk/webapps/pom.xml 2011-09-24 04:24:50 UTC (rev 1250) @@ -25,5 +25,6 @@ <modules> <module>openid-provider</module> <module>openid-consumer</module> + <module>picketlink-reg</module> </modules> </project>

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1249 - in social/trunk: openid/src/main/java/org/picketlink/social/openid/auth and 1 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-22 15:02:02 -0400 (Thu, 22 Sep 2011) New Revision: 1249 Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java Log: javadoc Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java =================================================================== --- social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java 2011-09-22 18:55:32 UTC (rev 1248) +++ social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java 2011-09-22 19:02:02 UTC (rev 1249) @@ -84,7 +84,12 @@ { this.clientSecret = clientSecret; } - + + /** + * A comma separated string that represents the roles the web app + * needs to pass authorization + * @param roleStr + */ public void setRoleString(String roleStr) { if(roleStr == null) Modified: social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java =================================================================== --- social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java 2011-09-22 18:55:32 UTC (rev 1248) +++ social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java 2011-09-22 19:02:02 UTC (rev 1249) @@ -89,6 +89,11 @@ this.saveRestoreRequest = saveRestoreRequest; } + /** + * A comma separated string that represents the roles the web app + * needs to pass authorization + * @param roleStr + */ public void setRoleString(String roleStr) { if(roleStr == null) Modified: social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java =================================================================== --- social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java 2011-09-22 18:55:32 UTC (rev 1248) +++ social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java 2011-09-22 19:02:02 UTC (rev 1249) @@ -76,7 +76,12 @@ protected boolean saveRestoreRequest = true; private enum STATES { AUTH, AUTHZ, FINISH}; - + + /** + * A comma separated string that represents the roles the web app + * needs to pass authorization + * @param roleStr + */ public void setRoleString(String roleStr) { if(roleStr == null)

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1248 - in social/trunk: social and 7 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-22 14:55:32 -0400 (Thu, 22 Sep 2011) New Revision: 1248 Added: social/trunk/social/ social/trunk/social/pom.xml social/trunk/social/src/ social/trunk/social/src/main/ social/trunk/social/src/main/java/ social/trunk/social/src/main/java/org/ social/trunk/social/src/main/java/org/picketlink/ social/trunk/social/src/main/java/org/picketlink/social/ social/trunk/social/src/main/java/org/picketlink/social/auth/ social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthLoginModule.java social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java Modified: social/trunk/pom.xml Log: social module for consolidated external authentication Modified: social/trunk/pom.xml =================================================================== --- social/trunk/pom.xml 2011-09-22 18:54:35 UTC (rev 1247) +++ social/trunk/pom.xml 2011-09-22 18:55:32 UTC (rev 1248) @@ -17,6 +17,7 @@ <module>parent</module> <module>openid</module> <module>facebook</module> + <module>social</module> </modules> <reporting> Added: social/trunk/social/pom.xml =================================================================== --- social/trunk/social/pom.xml (rev 0) +++ social/trunk/social/pom.xml 2011-09-22 18:55:32 UTC (rev 1248) @@ -0,0 +1,204 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-fed-parent</artifactId> + <version>2.0.0-SNAPSHOT</version> + <relativePath>../parent</relativePath> + </parent> + <modelVersion>4.0.0</modelVersion> + <artifactId>picketlink-social</artifactId> + <packaging>jar</packaging> + <name>PicketLink Social</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Social</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + + <profiles> + + <profile> + <id>long-tests</id> + <activation> + <activeByDefault>false</activeByDefault> + </activation> + <build> + <plugins> + <plugin> + <artifactId>maven-surefire-plugin</artifactId> + <version>2.4.3</version> + <configuration> + <childDelegation>true</childDelegation> + <printSummary>true</printSummary> + <disableXmlReport>false</disableXmlReport> + <testFailureIgnore>false</testFailureIgnore> + <includes> + <include>**/integration/*TestCase.java</include> + </includes> + <forkMode>pertest</forkMode> + <argLine>${surefire.jvm.args}</argLine> + <useFile>false</useFile> + <trimStackTrace>false</trimStackTrace> + </configuration> + </plugin> + </plugins> + </build> + </profile> + </profiles> + + <build> + <plugins> + <plugin> + <artifactId>maven-surefire-plugin</artifactId> + <version>2.7.1</version> + <configuration> + <additionalClasspathElements> + <additionalClasspathElement>${basedir}/src/test/resources/endorsed/xercesImpl.jar</additionalClasspathElement> + </additionalClasspathElements> + <printSummary>true</printSummary> + <disableXmlReport>false</disableXmlReport> + <testFailureIgnore>false</testFailureIgnore> + <includes> + <include>**/**TestCase.java</include> + </includes> + <forkMode>pertest</forkMode> + <argLine>-Djava.endorsed.dirs=${basedir}/src/test/resources/endorsed</argLine> + <useFile>false</useFile> + <trimStackTrace>false</trimStackTrace> + </configuration> + </plugin> + </plugins> + </build> + + <dependencies> + <dependency> + <groupId>org.json</groupId> + <artifactId>json</artifactId> + <version>20090211</version> + </dependency> + <dependency> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-facebook</artifactId> + <version>${project.version}</version> + </dependency> + <dependency> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-openid</artifactId> + <version>${project.version}</version> + </dependency> + <dependency> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-fed-model</artifactId> + <version>2.0.1.final</version> + </dependency> + <dependency> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-web</artifactId> + <version>2.0.1.final</version> + </dependency> + <dependency> + <groupId>org.openid4java</groupId> + <artifactId>openid4java-nodeps</artifactId> + </dependency> + <dependency> + <groupId>apache-log4j</groupId> + <artifactId>log4j</artifactId> + <version>1.2.14</version> + </dependency> + <dependency> + <groupId>javax.servlet</groupId> + <artifactId>servlet-api</artifactId> + <version>2.5</version> + <optional>true</optional> + </dependency> + <dependency> + <groupId>org.mortbay.jetty</groupId> + <artifactId>jetty</artifactId> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.apache.tomcat</groupId> + <artifactId>jasper</artifactId> + <version>6.0.29</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.apache.tomcat</groupId> + <artifactId>catalina</artifactId> + <version>6.0.18</version> + <optional>true</optional> + </dependency> + <dependency> + <groupId>apache-log4j</groupId> + <artifactId>log4j</artifactId> + <version>1.2.14</version> + <optional>true</optional> + </dependency> + <dependency> + <groupId>httpunit</groupId> + <artifactId>httpunit</artifactId> + <version>1.5.4</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>nekohtml</groupId> + <artifactId>nekohtml</artifactId> + <version>1.9.12</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>commons-httpclient</groupId> + <artifactId>commons-httpclient</artifactId> + <version>3.1</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>xalan</groupId> + <artifactId>xalan</artifactId> + <version>2.7.1</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>junit</groupId> + <artifactId>junit</artifactId> + <scope>test</scope> + </dependency> + </dependencies> + + <reporting> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-javadoc-plugin</artifactId> + <configuration> + <doclet>org.jboss.apiviz.APIviz</doclet> + <docletArtifact> + <groupId>org.jboss.apiviz</groupId> + <artifactId>apiviz</artifactId> + <version>1.2.5.GA</version> + </docletArtifact> + <additionalparam> + -charset UTF-8 + -docencoding UTF-8 + -version + -author + -breakiterator + -windowtitle "${project.name} ${project.version} API Reference" + -doctitle "${project.name} ${project.version} API Reference" + -bottom "Copyright © ${project.inceptionYear}-Present ${project.organization.name}. All Rights Reserved." + -link http://java.sun.com/javase/6/docs/api/ + -sourceclasspath ${project.build.outputDirectory} + </additionalparam> + <encoding>UTF-8</encoding> + </configuration> + </plugin> + </plugins> + </reporting> +</project> Property changes on: social/trunk/social/pom.xml ___________________________________________________________________ Added: svn:executable + * Added: social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthLoginModule.java =================================================================== --- social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthLoginModule.java (rev 0) +++ social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthLoginModule.java 2011-09-22 18:55:32 UTC (rev 1248) @@ -0,0 +1,89 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2011, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.picketlink.social.auth; + +import java.security.Principal; +import java.security.acl.Group; +import java.util.List; + +import javax.security.auth.login.LoginException; +import javax.security.auth.spi.LoginModule; + +import org.jboss.security.SimpleGroup; +import org.jboss.security.SimplePrincipal; +import org.jboss.security.auth.spi.UsernamePasswordLoginModule; +import org.picketlink.social.facebook.FacebookProcessor; +import org.picketlink.social.openid.auth.OpenIDProcessor; + +/** + * A {@link LoginModule} for JBoss environment to support external 3rd party authentication + * @author Anil Saldhana + * @since Sep 22, 2011 + */ +public class ExternalAuthLoginModule extends UsernamePasswordLoginModule +{ + @Override + protected Principal getIdentity() + { + Principal principal = null; + //Try facebook + principal = FacebookProcessor.cachedPrincipal.get(); + if(principal == null ) + principal = OpenIDProcessor.cachedPrincipal.get(); + return principal; + } + + @Override + protected String getUsersPassword() throws LoginException + { + return OpenIDProcessor.EMPTY_PASSWORD; + } + + @Override + protected Group[] getRoleSets() throws LoginException + { + Group group = new SimpleGroup("Roles"); + + List<String> roles = OpenIDProcessor.cachedRoles.get(); + + if(roles != null) + { + for(String role: roles) + { + group.addMember(new SimplePrincipal(role)); + } + } + roles = FacebookProcessor.cachedRoles.get(); + if(roles != null) + { + for(String role: roles) + { + Principal rolePrincipal = new SimplePrincipal(role); + if(group.isMember(rolePrincipal) == false) + { + group.addMember(rolePrincipal); + } + } + } + return new Group[] {group}; + } +} \ No newline at end of file Added: social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java =================================================================== --- social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java (rev 0) +++ social/trunk/social/src/main/java/org/picketlink/social/auth/ExternalAuthenticator.java 2011-09-22 18:55:32 UTC (rev 1248) @@ -0,0 +1,270 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2011, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.picketlink.social.auth; + +import java.io.IOException; +import java.security.Principal; +import java.util.ArrayList; +import java.util.List; +import java.util.StringTokenizer; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import javax.servlet.http.HttpSession; + +import org.apache.catalina.Session; +import org.apache.catalina.authenticator.Constants; +import org.apache.catalina.authenticator.FormAuthenticator; +import org.apache.catalina.connector.Request; +import org.apache.catalina.connector.Response; +import org.apache.catalina.deploy.LoginConfig; +import org.apache.log4j.Logger; +import org.picketlink.social.facebook.FacebookProcessor; +import org.picketlink.social.openid.auth.OpenIDConsumerAuthenticator; +import org.picketlink.social.openid.auth.OpenIDProcessor; + +/** + * Authenticator that performs authentication with + * external providers such as facebook, google, yahoo etc. + * @author Anil Saldhana + * @since Sep 22, 2011 + */ +public class ExternalAuthenticator extends FormAuthenticator +{ + protected static Logger log = Logger.getLogger(OpenIDConsumerAuthenticator.class); + protected boolean trace = log.isTraceEnabled(); + + private enum AUTH_PROVIDERS + { + FACEBOOK, OPENID; + } + + public static final String AUTH_TYPE = "authType"; + + protected FacebookProcessor facebookProcessor; + protected OpenIDProcessor openidProcessor; + + protected String returnURL; + protected String clientID; + protected String clientSecret; + protected String facebookScope = "email"; + + private String requiredAttributes = "name,email,ax_firstName,ax_lastName,ax_fullName"; + + private String optionalAttributes = null; + + //Whether the authenticator has to to save and restore request + protected boolean saveRestoreRequest = true; + + private enum STATES { AUTH, AUTHZ, FINISH}; + + public void setRoleString(String roleStr) + { + if(roleStr == null) + throw new RuntimeException("Role String is null in configuration"); + StringTokenizer st = new StringTokenizer(roleStr, ","); + while(st.hasMoreElements()) + { + roles.add(st.nextToken()); + } + } + + public void setSaveRestoreRequest(boolean saveRestoreRequest) + { + this.saveRestoreRequest = saveRestoreRequest; + } + + protected List<String> roles = new ArrayList<String>(); + + public void setReturnURL(String returnURL) + { + this.returnURL = returnURL; + } + public void setClientID(String clientID) + { + this.clientID = clientID; + } + public void setClientSecret(String clientSecret) + { + this.clientSecret = clientSecret; + } + public void setFacebookScope(String facebookScope) + { + this.facebookScope = facebookScope; + } + + public boolean authenticate(HttpServletRequest request, HttpServletResponse response, LoginConfig loginConfig) throws IOException + { + if(request instanceof Request == false) + throw new IOException("Not of type Catalina request"); + if(response instanceof Response == false) + throw new IOException("Not of type Catalina response"); + return authenticate((Request)request, (Response)response, loginConfig); + } + + public boolean authenticate(Request request, Response response, LoginConfig loginConfig) throws IOException + { + if(trace) log.trace("authenticate"); + + if(facebookProcessor == null) + facebookProcessor = new FacebookProcessor(clientID, clientSecret, facebookScope, returnURL, roles); + + if(openidProcessor == null) + openidProcessor = new OpenIDProcessor(returnURL, requiredAttributes, optionalAttributes); + + HttpSession session = request.getSession(); + //Determine the type of service based on request param + String authType = request.getParameter(AUTH_TYPE); + if(authType != null && authType.length() > 0) + { + //Place it on the session + session.setAttribute(AUTH_TYPE, authType); + } + if(authType == null || authType.length() == 0) + { + authType = (String) session.getAttribute(AUTH_TYPE); + } + if(authType == null) + { + authType = AUTH_PROVIDERS.FACEBOOK.name(); + } + if(authType != null && authType.equals(AUTH_PROVIDERS.FACEBOOK.name())) + { + return processFacebook(request, response); + } + else + { + return processOpenID(request, response); + } + } + + protected boolean processFacebook(Request request, Response response) throws IOException + { + HttpSession session = request.getSession(); + String state = (String) session.getAttribute("STATE"); + + if(trace) log.trace("state="+ state); + + if( STATES.FINISH.name().equals(state)) + return true; + + if( state == null || state.isEmpty()) + { + if (saveRestoreRequest) + { + this.saveRequest(request, request.getSessionInternal()); + } + return facebookProcessor.initialInteraction(request, response); + } + //We have sent an auth request + if( state.equals(STATES.AUTH.name())) + { + return facebookProcessor.handleAuthStage(request, response); + } + + //Principal facebookPrincipal = null; + if( state.equals(STATES.AUTHZ.name())) + { + Principal principal = facebookProcessor.getPrincipal(request, response, context.getRealm()); + + if(principal == null) + throw new RuntimeException("Principal was null. Maybe login modules need to be configured properly."); + + String userName = principal.getName(); + + request.getSessionInternal().setNote(Constants.SESS_USERNAME_NOTE, userName); + request.getSessionInternal().setNote(Constants.SESS_PASSWORD_NOTE, ""); + request.setUserPrincipal(principal); + + if (saveRestoreRequest) + { + this.restoreRequest(request, request.getSessionInternal()); + } + register(request, response, principal, Constants.FORM_METHOD, userName, ""); + request.getSession().setAttribute("STATE", STATES.FINISH.name()); + + return true; + } + return false; + } + + protected boolean processOpenID(Request request, Response response) throws IOException + { + Principal userPrincipal = request.getUserPrincipal(); + if(userPrincipal != null) + { + if(trace) + log.trace("Logged in as:"+userPrincipal); + return true; + } + + if(!openidProcessor.isInitialized()) + { + try + { + openidProcessor.initialize(roles); + } + catch (Exception e) + { + throw new RuntimeException(e); + } + } + + HttpSession httpSession = request.getSession(); + String state = (String) httpSession.getAttribute("STATE"); + if(trace) log.trace("state="+ state); + + if( STATES.FINISH.name().equals(state)) + return true; + + if( state == null || state.isEmpty()) + { + return openidProcessor.prepareAndSendAuthRequest(request, response); + } + //We have sent an auth request + if( state.equals(STATES.AUTH.name())) + { + Session session = request.getSessionInternal(true); + if (saveRestoreRequest) + { + this.saveRequest(request, session); + } + + Principal principal = openidProcessor.processIncomingAuthResult(request, response, context.getRealm()); + String principalName = principal.getName(); + request.getSessionInternal().setNote(Constants.SESS_USERNAME_NOTE, principalName); + request.getSessionInternal().setNote(Constants.SESS_PASSWORD_NOTE, ""); + request.setUserPrincipal(principal); + + if (saveRestoreRequest) + { + this.restoreRequest(request, request.getSessionInternal()); + } + + if(trace) + log.trace("Logged in as:" + principal); + register(request, response, principal, Constants.FORM_METHOD, principalName, ""); + return true; + } + return false; + } +} \ No newline at end of file

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1247 - in social/trunk/openid: src/main/java/org/picketlink/social/openid/auth and 1 other directory.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-22 14:54:35 -0400 (Thu, 22 Sep 2011) New Revision: 1247 Added: social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDProcessor.java Modified: social/trunk/openid/pom.xml social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDLoginModule.java Log: refactor openid int Modified: social/trunk/openid/pom.xml =================================================================== --- social/trunk/openid/pom.xml 2011-09-22 18:54:06 UTC (rev 1246) +++ social/trunk/openid/pom.xml 2011-09-22 18:54:35 UTC (rev 1247) @@ -81,12 +81,12 @@ <dependency> <groupId>org.picketlink</groupId> <artifactId>picketlink-fed-model</artifactId> - <version>${project.version}</version> + <version>2.0.1.final</version> </dependency> <dependency> <groupId>org.picketlink</groupId> <artifactId>picketlink-web</artifactId> - <version>${project.version}</version> + <version>2.0.1.final</version> </dependency> <dependency> <groupId>org.openid4java</groupId> Modified: social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java =================================================================== --- social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java 2011-09-22 18:54:06 UTC (rev 1246) +++ social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDConsumerAuthenticator.java 2011-09-22 18:54:35 UTC (rev 1247) @@ -22,11 +22,9 @@ package org.picketlink.social.openid.auth; import java.io.IOException; -import java.net.URL; import java.security.Principal; import java.util.ArrayList; import java.util.List; -import java.util.Map; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; @@ -38,24 +36,8 @@ import org.apache.catalina.connector.Request; import org.apache.catalina.connector.Response; import org.apache.catalina.deploy.LoginConfig; -import org.apache.catalina.realm.GenericPrincipal; import org.apache.log4j.Logger; -import org.openid4java.consumer.ConsumerException; -import org.openid4java.consumer.ConsumerManager; -import org.openid4java.consumer.VerificationResult; -import org.openid4java.discovery.DiscoveryException; -import org.openid4java.discovery.DiscoveryInformation; -import org.openid4java.discovery.Identifier; -import org.openid4java.message.AuthRequest; -import org.openid4java.message.AuthSuccess; -import org.openid4java.message.MessageException; -import org.openid4java.message.ParameterList; -import org.openid4java.message.ax.AxMessage; -import org.openid4java.message.ax.FetchRequest; -import org.openid4java.message.ax.FetchResponse; import org.picketlink.identity.federation.core.util.StringUtil; -import org.picketlink.social.openid.OpenIdPrincipal; -import org.picketlink.social.openid.constants.OpenIDAliasMapper; /** * Tomcat Authenticator that provides OpenID based authentication @@ -65,56 +47,33 @@ public class OpenIDConsumerAuthenticator extends FormAuthenticator { protected static Logger log = Logger.getLogger(OpenIDConsumerAuthenticator.class); - protected boolean trace = log.isTraceEnabled(); - - private enum Providers - { - GOOGLE("https://www.google.com/accounts/o8/id"), - YAHOO("https://me.yahoo.com/"), - MYSPACE("myspace.com"), - MYOPENID("https://myopenid.com/"); - - private String name; + protected boolean trace = log.isTraceEnabled(); - Providers(String name) - { - this.name = name; - } - String get() - { - return name; - } - } private enum STATES { AUTH, AUTHZ, FINISH}; - + public static ThreadLocal<Principal> cachedPrincipal = new ThreadLocal<Principal>(); - + public static ThreadLocal<List<String>> cachedRoles = new ThreadLocal<List<String>>(); public static String EMPTY_PASSWORD = "EMPTY"; - - private ConsumerManager openIdConsumerManager = null; - - private String openIdServiceUrl = null; - + private String returnURL = null; - + private String requiredAttributes = "name,email,ax_firstName,ax_lastName,ax_fullName"; - + private String optionalAttributes = null; - - private FetchRequest fetchRequest; + protected List<String> roles = new ArrayList<String>(); - + //Whether the authenticator has to to save and restore request protected boolean saveRestoreRequest = true; - - protected boolean initialized = false; - - public void setReturnURL(String returnURL) - { - this.returnURL = returnURL; - } + protected OpenIDProcessor processor = null; + + public void setReturnURL(String returnURL) + { + this.returnURL = returnURL; + } + public void setRequiredAttributes(String requiredAttributes) { this.requiredAttributes = requiredAttributes; @@ -141,40 +100,20 @@ } } - public void initialize() throws MessageException, ConsumerException + public boolean authenticate(HttpServletRequest request, HttpServletResponse response, LoginConfig loginConfig) throws IOException { - if(openIdConsumerManager == null) - openIdConsumerManager = new ConsumerManager(); - - fetchRequest = FetchRequest.createFetchRequest(); - //Work on the required attributes - if(StringUtil.isNotNull(requiredAttributes)) - { - List<String> tokens = StringUtil.tokenize(requiredAttributes); - for(String token: tokens) - { - fetchRequest.addAttribute(token, OpenIDAliasMapper.get(token),true); - } - } - //Work on the optional attributes - if(StringUtil.isNotNull(optionalAttributes)) - { - List<String> tokens = StringUtil.tokenize(optionalAttributes); - for(String token: tokens) - { - String type = OpenIDAliasMapper.get(token); - if(type == null) - { - log.error("Null Type returned for " + token); - } - fetchRequest.addAttribute(token, type,false); - } - } - initialized = true; + if(request instanceof Request == false) + throw new IOException("Not of type Catalina request"); + if(response instanceof Response == false) + throw new IOException("Not of type Catalina response"); + return authenticate((Request)request, (Response)response, loginConfig); } - + public boolean authenticate(Request request, Response response, LoginConfig loginConfig) throws IOException { + if(processor == null) + processor = new OpenIDProcessor(returnURL, requiredAttributes, optionalAttributes); + Principal userPrincipal = request.getUserPrincipal(); if(userPrincipal != null) { @@ -182,161 +121,43 @@ log.trace("Logged in as:"+userPrincipal); return true; } - - if(!initialized) + + if(!processor.isInitialized()) { try { - initialize(); + processor.initialize(roles); } catch (Exception e) - { - throw new RuntimeException(e); + { + throw new RuntimeException(e); } } - + HttpSession httpSession = request.getSession(); String state = (String) httpSession.getAttribute("STATE"); if(trace) log.trace("state="+ state); - + if( STATES.FINISH.name().equals(state)) return true; - + if( state == null || state.isEmpty()) { - return processSend(request, response, loginConfig); + return processor.prepareAndSendAuthRequest(request, response); } //We have sent an auth request if( state.equals(STATES.AUTH.name())) { - return processIncomingResult(request, response, loginConfig); - } - return false; - } - - @SuppressWarnings("unchecked") - protected boolean processSend(Request request, Response response, LoginConfig loginConfig) throws IOException - { - //Figure out the service url - String service = request.getParameter("service"); - determineServiceUrl(service); - - String openId = openIdServiceUrl; - Session session = request.getSessionInternal(true); - if(openId != null) - { + Session session = request.getSessionInternal(true); if (saveRestoreRequest) { this.saveRequest(request, session); } - session.setNote("openid", openId); - List<DiscoveryInformation> discoveries; - try - { - discoveries = openIdConsumerManager.discover(openId); - } - catch (DiscoveryException e) - { - throw new RuntimeException(e); - } - DiscoveryInformation discovered = openIdConsumerManager.associate(discoveries); - session.setNote("discovery", discovered); - try - { - AuthRequest authReq = openIdConsumerManager.authenticate(discovered, returnURL); - - //Add in required attributes - authReq.addExtension(fetchRequest); - - String url = authReq.getDestinationUrl(true); - response.sendRedirect(url); - - request.getSession().setAttribute("STATE", STATES.AUTH.name()); - return false; - } - catch (Exception e) - { - throw new RuntimeException(e); - } - } - return false; - } - - @SuppressWarnings("unchecked") - protected boolean processIncomingResult(Request request, Response response, LoginConfig loginConfig) throws IOException - { - Session session = request.getSessionInternal(false); - if(session == null) - throw new RuntimeException("wrong lifecycle: session was null"); - - // extract the parameters from the authentication response - // (which comes in as a HTTP request from the OpenID provider) - ParameterList responseParamList = new ParameterList(request.getParameterMap()); - // retrieve the previously stored discovery information - DiscoveryInformation discovered = (DiscoveryInformation) session.getNote("discovery"); - if(discovered == null) - throw new RuntimeException("discovered information was null"); - // extract the receiving URL from the HTTP request - StringBuffer receivingURL = request.getRequestURL(); - String queryString = request.getQueryString(); - if (queryString != null && queryString.length() > 0) - receivingURL.append("?").append(request.getQueryString()); - - // verify the response; ConsumerManager needs to be the same - // (static) instance used to place the authentication request - VerificationResult verification; - try - { - verification = openIdConsumerManager.verify(receivingURL.toString(), responseParamList, discovered); - } - catch (Exception e) - { - throw new RuntimeException(e); - } - - // examine the verification result and extract the verified identifier - Identifier identifier = verification.getVerifiedId(); - - if (identifier != null) - { - AuthSuccess authSuccess = (AuthSuccess) verification.getAuthResponse(); - - Map<String, List<String>> attributes = null; - if (authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) - { - FetchResponse fetchResp; - try - { - fetchResp = (FetchResponse) authSuccess.getExtension(AxMessage.OPENID_NS_AX); - } - catch (MessageException e) - { - throw new RuntimeException(e); - } - - attributes = fetchResp.getAttributes(); - } - - Principal principal = null; - OpenIdPrincipal openIDPrincipal = createPrincipal(identifier.getIdentifier(), discovered.getOPEndpoint(), - attributes); - request.getSession().setAttribute("PRINCIPAL", openIDPrincipal); - - String principalName = openIDPrincipal.getName(); - cachedPrincipal.set(openIDPrincipal); - - if(isJBossEnv()) - { - cachedRoles.set(roles); - principal = context.getRealm().authenticate(principalName, EMPTY_PASSWORD); - } - else - { - //Create a Tomcat Generic Principal - principal = new GenericPrincipal(getContainer().getRealm(), principalName, null, roles, openIDPrincipal); - } - + Principal principal = processor.processIncomingAuthResult(request, response, context.getRealm()); + if(principal == null) + throw new RuntimeException("Principal was null. Maybe login modules need to be configured properly."); + String principalName = principal.getName(); request.getSessionInternal().setNote(Constants.SESS_USERNAME_NOTE, principalName); request.getSessionInternal().setNote(Constants.SESS_PASSWORD_NOTE, ""); request.setUserPrincipal(principal); @@ -353,51 +174,4 @@ } return false; } - - - public boolean authenticate(HttpServletRequest request, HttpServletResponse response, LoginConfig loginConfig) throws IOException - { - if(request instanceof Request == false) - throw new IOException("Not of type Catalina request"); - if(response instanceof Response == false) - throw new IOException("Not of type Catalina response"); - return authenticate((Request)request, (Response)response, loginConfig); - } - - private OpenIdPrincipal createPrincipal(String identifier, URL openIdProvider, Map<String, List<String>> attributes) - { - return new OpenIdPrincipal(identifier, openIdProvider, attributes); - } - - private boolean isJBossEnv() - { - ClassLoader tcl = SecurityActions.getContextClassLoader(); - Class<?> clazz = null; - try - { - clazz = tcl.loadClass("org.jboss.system.Service"); - } - catch (ClassNotFoundException e) - { - } - if( clazz != null ) - return true; - return false; - } - - private void determineServiceUrl(String service) - { - openIdServiceUrl = Providers.GOOGLE.get(); - if(StringUtil.isNotNull(service)) - { - if("google".equals(service)) - openIdServiceUrl = Providers.GOOGLE.get(); - else if("yahoo".equals(service)) - openIdServiceUrl = Providers.YAHOO.get(); - else if("myspace".equals(service)) - openIdServiceUrl = Providers.MYSPACE.get(); - else if("myopenid".equals(service)) - openIdServiceUrl = Providers.MYOPENID.get(); - } - } } \ No newline at end of file Modified: social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDLoginModule.java =================================================================== --- social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDLoginModule.java 2011-09-22 18:54:06 UTC (rev 1246) +++ social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDLoginModule.java 2011-09-22 18:54:35 UTC (rev 1247) @@ -33,7 +33,7 @@ import org.jboss.security.auth.spi.UsernamePasswordLoginModule; /** - * A {@link LoginModule} for JBoss environment + * A {@link LoginModule} for JBoss environment to support OpenID * @author Anil Saldhana * @since May 19, 2011 */ @@ -42,13 +42,13 @@ @Override protected Principal getIdentity() { - return OpenIDConsumerAuthenticator.cachedPrincipal.get(); + return OpenIDProcessor.cachedPrincipal.get(); } @Override protected String getUsersPassword() throws LoginException { - return OpenIDConsumerAuthenticator.EMPTY_PASSWORD; + return OpenIDProcessor.EMPTY_PASSWORD; } @Override @@ -56,7 +56,7 @@ { Group group = new SimpleGroup("Roles"); - List<String> roles = OpenIDConsumerAuthenticator.cachedRoles.get(); + List<String> roles = OpenIDProcessor.cachedRoles.get(); if(roles != null) { Added: social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDProcessor.java =================================================================== --- social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDProcessor.java (rev 0) +++ social/trunk/openid/src/main/java/org/picketlink/social/openid/auth/OpenIDProcessor.java 2011-09-22 18:54:35 UTC (rev 1247) @@ -0,0 +1,326 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2011, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.picketlink.social.openid.auth; + +import java.io.IOException; +import java.net.URL; +import java.security.Principal; +import java.util.ArrayList; +import java.util.List; +import java.util.Map; + +import org.apache.catalina.Realm; +import org.apache.catalina.Session; +import org.apache.catalina.connector.Request; +import org.apache.catalina.connector.Response; +import org.apache.catalina.realm.GenericPrincipal; +import org.apache.log4j.Logger; +import org.openid4java.consumer.ConsumerException; +import org.openid4java.consumer.ConsumerManager; +import org.openid4java.consumer.VerificationResult; +import org.openid4java.discovery.DiscoveryException; +import org.openid4java.discovery.DiscoveryInformation; +import org.openid4java.discovery.Identifier; +import org.openid4java.message.AuthRequest; +import org.openid4java.message.AuthSuccess; +import org.openid4java.message.MessageException; +import org.openid4java.message.ParameterList; +import org.openid4java.message.ax.AxMessage; +import org.openid4java.message.ax.FetchRequest; +import org.openid4java.message.ax.FetchResponse; +import org.picketlink.identity.federation.core.util.StringUtil; +import org.picketlink.social.openid.OpenIdPrincipal; +import org.picketlink.social.openid.constants.OpenIDAliasMapper; + +/** + * Processor for the OpenID interaction + * @author Anil Saldhana + * @since Sep 22, 2011 + */ +public class OpenIDProcessor +{ + protected static Logger log = Logger.getLogger(OpenIDProcessor.class); + protected boolean trace = log.isTraceEnabled(); + + public static final String AUTH_TYPE = "authType"; + + private ConsumerManager openIdConsumerManager; + private FetchRequest fetchRequest; + + private String openIdServiceUrl = null; + + private String returnURL = null; + + private String requiredAttributes,optionalAttributes = null; + + private boolean initialized = false; + + protected List<String> roles = new ArrayList<String>(); + + public static ThreadLocal<Principal> cachedPrincipal = new ThreadLocal<Principal>(); + + public static ThreadLocal<List<String>> cachedRoles = new ThreadLocal<List<String>>(); + public static String EMPTY_PASSWORD = "EMPTY"; + + private enum STATES { AUTH, AUTHZ, FINISH}; + + private enum Providers + { + GOOGLE("https://www.google.com/accounts/o8/id"), + YAHOO("https://me.yahoo.com/"), + MYSPACE("myspace.com"), + MYOPENID("https://myopenid.com/"); + + private String name; + + Providers(String name) + { + this.name = name; + } + String get() + { + return name; + } + } + + public OpenIDProcessor(String theReturnURL, String requiredAttributes, String optionalAttributes) + { + this.returnURL = theReturnURL; + this.requiredAttributes = requiredAttributes; + this.optionalAttributes = optionalAttributes; + } + + /** + * Return whether the processor has initialized + * @return + */ + public boolean isInitialized() + { + return initialized; + } + + /** + * Initialize the processor + * @param requiredRoles + * @throws MessageException + * @throws ConsumerException + */ + public void initialize(List<String> requiredRoles) throws MessageException, ConsumerException + { + if(openIdConsumerManager == null) + openIdConsumerManager = new ConsumerManager(); + + fetchRequest = FetchRequest.createFetchRequest(); + //Work on the required attributes + if(StringUtil.isNotNull(requiredAttributes)) + { + List<String> tokens = StringUtil.tokenize(requiredAttributes); + for(String token: tokens) + { + fetchRequest.addAttribute(token, OpenIDAliasMapper.get(token),true); + } + } + //Work on the optional attributes + if(StringUtil.isNotNull(optionalAttributes)) + { + List<String> tokens = StringUtil.tokenize(optionalAttributes); + for(String token: tokens) + { + String type = OpenIDAliasMapper.get(token); + if(type == null) + { + log.error("Null Type returned for " + token); + } + fetchRequest.addAttribute(token, type,false); + } + } + + roles.addAll(requiredRoles); + initialized = true; + } + + @SuppressWarnings("unchecked") + public boolean prepareAndSendAuthRequest(Request request, Response response) throws IOException + { + //Figure out the service url + String authType = request.getParameter(AUTH_TYPE); + if(authType == null || authType.length() == 0) + { + authType = (String) request.getSession().getAttribute(AUTH_TYPE); + } + determineServiceUrl(authType); + + String openId = openIdServiceUrl; + Session session = request.getSessionInternal(true); + if(openId != null) + { + session.setNote("openid", openId); + List<DiscoveryInformation> discoveries; + try + { + discoveries = openIdConsumerManager.discover(openId); + } + catch (DiscoveryException e) + { + throw new RuntimeException(e); + } + + DiscoveryInformation discovered = openIdConsumerManager.associate(discoveries); + session.setNote("discovery", discovered); + try + { + AuthRequest authReq = openIdConsumerManager.authenticate(discovered, returnURL); + + //Add in required attributes + authReq.addExtension(fetchRequest); + + String url = authReq.getDestinationUrl(true); + response.sendRedirect(url); + + request.getSession().setAttribute("STATE", STATES.AUTH.name()); + return false; + } + catch (Exception e) + { + throw new RuntimeException(e); + } + } + return false; + } + + @SuppressWarnings("unchecked") + public Principal processIncomingAuthResult(Request request, Response response, Realm realm) throws IOException + { + Principal principal = null; + Session session = request.getSessionInternal(false); + if(session == null) + throw new RuntimeException("wrong lifecycle: session was null"); + + // extract the parameters from the authentication response + // (which comes in as a HTTP request from the OpenID provider) + ParameterList responseParamList = new ParameterList(request.getParameterMap()); + // retrieve the previously stored discovery information + DiscoveryInformation discovered = (DiscoveryInformation) session.getNote("discovery"); + if(discovered == null) + throw new RuntimeException("discovered information was null"); + // extract the receiving URL from the HTTP request + StringBuffer receivingURL = request.getRequestURL(); + String queryString = request.getQueryString(); + if (queryString != null && queryString.length() > 0) + receivingURL.append("?").append(request.getQueryString()); + + // verify the response; ConsumerManager needs to be the same + // (static) instance used to place the authentication request + VerificationResult verification; + try + { + verification = openIdConsumerManager.verify(receivingURL.toString(), responseParamList, discovered); + } + catch (Exception e) + { + throw new RuntimeException(e); + } + + // examine the verification result and extract the verified identifier + Identifier identifier = verification.getVerifiedId(); + + if (identifier != null) + { + AuthSuccess authSuccess = (AuthSuccess) verification.getAuthResponse(); + + Map<String, List<String>> attributes = null; + if (authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) + { + FetchResponse fetchResp; + try + { + fetchResp = (FetchResponse) authSuccess.getExtension(AxMessage.OPENID_NS_AX); + } + catch (MessageException e) + { + throw new RuntimeException(e); + } + + attributes = fetchResp.getAttributes(); + } + + OpenIdPrincipal openIDPrincipal = createPrincipal(identifier.getIdentifier(), discovered.getOPEndpoint(), + attributes); + request.getSession().setAttribute("PRINCIPAL", openIDPrincipal); + + String principalName = openIDPrincipal.getName(); + cachedPrincipal.set(openIDPrincipal); + + if(isJBossEnv()) + { + cachedRoles.set(roles); + principal = realm.authenticate(principalName, EMPTY_PASSWORD); + } + else + { + //Create a Tomcat Generic Principal + principal = new GenericPrincipal(realm, principalName, null, roles, openIDPrincipal); + } + + if(trace) + log.trace("Logged in as:" + principal); + } + return principal; + } + + private OpenIdPrincipal createPrincipal(String identifier, URL openIdProvider, Map<String, List<String>> attributes) + { + return new OpenIdPrincipal(identifier, openIdProvider, attributes); + } + + private boolean isJBossEnv() + { + ClassLoader tcl = SecurityActions.getContextClassLoader(); + Class<?> clazz = null; + try + { + clazz = tcl.loadClass("org.jboss.system.Service"); + } + catch (ClassNotFoundException e) + { + } + if( clazz != null ) + return true; + return false; + } + + private void determineServiceUrl(String service) + { + openIdServiceUrl = Providers.GOOGLE.get(); + if(StringUtil.isNotNull(service)) + { + if("google".equals(service)) + openIdServiceUrl = Providers.GOOGLE.get(); + else if("yahoo".equals(service)) + openIdServiceUrl = Providers.YAHOO.get(); + else if("myspace".equals(service)) + openIdServiceUrl = Providers.MYSPACE.get(); + else if("myopenid".equals(service)) + openIdServiceUrl = Providers.MYOPENID.get(); + } + } +} \ No newline at end of file

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1246 - social/trunk/facebook/src/main/java/org/picketlink/social/facebook.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-22 14:54:06 -0400 (Thu, 22 Sep 2011) New Revision: 1246 Added: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookProcessor.java Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookLoginModule.java Log: refactor and clean fb integration Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java =================================================================== --- social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java 2011-09-22 05:19:29 UTC (rev 1245) +++ social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookAuthenticator.java 2011-09-22 18:54:06 UTC (rev 1246) @@ -22,18 +22,9 @@ package org.picketlink.social.facebook; import java.io.IOException; -import java.io.InputStreamReader; -import java.io.Reader; -import java.io.UnsupportedEncodingException; -import java.net.URL; -import java.net.URLConnection; -import java.net.URLDecoder; -import java.net.URLEncoder; import java.security.Principal; import java.util.ArrayList; -import java.util.HashMap; import java.util.List; -import java.util.Map; import java.util.StringTokenizer; import javax.servlet.http.HttpServletRequest; @@ -46,10 +37,7 @@ import org.apache.catalina.connector.Request; import org.apache.catalina.connector.Response; import org.apache.catalina.deploy.LoginConfig; -import org.apache.catalina.realm.GenericPrincipal; import org.apache.log4j.Logger; -import org.json.JSONException; -import org.json.JSONObject; /** * Component for sending login requests to Facebook. @@ -63,24 +51,19 @@ protected static Logger log = Logger.getLogger(FacebookAuthenticator.class); protected boolean trace = log.isTraceEnabled(); - public static ThreadLocal<Principal> cachedPrincipal = new ThreadLocal<Principal>(); - - public static ThreadLocal<List<String>> cachedRoles = new ThreadLocal<List<String>>(); - - protected FacebookUtil util = new FacebookUtil(FacebookConstants.SERVICE_URL); protected String returnURL; protected String clientID; protected String clientSecret; - protected String scope; + protected String scope = "email"; protected List<String> roles = new ArrayList<String>(); //Whether the authenticator has to to save and restore request protected boolean saveRestoreRequest = true; - public static String EMPTY_PASSWORD = "EMPTY"; - private enum STATES { AUTH, AUTHZ, FINISH}; + + protected FacebookProcessor processor; public void setReturnURL(String returnURL) { @@ -140,12 +123,14 @@ throw new IOException("Not of type Catalina response"); return authenticate((Request)request, (Response)response, loginConfig); } - - @Override + public boolean authenticate(Request request, Response response, LoginConfig loginConfig) throws IOException { if(trace) log.trace("authenticate"); + if(processor == null) + processor = new FacebookProcessor(clientID, clientSecret, scope, returnURL, roles); + HttpSession session = request.getSession(); String state = (String) session.getAttribute("STATE"); @@ -160,55 +145,24 @@ { this.saveRequest(request, request.getSessionInternal()); } - Map<String, String> params = new HashMap<String, String>(); - params.put(OAuthConstants.REDIRECT_URI_PARAMETER, this.returnURL); - params.put(OAuthConstants.CLIENT_ID_PARAMETER, this.clientID); - if (scope != null) - { - params.put(OAuthConstants.SCOPE_PARAMETER, scope); - } - String location = new StringBuilder(FacebookConstants.SERVICE_URL).append("?").append( - util.createQueryString(params)).toString(); - try - { - session.setAttribute("STATE", STATES.AUTH.name()); - if(trace) log.trace("Redirect:"+location); - response.sendRedirect(location); - return false; - } - catch (IOException e) - { - throw new RuntimeException(e); - } + return processor.initialInteraction(request, response); } //We have sent an auth request if( state.equals(STATES.AUTH.name())) { - return handleAuthStage(request, response); - + return processor.handleAuthStage(request, response); } - Principal facebookPrincipal = null; + //Principal facebookPrincipal = null; if( state.equals(STATES.AUTHZ.name())) - { - Principal principal = null; - facebookPrincipal = handleAuthenticationResponse(request, response); + { + Principal principal = processor.getPrincipal(request, response, context.getRealm()); - request.getSession().setAttribute("principal", facebookPrincipal); - cachedPrincipal.set(facebookPrincipal); + if(principal == null) + throw new RuntimeException("Principal was null. Maybe login modules need to be configured properly."); + String userName = principal.getName(); - if(isJBossEnv()) - { - cachedRoles.set(roles); - principal = context.getRealm().authenticate(facebookPrincipal.getName(), EMPTY_PASSWORD); - } - else - { - //Create a Tomcat Generic Principal - principal = new GenericPrincipal(getContainer().getRealm(), facebookPrincipal.getName(), null, roles, facebookPrincipal); - } - - request.getSessionInternal().setNote(Constants.SESS_USERNAME_NOTE, facebookPrincipal.getName()); + request.getSessionInternal().setNote(Constants.SESS_USERNAME_NOTE, userName); request.getSessionInternal().setNote(Constants.SESS_PASSWORD_NOTE, ""); request.setUserPrincipal(principal); @@ -216,208 +170,11 @@ { this.restoreRequest(request, request.getSessionInternal()); } - register(request, response, principal, Constants.FORM_METHOD, facebookPrincipal.getName(), ""); + register(request, response, principal, Constants.FORM_METHOD, userName, ""); request.getSession().setAttribute("STATE", STATES.FINISH.name()); return true; } return false; } - - protected void sendAuthorizeRequest(String returnUrl, HttpServletResponse response) - { - //String returnUri = util.getReturnUri(returnUrl); - String returnUri = returnUrl; - - Map<String, String> params = new HashMap<String, String>(); - params.put(OAuthConstants.REDIRECT_URI_PARAMETER, returnUri); - params.put(OAuthConstants.CLIENT_ID_PARAMETER, clientID); - if (scope != null) - { - params.put(OAuthConstants.SCOPE_PARAMETER, scope); - } - String location = new StringBuilder(FacebookConstants.AUTHENTICATION_ENDPOINT_URL).append("?").append( - util.createQueryString(params)).toString(); - try - { - response.sendRedirect(location); - } - catch (IOException e) - { - throw new RuntimeException(e); - } - } - - protected URLConnection sendAccessTokenRequest(String returnUrl, String authorizationCode, HttpServletResponse response) - { - String returnUri = returnURL; - - Map<String, String> params = new HashMap<String, String>(); - params.put(OAuthConstants.REDIRECT_URI_PARAMETER, returnUri); - params.put(OAuthConstants.CLIENT_ID_PARAMETER, clientID); - params.put(OAuthConstants.CLIENT_SECRET_PARAMETER, clientSecret); - params.put(OAuthConstants.CODE_PARAMETER, authorizationCode); - - String location = new StringBuilder(FacebookConstants.ACCESS_TOKEN_ENDPOINT_URL).append("?").append( - util.createQueryString(params)).toString(); - - try - { - if(trace) log.trace("AccessToken Request="+location); - URL url = new URL(location); - URLConnection connection = url.openConnection(); - return connection; - } - catch (IOException e) - { - throw new RuntimeException(e); - } - } - - - - protected Principal handleAuthenticationResponse(HttpServletRequest request, HttpServletResponse response) - { - String error = request.getParameter(OAuthConstants.ERROR_PARAMETER); - if (error != null) - { - throw new RuntimeException("error:" + error); - } - else - { - String returnUrl = returnURL; - String authorizationCode = request.getParameter(OAuthConstants.CODE_PARAMETER); - if (authorizationCode == null) - { - throw new RuntimeException("Authorization code parameter not found"); - } - - URLConnection connection = sendAccessTokenRequest(returnUrl, authorizationCode, response); - - Map<String, String> params = formUrlDecode(readUrlContent(connection)); - String accessToken = params.get(OAuthConstants.ACCESS_TOKEN_PARAMETER); - String expires = params.get(FacebookConstants.EXPIRES); - - if(trace) log.trace("Access Token=" + accessToken + " :: Expires=" + expires); - - if (accessToken == null) - { - throw new RuntimeException("No access token found"); - } - - return readInIdentity(request, response, accessToken, returnUrl); - } - } - - private boolean handleAuthStage(HttpServletRequest request, HttpServletResponse response) - { - request.getSession().setAttribute("STATE",STATES.AUTHZ.name()); - sendAuthorizeRequest(this.returnURL, response); - return false; - } - - - private boolean isJBossEnv() - { - ClassLoader tcl = SecurityActions.getContextClassLoader(); - Class<?> clazz = null; - try - { - clazz = tcl.loadClass("org.jboss.system.Service"); - } - catch (ClassNotFoundException e) - { - } - if( clazz != null ) - return true; - return false; - } - - private Principal readInIdentity(HttpServletRequest request, HttpServletResponse response, String accessToken, String returnUrl) - { - FacebookPrincipal facebookPrincipal = null; - try - { - String urlString = new StringBuilder(FacebookConstants.PROFILE_ENDPOINT_URL).append("?access_token=").append( - URLEncoder.encode(accessToken, "UTF-8")).toString(); - if(trace) log.trace("Profile read:"+urlString); - - URL profileUrl = new URL(urlString); - String profileContent = readUrlContent(profileUrl.openConnection()); - JSONObject jsonObject = new JSONObject(profileContent); - - facebookPrincipal = new FacebookPrincipal(); - facebookPrincipal.setAccessToken(accessToken); - facebookPrincipal.setId(jsonObject.getString("id")); - facebookPrincipal.setName(jsonObject.getString("name")); - facebookPrincipal.setFirstName(jsonObject.getString("first_name")); - facebookPrincipal.setLastName(jsonObject.getString("last_name")); - facebookPrincipal.setGender(jsonObject.getString("gender")); - facebookPrincipal.setTimezone(jsonObject.getString("timezone")); - facebookPrincipal.setLocale(jsonObject.getString("locale")); - if (jsonObject.getString("email") != null) - { - facebookPrincipal.setEmail(jsonObject.getString("email")); - } - } - catch (JSONException e) - { - throw new RuntimeException(e); - } - catch (IOException e) - { - throw new RuntimeException(e); - } - - return facebookPrincipal; - } - - private String readUrlContent(URLConnection connection) - { - StringBuilder result = new StringBuilder(); - try - { - Reader reader = new InputStreamReader(connection.getInputStream()); - char[] buffer = new char[50]; - int nrOfChars; - while ((nrOfChars = reader.read(buffer)) != -1) - { - result.append(buffer, 0, nrOfChars); - } - } - catch (IOException e) - { - throw new RuntimeException(e); - } - return result.toString(); - } - - private Map<String, String> formUrlDecode(String encodedData) - { - Map<String, String> params = new HashMap<String, String>(); - String[] elements = encodedData.split("&"); - for (String element : elements) - { - String[] pair = element.split("="); - if (pair.length == 2) - { - String paramName = pair[0]; - String paramValue; - try - { - paramValue = URLDecoder.decode(pair[1], "UTF-8"); - } - catch (UnsupportedEncodingException e) - { - throw new RuntimeException(e); - } - params.put(paramName, paramValue); - } - else - { - throw new RuntimeException("Unexpected name-value pair in response: " + element); - } - } - return params; - } } \ No newline at end of file Modified: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookLoginModule.java =================================================================== --- social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookLoginModule.java 2011-09-22 05:19:29 UTC (rev 1245) +++ social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookLoginModule.java 2011-09-22 18:54:06 UTC (rev 1246) @@ -33,7 +33,7 @@ import org.jboss.security.auth.spi.UsernamePasswordLoginModule; /** - * A {@link LoginModule} for JBoss environment + * A {@link LoginModule} for JBoss environment to support facebook authentication * @author Anil Saldhana * @since May 19, 2011 */ @@ -42,13 +42,13 @@ @Override protected Principal getIdentity() { - return FacebookAuthenticator.cachedPrincipal.get(); + return FacebookProcessor.cachedPrincipal.get(); } @Override protected String getUsersPassword() throws LoginException { - return FacebookAuthenticator.EMPTY_PASSWORD; + return FacebookProcessor.EMPTY_PASSWORD; } @Override @@ -56,7 +56,7 @@ { Group group = new SimpleGroup("Roles"); - List<String> roles = FacebookAuthenticator.cachedRoles.get(); + List<String> roles = FacebookProcessor.cachedRoles.get(); if(roles != null) { Added: social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookProcessor.java =================================================================== --- social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookProcessor.java (rev 0) +++ social/trunk/facebook/src/main/java/org/picketlink/social/facebook/FacebookProcessor.java 2011-09-22 18:54:06 UTC (rev 1246) @@ -0,0 +1,338 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2011, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.picketlink.social.facebook; + +import java.io.IOException; +import java.io.InputStreamReader; +import java.io.Reader; +import java.io.UnsupportedEncodingException; +import java.net.URL; +import java.net.URLConnection; +import java.net.URLDecoder; +import java.net.URLEncoder; +import java.security.Principal; +import java.util.ArrayList; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.StringTokenizer; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import javax.servlet.http.HttpSession; + +import org.apache.catalina.Realm; +import org.apache.catalina.connector.Request; +import org.apache.catalina.connector.Response; +import org.apache.catalina.realm.GenericPrincipal; +import org.apache.log4j.Logger; +import org.json.JSONException; +import org.json.JSONObject; + +/** + * Processor to perform Facebook interaction + * @author Anil Saldhana + * @since Sep 22, 2011 + */ +public class FacebookProcessor +{ + protected static Logger log = Logger.getLogger(FacebookProcessor.class); + protected boolean trace = log.isTraceEnabled(); + + protected FacebookUtil util = new FacebookUtil(FacebookConstants.SERVICE_URL); + + public static ThreadLocal<Principal> cachedPrincipal = new ThreadLocal<Principal>(); + + public static ThreadLocal<List<String>> cachedRoles = new ThreadLocal<List<String>>(); + public static String EMPTY_PASSWORD = "EMPTY"; + + protected List<String> roles = new ArrayList<String>(); + + public enum STATES { AUTH, AUTHZ, FINISH}; + + protected String clientID; + protected String clientSecret; + protected String scope; + private String returnURL; + + public FacebookProcessor(String clientID, String clientSecret, String scope, String returnURL, List<String> requiredRoles) + { + super(); + this.clientID = clientID; + this.clientSecret = clientSecret; + this.scope = scope; + this.returnURL = returnURL; + this.roles.addAll(requiredRoles); + } + + public void setRoleString(String roleStr) + { + if(roleStr == null) + throw new RuntimeException("Role String is null in configuration"); + StringTokenizer st = new StringTokenizer(roleStr, ","); + while(st.hasMoreElements()) + { + roles.add(st.nextToken()); + } + } + + public boolean initialInteraction(Request request, Response response) throws IOException + { + HttpSession session = request.getSession(); + Map<String, String> params = new HashMap<String, String>(); + params.put(OAuthConstants.REDIRECT_URI_PARAMETER, returnURL); + params.put(OAuthConstants.CLIENT_ID_PARAMETER, clientID); + + if (scope != null) + { + params.put(OAuthConstants.SCOPE_PARAMETER, scope); + } + + String location = new StringBuilder(FacebookConstants.SERVICE_URL).append("?").append( + util.createQueryString(params)).toString(); + try + { + session.setAttribute("STATE", STATES.AUTH.name()); + if(trace) log.trace("Redirect:"+location); + response.sendRedirect(location); + return false; + } + catch (IOException e) + { + throw new RuntimeException(e); + } + } + + public boolean handleAuthStage(HttpServletRequest request, HttpServletResponse response) + { + request.getSession().setAttribute("STATE",STATES.AUTHZ.name()); + sendAuthorizeRequest(this.returnURL, response); + return false; + } + + protected void sendAuthorizeRequest(String returnUrl, HttpServletResponse response) + { + String returnUri = returnUrl; + + Map<String, String> params = new HashMap<String, String>(); + params.put(OAuthConstants.REDIRECT_URI_PARAMETER, returnUri); + params.put(OAuthConstants.CLIENT_ID_PARAMETER, clientID); + if (scope != null) + { + params.put(OAuthConstants.SCOPE_PARAMETER, scope); + } + String location = new StringBuilder(FacebookConstants.AUTHENTICATION_ENDPOINT_URL).append("?").append( + util.createQueryString(params)).toString(); + try + { + response.sendRedirect(location); + } + catch (IOException e) + { + throw new RuntimeException(e); + } + } + + public Principal getPrincipal(Request request, Response response, Realm realm) + { + Principal principal = null; + Principal facebookPrincipal = handleAuthenticationResponse(request, response); + + request.getSession().setAttribute("principal", facebookPrincipal); + cachedPrincipal.set(facebookPrincipal); + + if(isJBossEnv()) + { + cachedRoles.set(roles); + principal = realm.authenticate(facebookPrincipal.getName(), EMPTY_PASSWORD); + } + else + { + //Create a Tomcat Generic Principal + principal = new GenericPrincipal(realm, facebookPrincipal.getName(), null, roles, facebookPrincipal); + } + return principal; + } + + protected Principal handleAuthenticationResponse(HttpServletRequest request, HttpServletResponse response) + { + String error = request.getParameter(OAuthConstants.ERROR_PARAMETER); + if (error != null) + { + throw new RuntimeException("error:" + error); + } + else + { + String returnUrl = returnURL; + String authorizationCode = request.getParameter(OAuthConstants.CODE_PARAMETER); + if (authorizationCode == null) + { + throw new RuntimeException("Authorization code parameter not found"); + } + + URLConnection connection = sendAccessTokenRequest(returnUrl, authorizationCode, response); + + Map<String, String> params = formUrlDecode(readUrlContent(connection)); + String accessToken = params.get(OAuthConstants.ACCESS_TOKEN_PARAMETER); + String expires = params.get(FacebookConstants.EXPIRES); + + if(trace) log.trace("Access Token=" + accessToken + " :: Expires=" + expires); + + if (accessToken == null) + { + throw new RuntimeException("No access token found"); + } + + return readInIdentity(request, response, accessToken, returnUrl); + } + } + + protected URLConnection sendAccessTokenRequest(String returnUrl, String authorizationCode, HttpServletResponse response) + { + String returnUri = returnURL; + + Map<String, String> params = new HashMap<String, String>(); + params.put(OAuthConstants.REDIRECT_URI_PARAMETER, returnUri); + params.put(OAuthConstants.CLIENT_ID_PARAMETER, clientID); + params.put(OAuthConstants.CLIENT_SECRET_PARAMETER, clientSecret); + params.put(OAuthConstants.CODE_PARAMETER, authorizationCode); + + String location = new StringBuilder(FacebookConstants.ACCESS_TOKEN_ENDPOINT_URL).append("?").append( + util.createQueryString(params)).toString(); + + try + { + if(trace) log.trace("AccessToken Request="+location); + URL url = new URL(location); + URLConnection connection = url.openConnection(); + return connection; + } + catch (IOException e) + { + throw new RuntimeException(e); + } + } + + private boolean isJBossEnv() + { + ClassLoader tcl = SecurityActions.getContextClassLoader(); + Class<?> clazz = null; + try + { + clazz = tcl.loadClass("org.jboss.system.Service"); + } + catch (ClassNotFoundException e) + { + } + if( clazz != null ) + return true; + return false; + } + + private Principal readInIdentity(HttpServletRequest request, HttpServletResponse response, String accessToken, String returnUrl) + { + FacebookPrincipal facebookPrincipal = null; + try + { + String urlString = new StringBuilder(FacebookConstants.PROFILE_ENDPOINT_URL).append("?access_token=").append( + URLEncoder.encode(accessToken, "UTF-8")).toString(); + if(trace) log.trace("Profile read:"+urlString); + + URL profileUrl = new URL(urlString); + String profileContent = readUrlContent(profileUrl.openConnection()); + JSONObject jsonObject = new JSONObject(profileContent); + + facebookPrincipal = new FacebookPrincipal(); + facebookPrincipal.setAccessToken(accessToken); + facebookPrincipal.setId(jsonObject.getString("id")); + facebookPrincipal.setName(jsonObject.getString("name")); + facebookPrincipal.setFirstName(jsonObject.getString("first_name")); + facebookPrincipal.setLastName(jsonObject.getString("last_name")); + facebookPrincipal.setGender(jsonObject.getString("gender")); + facebookPrincipal.setTimezone(jsonObject.getString("timezone")); + facebookPrincipal.setLocale(jsonObject.getString("locale")); + if (jsonObject.getString("email") != null) + { + facebookPrincipal.setEmail(jsonObject.getString("email")); + } + } + catch (JSONException e) + { + throw new RuntimeException(e); + } + catch (IOException e) + { + throw new RuntimeException(e); + } + + return facebookPrincipal; + } + + private String readUrlContent(URLConnection connection) + { + StringBuilder result = new StringBuilder(); + try + { + Reader reader = new InputStreamReader(connection.getInputStream()); + char[] buffer = new char[50]; + int nrOfChars; + while ((nrOfChars = reader.read(buffer)) != -1) + { + result.append(buffer, 0, nrOfChars); + } + } + catch (IOException e) + { + throw new RuntimeException(e); + } + return result.toString(); + } + + private Map<String, String> formUrlDecode(String encodedData) + { + Map<String, String> params = new HashMap<String, String>(); + String[] elements = encodedData.split("&"); + for (String element : elements) + { + String[] pair = element.split("="); + if (pair.length == 2) + { + String paramName = pair[0]; + String paramValue; + try + { + paramValue = URLDecoder.decode(pair[1], "UTF-8"); + } + catch (UnsupportedEncodingException e) + { + throw new RuntimeException(e); + } + params.put(paramName, paramValue); + } + else + { + throw new RuntimeException("Unexpected name-value pair in response: " + element); + } + } + return params; + } +} \ No newline at end of file

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1245 - in federation/trunk/picketlink-webapps: as7 and 69 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-22 01:19:29 -0400 (Thu, 22 Sep 2011) New Revision: 1245 Added: federation/trunk/picketlink-webapps/as7/ federation/trunk/picketlink-webapps/as7/assembly/ federation/trunk/picketlink-webapps/as7/assembly/bin.xml federation/trunk/picketlink-webapps/as7/assembly/pom.xml federation/trunk/picketlink-webapps/as7/assembly/src/ federation/trunk/picketlink-webapps/as7/assembly/src/main/ federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/ federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sp-jboss-beans.xml federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sts-jboss-beans.xml federation/trunk/picketlink-webapps/as7/employee-post/ federation/trunk/picketlink-webapps/as7/employee-post/pom.xml federation/trunk/picketlink-webapps/as7/employee-post/src/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/resources/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/careermap.jpg federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/employee-saml11/ federation/trunk/picketlink-webapps/as7/employee-saml11/pom.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/resources/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/careermap.jpg federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/employee/ federation/trunk/picketlink-webapps/as7/employee/pom.xml federation/trunk/picketlink-webapps/as7/employee/src/ federation/trunk/picketlink-webapps/as7/employee/src/main/ federation/trunk/picketlink-webapps/as7/employee/src/main/resources/ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/careermap.jpg federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/idp/ federation/trunk/picketlink-webapps/as7/idp/pom.xml federation/trunk/picketlink-webapps/as7/idp/src/ federation/trunk/picketlink-webapps/as7/idp/src/main/ federation/trunk/picketlink-webapps/as7/idp/src/main/resources/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/roles.properties federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/users.properties federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/hosted/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/hosted/index.jsp federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/error.jsp federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login-error.jsp federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login.jsp federation/trunk/picketlink-webapps/as7/pdp/ federation/trunk/picketlink-webapps/as7/pdp/pom.xml federation/trunk/picketlink-webapps/as7/pdp/src/ federation/trunk/picketlink-webapps/as7/pdp/src/main/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-01-top-level.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02a-CDA.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02b-N.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02c-N-PermCollections.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02d-prog-note.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02e-MA.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02f-emergency.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-03-N-RPS-virt-med-rec-role.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-04-N-PPS-PRD-004.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/himss-policy.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policyConfig.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/wsdl/ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/wsdl/SOAPSAMLXACMLPDP.wsdl federation/trunk/picketlink-webapps/as7/picketlink-sts/ federation/trunk/picketlink-webapps/as7/picketlink-sts/pom.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/picketlink-sts.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/sts_keystore.jks federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-wsse-server.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/lib/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/wsdl/ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/wsdl/PicketLinkSTS.wsdl federation/trunk/picketlink-webapps/as7/pom.xml federation/trunk/picketlink-webapps/as7/sales-post/ federation/trunk/picketlink-webapps/as7/sales-post/pom.xml federation/trunk/picketlink-webapps/as7/sales-post/src/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/MANIFEST.MF federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.properties federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/piechart.gif federation/trunk/picketlink-webapps/as7/sales-saml11/ federation/trunk/picketlink-webapps/as7/sales-saml11/pom.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/resources/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/lib/ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/piechart.gif federation/trunk/picketlink-webapps/as7/sales/ federation/trunk/picketlink-webapps/as7/sales/pom.xml federation/trunk/picketlink-webapps/as7/sales/src/ federation/trunk/picketlink-webapps/as7/sales/src/main/ federation/trunk/picketlink-webapps/as7/sales/src/main/resources/ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/context.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/jboss-deployment-structure.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/context.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/jboss-web.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/lib/ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-handlers.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-idfed.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/web.xml federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/error.jsp federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/index.jsp federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/login.jsp federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/logout.jsp federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/piechart.gif Modified: federation/trunk/picketlink-webapps/pom.xml Log: PLFED-208: add as7 webapps Added: federation/trunk/picketlink-webapps/as7/assembly/bin.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/assembly/bin.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/assembly/bin.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,53 @@ +<assembly> + <formats> + <format>zip</format> + </formats> + <includeBaseDirectory>false</includeBaseDirectory> + <files> + <file> + <source>${basedir}/../idp/target/idp.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../sales/target/sales.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../employee/target/employee.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../sales-post/target/sales-post.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../employee-post/target/employee-post.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../sales-saml11/target/sales-saml11.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../employee-saml11/target/employee-saml11.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../picketlink-sts/target/picketlink-sts.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + <file> + <source>${basedir}/../pdp/target/pdp.war</source> + <outputDirectory>picketlink</outputDirectory> + <fileMode>0444</fileMode> + </file> + </files> +</assembly> Added: federation/trunk/picketlink-webapps/as7/assembly/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/assembly/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/assembly/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,62 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-fed-parent</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../../parent</relativePath> + </parent> + <modelVersion>4.0.0</modelVersion> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-fed-webapps-as7-assembly</artifactId> + <packaging>pom</packaging> + <name>PicketLink Federation WebApps Samples- Assembly</name> + <url>http://www.picketlink.org/</url> + <description>PicketLink Federation</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-assembly-plugin</artifactId> + <version>2.1</version> + <executions> + <execution> + <phase>package</phase> + <goals> + <goal>attached</goal> + </goals> + </execution> + </executions> + <configuration> + <archive> + <manifestEntries> + <Specification-Title>PicketLink</Specification-Title> + <Specification-Version>${project.version}</Specification-Version> + <Specification-Vendor>Red Hat Middleware LLC</Specification-Vendor> + <Implementation-Title>JBoss Identity</Implementation-Title> + <Implementation-Version>${project.version}</Implementation-Version> + <Implementation-VendorId>org.jboss.security</Implementation-VendorId> + <Implementation-Vendor>Red Hat Middleware LLC</Implementation-Vendor> + <Implementation-URL>http://picketlink.org/</Implementation-URL> + </manifestEntries> + </archive> + <descriptors> + <descriptor>bin.xml</descriptor> + </descriptors> + </configuration> + <inherited>false</inherited> + </plugin> + </plugins> + </build> + +</project> Added: federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sp-jboss-beans.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sp-jboss-beans.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sp-jboss-beans.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<deployment xmlns="urn:jboss:bean-deployer:2.0"> + + <application-policy xmlns="urn:jboss:security-beans:1.0" name="sp"> + <authentication> + <login-module code = "org.picketlink.identity.federation.bindings.jboss.auth.SAML2LoginModule" + flag = "required" /> + </authentication> + </application-policy> + +</deployment> Property changes on: federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sp-jboss-beans.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sts-jboss-beans.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sts-jboss-beans.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/assembly/src/main/resources/picketlink-sts-jboss-beans.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,17 @@ +<?xml version="1.0" encoding="UTF-8"?> + +<deployment xmlns="urn:jboss:bean-deployer:2.0"> + +  + <application-policy xmlns="urn:jboss:security-beans:1.0" name="cache-test"> + <authentication> + <login-module code="org.picketlink.identity.federation.bindings.jboss.auth.SAML2STSLoginModule" flag="required"> + <module-option name="password-stacking">useFirstPass</module-option> + <module-option name="configFile">sts-config.properties</module-option> + <module-option name="cache.invalidation">true</module-option> + </login-module> + </authentication> + </application-policy> + +</deployment> + Added: federation/trunk/picketlink-webapps/as7/employee/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,39 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>employee-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Web Apps Employee</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>employee</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,8 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator</class-name> + </valve> + +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${employee.url::http://localhost:8080/employee/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PicketLink Employee Application</display-name> + <description> + Just a Test SP + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>EMPLOYEE Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat EMPLOYEE Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the EMPLOYEE Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/careermap.jpg =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/careermap.jpg ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,13 @@ +<div align="center"> +<h1>EmployeeDashboard</h1> +<br/> +Welcome to the Employee Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your cartoon of the day: +<br/> +<img src="careermap.jpg"/> +<br/> +<a href="?GLO=true">Click to LogOut</a> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/employee/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>employee-post-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Employee With Post</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>employee-post</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,8 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator</class-name> + </valve> + +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${employee-post.url::http://localhost:8080/employee-post/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PicketLink Employee Application</display-name> + <description> + Just a Test SP + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>EMPLOYEE Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat EMPLOYEE Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the EMPLOYEE Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/careermap.jpg =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/careermap.jpg ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,13 @@ +<div align="center"> +<h1>EmployeeDashboard</h1> +<br/> +Welcome to the Employee Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your cartoon of the day: +<br/> +<img src="careermap.jpg"/> +<br/> +<a href="?GLO=true">Click to LogOut</a> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,2 @@ + +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/employee-post/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,39 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>employee-saml11-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Web Apps Employee</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>employee-saml11</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,7 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SAML11SPRedirectFormAuthenticator</class-name> + </valve> +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${employee.url::http://localhost:8080/employee/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PicketLink Employee Application</display-name> + <description> + Just a Test SP + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>EMPLOYEE Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat EMPLOYEE Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the EMPLOYEE Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/careermap.jpg =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/careermap.jpg ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<div align="center"> +<h1>EmployeeDashboard</h1> +<br/> +Welcome to the Employee Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your cartoon of the day: +<br/> +<img src="careermap.jpg"/> +<br/> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/employee-saml11/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>idp-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Identity Provider</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>idp</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,8 @@ +<Context> + <Valve + className="org.picketlink.identity.federation.bindings.tomcat.idp.IDPSAMLDebugValve" /> + <Valve + className="org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve" + signOutgoingMessages="false" + ignoreIncomingSignatures="true"/> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/roles.properties =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/roles.properties (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/roles.properties 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +tomcat=manager,sales,employee Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/roles.properties ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/users.properties =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/users.properties (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/users.properties 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +tomcat=tomcat Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/classes/users.properties ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,8 @@ +<Context> + <Valve + className="org.picketlink.identity.federation.bindings.tomcat.idp.IDPSAMLDebugValve" /> + <Valve + className="org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve" + signOutgoingMessages="false" + ignoreIncomingSignatures="true"/> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,15 @@ +<jboss-web> + <security-domain>idp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name> + <param> + <param-name>signOutgoingMessages</param-name> + <param-value>false</param-value> + </param> + <param> + <param-name>ignoreIncomingSignatures</param-name> + <param-value>true</param-value> + </param> + </valve> + +</jboss-web> Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,6 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2IssuerTrustHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler"/> +</Handlers> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,6 @@ +<PicketLinkIDP xmlns="urn:picketlink:identity-federation:config:1.0" > +<IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> +<Trust> + <Domains>localhost,jboss.com,jboss.org,amazonaws.com</Domains> +</Trust> +</PicketLinkIDP> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,53 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>IDP</display-name> + <description> + IDP Web Application for the PicketLink project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Images</web-resource-name> + <url-pattern>/images/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>Manager command</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + <role-name>Sales</role-name> + <role-name>Employee</role-name> + </auth-constraint> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>PicketLink IDP Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/login-error.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <role-name>manager</role-name> + </security-role> + <security-role> + <role-name>Sales</role-name> + </security-role> + <security-role> + <role-name>Employee</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/hosted/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/hosted/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/hosted/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,11 @@ +<html> +<body> +Welcome to the Identity Provider from PicketLink. +<br/> +Dashboard links are: +<br/> +<a href="?TARGET=http%3A//localhost%3a8080/sales-saml11/">Sales</a> +<br/> +<a href="?TARGET=http%3A//localhost%3a8080/employee-saml11/">Employee</a> +</body> +</html> Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +Welcome to IDP! Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login-error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login-error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login-error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,6 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Login Error</font><hr> + +</body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login-error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/idp/src/main/webapp/jsp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>pdp-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink XACML PDP</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>XACML PDP Web Application for the PicketLink Project</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>pdp</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.jboss.security.xacml" /> + <module name="org.picketlink" /> + <module name="org.picketbox" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-01-top-level.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-01-top-level.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-01-top-level.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,114 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Top level policy set which combines the CDA and N confidentiality codes. + </Description> + <Target/> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel:emergency" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target/> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:emergency</PolicySetIdReference> + </PolicySet> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel:CDA" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target> + <Resources> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >UBA</AttributeValue> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:confidentiality-code" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:CDA</PolicySetIdReference> + </PolicySet> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel:MA" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides"> + <Target> + <Resources> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >MA</AttributeValue> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:confidentiality-code" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:MA</PolicySetIdReference> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:MA:default-to-permit" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"> + <Target/> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:MA" + Effect="Permit"> + <Description> + If a Deny was obtained for object above then set Permit by default. + </Description> + </Rule> + </Policy> + </PolicySet> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel:bus-rule" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target> + <Resources> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:progress-note</AttributeValue> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:progress-note</PolicySetIdReference> + </PolicySet> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:toplevel:N" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides"> + <Target/> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N</PolicySetIdReference> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N:PermCollections</PolicySetIdReference> + </PolicySet> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-01-top-level.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02a-CDA.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02a-CDA.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02a-CDA.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,62 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:CDA" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for the UBA confidentiality code. + </Description> + <Target/> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:CDA" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"> + <Target/> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:CDA:1" + Effect="Permit"> + <Description> + If the access subject is NOT one of those users which consent has + been removed, then permit. + </Description> + <Target/> + <Condition> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only"> + <SubjectAttributeDesignator + AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:dissented-subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:CDA:2" + Effect="Deny"> + <Description> + If a Permit was not obtained above then set Deny by default. + </Description> + </Rule> + <Obligations> +  +  +  + <Obligation + ObligationId="urn:va:xacml:2.0:interop:rsa8:obligation:privacy:constraint" + FulfillOn="Deny"/> + </Obligations> + </Policy> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02a-CDA.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02b-N.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02b-N.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02b-N.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for evaluating the subject:role attributes. + This implements an RBAC policy. This policy set matches + subject roles and refers to permission policy sets. + </Description> + <Target/> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:RPS:physician" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target> + <Subjects> + <Subject> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:role:hl7:physician</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + </Subject> + </Subjects> + </Target> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N:RPS:med-rec-vrole</PolicySetIdReference> + </PolicySet> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02b-N.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02c-N-PermCollections.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02c-N-PermCollections.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02c-N-PermCollections.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,106 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:PermCollections" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for evaluating the subject:hl7:permission attributes. + This implements an RBAC policy. This policy set matches + subject roles and refers to permission policy sets. + </Description> + <Target/> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:med-rec-perm-set" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides"> + <Target/> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:med-rec-perm-set-0" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target/> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N:RPS:med-rec-vrole</PolicySetIdReference> + </PolicySet> + <PolicySet + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:med-rec-perm-set-1" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target> + <Subjects> + <Subject> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-003</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-005</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-006</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-009</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-010</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-012</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + <SubjectMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:prd-017</AttributeValue> + <SubjectAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </SubjectMatch> + </Subject> + </Subjects> + </Target> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N:RPS:med-rec-vrole</PolicySetIdReference> + </PolicySet> + </PolicySet> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02c-N-PermCollections.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02d-prog-note.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02d-prog-note.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02d-prog-note.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,79 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:progress-note" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for the business rule for unsigned progress notes. + </Description> + <Target/> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:progress-note" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"> + <Target/> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:progress-note:sig" + Effect="Permit"> + <Description> + If the progress-note is signed allow any user to see it. If not signed + then only author may see it. + </Description> + <Target/> + <Condition> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >True</AttributeValue> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:progress-note:signed" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:progress-note:author" + Effect="Permit"> + <Description> + If a Permit was not obtained then subject must be author. + </Description> + <Target/> + <Condition> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only"> + <SubjectAttributeDesignator + AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:progress-note:author-subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:progress-note:deny-sig" + Effect="Deny"> + <Description> + If a Permit was not obtained above then set Deny by default. + </Description> + </Rule> + <Obligations> +  +  + <Obligation + ObligationId="urn:va:xacml:2.0:interop:rsa8:obligation:deny:unsigned:non-author" + FulfillOn="Deny"/> + </Obligations> + </Policy> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02d-prog-note.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02e-MA.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02e-MA.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02e-MA.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,67 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:MA" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for the MA confidentiality code. + </Description> + <Target/> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:MA" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Target/> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:MA:1" + Effect="Deny"> + <Description> + If the access subject is NOT one of those users which consent has + been removed, then deny. + Note: there is reverse logic here because the Obligation that denies + access to the user for this object must be issued when the user has + obtained a Permit. So, the caller of this policy must know to reverse + sense as well. + </Description> + <Target/> + <Condition> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only"> + <SubjectAttributeDesignator + AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + <ResourceAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:resource:hl7:radiology:dissented-subject-id" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:MA:2" + Effect="Permit"> + <Description> + If a Deny was not obtained above then set Permit by default. + </Description> + </Rule> + <Obligations> +  +  +  + <Obligation + ObligationId= + "urn:va:xacml:2.0:interop:rsa8:obligation:ma:privacy:constraint:radiology" + FulfillOn="Permit"/> + </Obligations> + </Policy> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02e-MA.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02f-emergency.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02f-emergency.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02f-emergency.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,101 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:emergency" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set to allow emergency access for non-facility subjects. + Returns Deny if user not from supported facility AND does not have emergency perm + Returns Permit if not from supported facility AND not denied access + Returns NotApplicable if plain old user from supported facility + </Description> + <Target/> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:emergency" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Target/> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:emergency:deny" + Effect="Deny"> + <Description> + If the subject is not from a supported facility AND +. if the subject does not have emergency permission THEN Deny access. + </Description> + <Target/> + <Condition> +  +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only"> + <SubjectAttributeDesignator + AttributeId= + "urn:oasis:names:tc:xacml:1.0:subject:locality" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + <EnvironmentAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:environment:locality" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Apply> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:hl7:pea-001</AttributeValue> + <SubjectAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:emergency:permit" + Effect="Permit"> + <Description> + If a Deny was not obtained above AND subject not part of a supported + facility then subject must have emergency permission. + </Description> + <Target/> + <Condition> +  + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:any-of"> + <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal"/> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-one-and-only"> + <SubjectAttributeDesignator + AttributeId= + "urn:oasis:names:tc:xacml:1.0:subject:locality" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + <EnvironmentAttributeDesignator + AttributeId= + "urn:va:xacml:2.0:interop:rsa8:environment:locality" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> +  +  + <Obligation + ObligationId="urn:va:xacml:2.0:interop:rsa8:obligation:emergency:permit" + FulfillOn="Permit"/> + </Obligations> + </Policy> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-02f-emergency.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-03-N-RPS-virt-med-rec-role.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-03-N-RPS-virt-med-rec-role.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-03-N-RPS-virt-med-rec-role.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,18 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId= + "urn:va:xacml:2.0:interop:rsa8:policysetid:N:RPS:med-rec-vrole" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set that points to the Permission PolicySet for medical record + resources and actions. + </Description> + <Target/> + <PolicySetIdReference + >urn:va:xacml:2.0:interop:rsa8:policysetid:N:PPS:PRD-004</PolicySetIdReference> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-03-N-RPS-virt-med-rec-role.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-04-N-PPS-PRD-004.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-04-N-PPS-PRD-004.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-04-N-PPS-PRD-004.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,180 @@ +<?xml version="1.0" encoding="UTF-8"?> +<PolicySet + xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os + http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:va:xacml:2.0:interop:rsa8:policysetid:N:PPS:PRD-004" + PolicyCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description> + Policy set for the PRD-004 permission. This permission allows + access to all medical records. + </Description> + <Target/> + <Policy + PolicyId="urn:va:xacml:2.0:interop:rsa8:policyid:N:PPS:PRD-004:1" + RuleCombiningAlgId= + "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"> + <Target> + <Resources> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:medical-record</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:demographics</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:chart</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:problemlist</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:procedures</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:laboratory</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:radiology</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:medications</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:vitals</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:progress-note</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + <Resource> + <ResourceMatch + MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue + DataType="http://www.w3.org/2001/XMLSchema#string" + >urn:va:xacml:2.0:interop:rsa8:resource:hl7:patientsearch</AttributeValue> + <ResourceAttributeDesignator + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:type" + DataType="http://www.w3.org/2001/XMLSchema#string"/> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:policy:N:PPS:PRD-004:1:rule:1" + Effect="Permit"> + <Condition> + +  +  +  + + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + +  +  +  + <ResourceAttributeDesignator + DataType="http://www.w3.org/2001/XMLSchema#string" + AttributeId="urn:va:xacml:2.0:interop:rsa8:resource:hl7:permission"/> + +  +  +  + <SubjectAttributeDesignator + DataType="http://www.w3.org/2001/XMLSchema#string" + AttributeId="urn:va:xacml:2.0:interop:rsa8:subject:hl7:permission"/> + + </Apply> + </Condition> + </Rule> + <Rule + RuleId="urn:va:xacml:2.0:interop:rsa8:rule:N:PPS:PRD-004:1:rule:2" + Effect="Deny"> + <Description> + If a Permit was not obtained above then set Deny by default. + </Description> + </Rule> + </Policy> +</PolicySet> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/XacmlPolicySet-04-N-PPS-PRD-004.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/himss-policy.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/himss-policy.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/himss-policy.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,601 @@ +<?xml version="1.0" encoding="utf-8"?> +<PolicySet xmlns="urn:oasis:names:tc:xacml:2.0:policy:schema:os" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:oasis:names:tc:xacml:2.0:policy:schema:os http://docs.oasis-open.org/xacml/access_control-xacml-2.0-policy-schema-o..." + PolicySetId="urn:oasis:names:tc:xspa:1.0" + PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Target /> + <PolicySet PolicySetId="urn:oasis:names:tc:xspa:1.0:org" PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description>Contains all organizational policies which are evaluated on all requests.</Description> + <Target /> + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:org:allowed:organizations" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + The organization denies the request if the subject is attempting to access + a resource and is not a member of the allowed organizations. + </Description> + <Target /> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:org:allowed:organizations:deny" Effect="Deny"> + <Description>Evaluates the allowed-organizations (if available) against the subject's locality.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:allowed-organizations" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:locality" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:allowed-organizations" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:org:hoursofoperations" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + The organization denies the request if the subject is attempting to access + the resource outside of the alloted time. + </Description> + <Target /> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:org:hoursofoperation:deny" Effect="Deny"> + <Description>Evaluates the environment time against the hours of operation start and end.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:or"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-greater-than-or-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-one-and-only"> + <EnvironmentAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:environment:current-time" DataType="http://www.w3.org/2001/XMLSchema#time" /> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-one-and-only"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:hoursofoperation:start" DataType="http://www.w3.org/2001/XMLSchema#time" /> + </Apply> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-less-than-or-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-one-and-only"> + <EnvironmentAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:environment:current-time" DataType="http://www.w3.org/2001/XMLSchema#time" /> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:time-one-and-only"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:hoursofoperation:end" DataType="http://www.w3.org/2001/XMLSchema#time" /> + </Apply> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:org:required:roles" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + The organization denies the request if the subject is attempting to access + a resource and they are not a member of the required role(s). + </Description> + <Target /> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:org:required:roles:deny" Effect="Deny"> + <Description>Evaluates the organization roles (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> +  + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:org.resource.permissions" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + The organization denies the request if the subject does not have adequate + permissions to access the resource. + </Description> + <Target /> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:org:resource.permissions:deny" Effect="Deny"> + <Description>Evaluates the required permissions (if available) against the subject's permissions.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:hl7:permission" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:org:hl7:permission" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:hl7:permission" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:org.catch-all" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"> + <Description></Description> + <Target /> + <Rule RuleId="" Effect="Permit"></Rule> + </Policy> + </PolicySet> + + <PolicySet PolicySetId="urn:oasis:names:tc:xspa:1.0:patient" PolicyCombiningAlgId="urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"> + <Description>These policies are patient consent directives and are invoked on medical-record requests.</Description> + <Target /> + +  +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:problems:dissenting-roles" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for problems from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:problems:dissenting-roles:permit" Effect="Permit"> + <Description>Evaluates the dissenting-roles for problems (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-role" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:medications:dissenting-roles" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for medications from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:medications:dissenting-roles:permit" Effect="Permit"> + <Description>Evaluates the dissenting-roles for medications (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-role" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:alerts:dissenting-roles" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request alerts from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:alerts:dissenting-roles:permit" Effect="Permit"> + <Description>Evaluates the dissenting-roles for alerts (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-role" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:immunizations:dissenting-roles" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for immunizations from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:immunizations:dissenting-roles:permit" Effect="Permit"> + <Description>Evaluates the dissenting-roles for immunizations (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-role" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> + +  +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:problems:dissenting-subject-ids" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for problems from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:problems:dissenting-subject-ids:permit" Effect="Permit"> + <Description>Evaluates the dissenting-subject-id's for problems (if available) against the subject's NPI.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:npi" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Problems:dissenting-subject-id" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:medications:dissenting-subject-ids" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for medications from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:medications:dissenting-subject-ids:permit" Effect="Permit"> + <Description>Evaluates the dissenting-subject-id's for medications (if available) against the subject's NPI.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:npi" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Medications:dissenting-subject-id" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:alerts:dissenting-subject-ids" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for alerts from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:alerts:dissenting-subject-ids:permit" Effect="Permit"> + <Description>Evaluates the dissenting-subject-id's for alerts (if available) against the subject's NPI.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:npi" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Alerts:dissenting-subject-id" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:immunizations:dissenting-subject-ids" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request for immunizations from the subject if the NPI is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:immunizations:dissenting-subject-ids:permit" Effect="Permit"> + <Description>Evaluates the dissenting-subject-id's for immunizations (if available) against the subject's NPI.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:npi" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + <Obligations> + <Obligation ObligationId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:Immunizations:dissenting-subject-id" FulfillOn="Permit"></Obligation> + </Obligations> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:patient:allowed:organizations" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request from the subject if their locality is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:patient:allowed:organizations:deny" Effect="Deny"> + <Description>Evaluates the allowed-organizations (if available) against the subject's locality.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:allowed-organizations" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:locality" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:allowed-organizations" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:dissenting:role" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request from the subject if their role is not permitted by the patient. + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:patient:dissenting:roles:deny" Effect="Deny"> + <Description>Evaluates the dissenting-role (if available) against the subject's role.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:dissenting-role" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0:resource:patient:dissenting-subject-ids" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request from the subject if the NPI is not permitted by the patient. + </Description> + <Target /> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0:resource:patient:masked:problems:dissenting-subject-ids:deny" Effect="Deny"> + <Description>Evaluates the dissenting-subject-id (if available) against the subject's NPI.</Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:not"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:integer-equal"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-bag-size"> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#integer">0</AttributeValue> + </Apply> + </Apply> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-subset"> + <SubjectAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:subject:npi" DataType="http://www.w3.org/2001/XMLSchema#string" /> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:patient:dissenting-subject-id" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + +  + <Policy PolicyId="urn:oasis:names:tc:xspa:1.0.resource:patient:hl7:confidentiality-codes" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"> + <Description> + Denies the request from the subject if the confidentiality code is set to "Sensitive". This policy + is acting as the "Catch-All". + </Description> + <Target> + <Resources> + <Resource> + <ResourceMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0:resource:hl7:type" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </ResourceMatch> + </Resource> + </Resources> + </Target> + <Rule RuleId="urn:oasis:names:tc:xspa:1.0.resource:patient:hl7:confidentiality-code:deny" Effect="Deny"> + <Description>Evaluates the HL7 confidentiality-code.</Description> + <Target /> + <Condition> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:and"> + <Apply FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-is-in"> + <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">S</AttributeValue> + <ResourceAttributeDesignator AttributeId="urn:oasis:names:tc:xspa:1.0.resource:patient:hl7:confidentiality-code" DataType="http://www.w3.org/2001/XMLSchema#string" /> + </Apply> + </Apply> + </Condition> + </Rule> + </Policy> + </PolicySet> +</PolicySet> Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policies/himss-policy.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policyConfig.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policyConfig.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policyConfig.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,11 @@ +<ns:jbosspdp xmlns:ns="urn:jboss:xacml:2.0"> + <ns:Policies> + <ns:PolicySet> + <ns:Location>policies/himss-policy.xml</ns:Location> + </ns:PolicySet> + </ns:Policies> + <ns:Locators> + <ns:Locator Name="org.jboss.security.xacml.locators.JBossPolicySetLocator"> + </ns:Locator> + </ns:Locators> +</ns:jbosspdp> Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/classes/policyConfig.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,40 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>PDP Endpoint</display-name> + <description> + XACML PDP Web Application for the PicketLink project + </description> + + <context-param> + <param-name>debug</param-name> + <param-value>false</param-value> + </context-param> + + + <servlet> + <servlet-name>SOAPServlet</servlet-name> + <servlet-class>org.picketlink.identity.federation.bindings.servlets.SOAPSAMLXACMLServlet</servlet-class> +  + <init-param> + <param-name>issuer</param-name> + <param-value>redhatPdpEntity</param-value> + </init-param> + <init-param> + <param-name>debug</param-name> + <param-value>true</param-value> + </init-param> + </servlet> + + <servlet> + <servlet-name>SOAPSAMLXACMLPDPServlet</servlet-name> + <servlet-class>org.picketlink.identity.federation.core.pdp.SOAPSAMLXACMLPDP</servlet-class> + </servlet> + <servlet-mapping> + <servlet-name>SOAPSAMLXACMLPDPServlet</servlet-name> + <url-pattern>/SOAPSAMLXACMLPDP</url-pattern> + </servlet-mapping> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/wsdl/SOAPSAMLXACMLPDP.wsdl =================================================================== --- federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/wsdl/SOAPSAMLXACMLPDP.wsdl (rev 0) +++ federation/trunk/picketlink-webapps/as7/pdp/src/main/webapp/WEB-INF/wsdl/SOAPSAMLXACMLPDP.wsdl 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,51 @@ +<?xml version="1.0"?> +<wsdl:definitions name="SOAPSAMLXACMLPDP" targetNamespace="urn:picketlink:identity-federation:pdp" + xmlns:tns="urn:picketlink:identity-federation:pdp" + xmlns:xsd="http://www.w3.org/2001/XMLSchema" + xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" + xmlns:wsap10="http://www.w3.org/2006/05/addressing/wsdl" + xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/"> + <wsdl:types> + <xs:schema targetNamespace="urn:picketlink:identity-federation:pdp" + xmlns:tns="urn:picketlink:identity-federation:pdp" + xmlns:xs="http://www.w3.org/2001/XMLSchema" + version="1.0" elementFormDefault="qualified"> + <xs:element name="MessageBody"> + <xs:complexType> + <xs:sequence> + <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##any"/> + </xs:sequence> + </xs:complexType> + </xs:element> + </xs:schema> + </wsdl:types> + <wsdl:message name="Authorize"> + <wsdl:part name="authorizeMessage" element="tns:MessageBody"/> + </wsdl:message> + <wsdl:message name="AuthorizeResponse"> + <wsdl:part name="authorizerMessage" element="tns:MessageBody"/> + </wsdl:message> + <wsdl:portType name="SOAPSAMLXACMLPort"> + <wsdl:operation name="Authorize"> + <wsdl:input wsap10:Action="http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue" message="tns:Authorize"/> + <wsdl:output wsap10:Action="http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue" message="tns:AuthorizeResponse"/> + </wsdl:operation> + </wsdl:portType> + <wsdl:binding name="PDPBinding" type="tns:SOAPSAMLXACMLPort"> + <soap12:binding transport="http://schemas.xmlsoap.org/soap/http"/> + <wsdl:operation name="Authorize"> + <soap12:operation soapAction="http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue" style="document"/> + <wsdl:input> + <soap12:body use="literal"/> + </wsdl:input> + <wsdl:output> + <soap12:body use="literal"/> + </wsdl:output> + </wsdl:operation> + </wsdl:binding> + <wsdl:service name="SOAPSAMLXACMLPDP"> + <wsdl:port name="SOAPSAMLXACMLPort" binding="tns:PDPBinding"> + <soap12:address location="http://localhost:8080/SOAPSAMLXACMLPDP"/> + </wsdl:port> + </wsdl:service> +</wsdl:definitions> \ No newline at end of file Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,39 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>picketlink-sts-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Security Token Service</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>picketlink-sts</warName> +  + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/picketlink-sts.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/picketlink-sts.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/picketlink-sts.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,24 @@ +<PicketLinkSTS xmlns="urn:picketlink:identity-federation:config:1.0" + STSName="PicketLinkSTS" TokenTimeout="7200" EncryptToken="false"> + <KeyProvider ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager"> + <Auth Key="KeyStoreURL" Value="sts_keystore.jks"/> + <Auth Key="KeyStorePass" Value="testpass"/> + <Auth Key="SigningKeyAlias" Value="sts"/> + <Auth Key="SigningKeyPass" Value="keypass"/> + <ValidatingAlias Key="http://services.testcorp.org/provider1" Value="service1"/> + </KeyProvider> + <TokenProviders> + <TokenProvider ProviderClass="org.picketlink.identity.federation.core.wstrust.plugins.saml.SAML11TokenProvider" + TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1" + TokenElement="Assertion" + TokenElementNS="urn:oasis:names:tc:SAML:1.0:assertion"/> + <TokenProvider ProviderClass="org.picketlink.identity.federation.core.wstrust.plugins.saml.SAML20TokenProvider" + TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" + TokenElement="Assertion" + TokenElementNS="urn:oasis:names:tc:SAML:2.0:assertion"/> + </TokenProviders> + <ServiceProviders> + <ServiceProvider Endpoint="http://services.testcorp.org/provider1" TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" + TruststoreAlias="service1"/> + </ServiceProviders> +</PicketLinkSTS> Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/sts_keystore.jks =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/resources/sts_keystore.jks ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,5 @@ +<?xml version="1.0" encoding="UTF-8"?> + +<jboss-web> + <security-domain>jmx-console</security-domain> +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-wsse-server.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-wsse-server.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-wsse-server.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,8 @@ +<?xml version="1.0" encoding="UTF-8"?> + +<jboss-ws-security xmlns="http://www.jboss.com/ws-security/config" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://www.jboss.com/ws-security/config http://www.jboss.com/ws-security/schema/jboss-ws-security_1_0.xsd"> + <config> + <requires/> + </config> +</jboss-ws-security> Property changes on: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/jboss-wsse-server.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,39 @@ +<?xml version="1.0"?> +<!DOCTYPE web-app PUBLIC + "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" + "http://java.sun.com/dtd/web-app_2_3.dtd"> + +<web-app> + <servlet> + <servlet-name>PicketLinkSTS</servlet-name> + <servlet-class>org.picketlink.identity.federation.core.wstrust.PicketLinkSTS</servlet-class> + </servlet> + <servlet-mapping> + <servlet-name>PicketLinkSTS</servlet-name> + <url-pattern>/*</url-pattern> + </servlet-mapping> + + <security-constraint> + <web-resource-collection> + <web-resource-name>PicketLinkSTSService</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>JBossAdmin</role-name> + <role-name>STSClient</role-name> + </auth-constraint> + </security-constraint> + + <login-config> + <auth-method>BASIC</auth-method> + <realm-name>PicketLinkSTSRealm</realm-name> + </login-config> + + <security-role> + <role-name>JBossAdmin</role-name> + </security-role> + <security-role> + <role-name>STSClient</role-name> + </security-role> + +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/wsdl/PicketLinkSTS.wsdl =================================================================== --- federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/wsdl/PicketLinkSTS.wsdl (rev 0) +++ federation/trunk/picketlink-webapps/as7/picketlink-sts/src/main/webapp/WEB-INF/wsdl/PicketLinkSTS.wsdl 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,51 @@ +<?xml version="1.0"?> +<wsdl:definitions name="PicketLinkSTS" targetNamespace="urn:picketlink:identity-federation:sts" + xmlns:tns="urn:picketlink:identity-federation:sts" + xmlns:xsd="http://www.w3.org/2001/XMLSchema" + xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" + xmlns:wsap10="http://www.w3.org/2006/05/addressing/wsdl" + xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/"> + <wsdl:types> + <xs:schema targetNamespace="urn:picketlink:identity-federation:sts" + xmlns:tns="urn:picketlink:identity-federation:sts" + xmlns:xs="http://www.w3.org/2001/XMLSchema" + version="1.0" elementFormDefault="qualified"> + <xs:element name="MessageBody"> + <xs:complexType> + <xs:sequence> + <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##any"/> + </xs:sequence> + </xs:complexType> + </xs:element> + </xs:schema> + </wsdl:types> + <wsdl:message name="RequestSecurityToken"> + <wsdl:part name="rstMessage" element="tns:MessageBody"/> + </wsdl:message> + <wsdl:message name="RequestSecurityTokenResponse"> + <wsdl:part name="rstrMessage" element="tns:MessageBody"/> + </wsdl:message> + <wsdl:portType name="SecureTokenService"> + <wsdl:operation name="IssueToken"> + <wsdl:input wsap10:Action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue" message="tns:RequestSecurityToken"/> + <wsdl:output wsap10:Action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTR/Issue" message="tns:RequestSecurityTokenResponse"/> + </wsdl:operation> + </wsdl:portType> + <wsdl:binding name="STSBinding" type="tns:SecureTokenService"> + <soap12:binding transport="http://schemas.xmlsoap.org/soap/http"/> + <wsdl:operation name="IssueToken"> + <soap12:operation soapAction="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue" style="document"/> + <wsdl:input> + <soap12:body use="literal"/> + </wsdl:input> + <wsdl:output> + <soap12:body use="literal"/> + </wsdl:output> + </wsdl:operation> + </wsdl:binding> + <wsdl:service name="PicketLinkSTS"> + <wsdl:port name="PicketLinkSTSPort" binding="tns:STSBinding"> + <soap12:address location="http://localhost:8080/picketlink-sts/PicketLinkSTS"/> + </wsdl:port> + </wsdl:service> +</wsdl:definitions> Added: federation/trunk/picketlink-webapps/as7/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,37 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-fed-parent</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../../parent</relativePath> + </parent> + <modelVersion>4.0.0</modelVersion> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <packaging>pom</packaging> + <name>PicketLink Federation Web Applications for JBoss AS7++</name> + <url>http://labs.jboss.org/portal/jbosssecurity/</url> + <description>PicketLink Web Applications contains the web + applications for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <modules> + <module>sales</module> + <module>employee</module> + <module>sales-post</module> + <module>employee-post</module> + <module>sales-saml11</module> + <module>employee-saml11</module> + <module>idp</module> + <module>picketlink-sts</module> + <module>pdp</module> + <module>assembly</module> + </modules> +</project> Added: federation/trunk/picketlink-webapps/as7/sales/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>sales-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Sales</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>sales</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,3 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,5 @@ +<Context> +  + <Valve className="org.apache.catalina.valves.RequestDumperValve" /> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator" /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,7 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SPRedirectFormAuthenticator</class-name> + </valve> +</jboss-web> Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${sales.url::http://localhost:8080/sales/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>Fedbridge Test SALES Application</display-name> + <description> + Just a Test SP for Fedbridge Project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>SALES Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat SALES Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the Manager Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,14 @@ +<div align="center"> +<h1>SalesTool</h1> +<br/> +Welcome to the Sales Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your sales chart: +<br/> +<img src="piechart.gif"/> + +<br/> +<a href="?GLO=true">Click to LogOut</a> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/piechart.gif =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/sales/src/main/webapp/piechart.gif ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/sales-post/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>sales-post-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Sales With Post</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>sales-post</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/MANIFEST.MF =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/MANIFEST.MF (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/MANIFEST.MF 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,6 @@ +Manifest-Version: 1.0 +Archiver-Version: Plexus Archiver +Created-By: Apache Maven +Built-By: anil +Build-Jdk: 1.6.0_16 + Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/MANIFEST.MF ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.properties =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.properties (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.properties 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,5 @@ +#Generated by Maven +#Wed Mar 17 14:09:48 CDT 2010 +version=1.0.3.CR2 +groupId=org.picketlink +artifactId=sales Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.properties ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps</artifactId> + <version>1.0.3.CR2</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>sales</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Sales</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>sales</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/META-INF/maven/org.picketlink/sales/pom.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator" + /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,7 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator</class-name> + </valve> +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${sales-post.url::http://localhost:8080/sales-post/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>Fedbridge Test SALES Application</display-name> + <description> + Just a Test SP for Fedbridge Project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>SALES Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat SALES Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the Manager Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,14 @@ +<div align="center"> +<h1>SalesTool</h1> +<br/> +Welcome to the Sales Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your sales chart: +<br/> +<img src="piechart.gif"/> + +<br/> +<a href="?GLO=true">Click to LogOut</a> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/piechart.gif =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/sales-post/src/main/webapp/piechart.gif ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Added: federation/trunk/picketlink-webapps/as7/sales-saml11/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/pom.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,38 @@ +<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> + <parent> + <groupId>org.picketlink</groupId> + <artifactId>picketlink-federation-webapps-as7</artifactId> + <version>2.0.2-SNAPSHOT</version> + <relativePath>../</relativePath> + </parent> + + <modelVersion>4.0.0</modelVersion> + <artifactId>sales-saml11-as7</artifactId> + <packaging>war</packaging> + <name>PicketLink Federation Sales</name> + <url>http://labs.jboss.org/portal/picketlink/</url> + <description>PicketLink Samples contains the samples for Federated Identity Needs.</description> + <licenses> + <license> + <name>lgpl</name> + <url>http://repository.jboss.com/licenses/lgpl.txt</url> + </license> + </licenses> + <organization> + <name>JBoss Inc.</name> + <url>http://www.jboss.org</url> + </organization> + <build> + <plugins> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-war-plugin</artifactId> + <version>2.0.2</version> + <configuration> + <warName>sales-saml11</warName> + <warSourceExcludes>WEB-INF/lib/*.jar</warSourceExcludes> + </configuration> + </plugin> + </plugins> + </build> +</project> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/pom.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,3 @@ +<Context> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SAML11SPRedirectFormAuthenticator" /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/META-INF/jboss-deployment-structure.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,10 @@ +<jboss-deployment-structure> + + <deployment> +  + <dependencies> + <module name="org.picketlink" /> + </dependencies> + </deployment> +</jboss-deployment-structure> + Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/context.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/context.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/context.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,5 @@ +<Context> +  + <Valve className="org.apache.catalina.valves.RequestDumperValve" /> + <Valve className="org.picketlink.identity.federation.bindings.tomcat.sp.SAML11SPRedirectFormAuthenticator" /> +</Context> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/context.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/jboss-web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/jboss-web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/jboss-web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,7 @@ +<?xml version="1.0" encoding="UTF-8"?> +<jboss-web> + <security-domain>sp</security-domain> + <valve> + <class-name>org.picketlink.identity.federation.bindings.tomcat.sp.SAML11SPRedirectFormAuthenticator</class-name> + </valve> +</jboss-web> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/jboss-web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<Handlers xmlns="urn:picketlink:identity-federation:handler:config:1.0"> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler"/> + <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/> +</Handlers> \ No newline at end of file Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-handlers.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,4 @@ +<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:1.0" ServerEnvironment="tomcat"> + <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL> + <ServiceURL>${sales.url::http://localhost:8080/sales/}</ServiceURL> +</PicketLinkSP> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/picketlink-idfed.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/web.xml =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/web.xml (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/web.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,48 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<web-app xmlns="http://java.sun.com/xml/ns/javaee" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" + version="2.5"> + + <display-name>Fedbridge Test SALES Application</display-name> + <description> + Just a Test SP for Fedbridge Project + </description> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>SALES Application</web-resource-name> + <url-pattern>/*</url-pattern> + </web-resource-collection> + <auth-constraint> + <role-name>manager</role-name> + </auth-constraint> + </security-constraint> + +  + <security-constraint> + <web-resource-collection> + <web-resource-name>freezone</web-resource-name> + <url-pattern>/freezone/*</url-pattern> + </web-resource-collection> + </security-constraint> + +  + <login-config> + <auth-method>FORM</auth-method> + <realm-name>Tomcat SALES Application</realm-name> + <form-login-config> + <form-login-page>/jsp/login.jsp</form-login-page> + <form-error-page>/jsp/loginerror.jsp</form-error-page> + </form-login-config> + </login-config> + +  + <security-role> + <description> + The role that is required to log in to the Manager Application + </description> + <role-name>manager</role-name> + </security-role> +</web-app> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/WEB-INF/web.xml ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/error.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/error.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/error.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,12 @@ +<html> <head> <title>Error!</title></head> +<body> + +<font size='4' color='red'> + The username and password you supplied are not valid. +</p> +Click <a href='<%= response.encodeURL("login.jsp") %>'>here</a> +to retry login + +</body> +</form> +</html> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/error.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/index.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/index.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/index.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,13 @@ +<div align="center"> +<h1>SalesTool</h1> +<br/> +Welcome to the Sales Tool, <%=request.getUserPrincipal().getName()%> + +<br/> +Here is your sales chart: +<br/> +<img src="piechart.gif"/> + +<br/> + +</div> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/index.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/login.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/login.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/login.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1,16 @@ +<html><head><title>Login Page</title></head> +<body> +<font size='5' color='blue'>Please Login</font><hr> + +<form action='j_security_check' method='post'> +<table> + <tr><td>Name:</td> + <td><input type='text' name='j_username'></td></tr> + <tr><td>Password:</td> + <td><input type='password' name='j_password' size='8'></td> + </tr> +</table> +<br> + <input type='submit' value='login'> +</form></body> + </html> Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/login.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/logout.jsp =================================================================== --- federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/logout.jsp (rev 0) +++ federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/logout.jsp 2011-09-22 05:19:29 UTC (rev 1245) @@ -0,0 +1 @@ +You are logged out. Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/logout.jsp ___________________________________________________________________ Added: svn:executable + * Added: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/piechart.gif =================================================================== (Binary files differ) Property changes on: federation/trunk/picketlink-webapps/as7/sales-saml11/src/main/webapp/piechart.gif ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream Modified: federation/trunk/picketlink-webapps/pom.xml =================================================================== --- federation/trunk/picketlink-webapps/pom.xml 2011-09-22 05:02:27 UTC (rev 1244) +++ federation/trunk/picketlink-webapps/pom.xml 2011-09-22 05:19:29 UTC (rev 1245) @@ -42,9 +42,7 @@ <module>metadata</module> <module>picketlink-sts</module> <module>pdp</module> -  <module>assembly</module> + <module>as7</module> </modules> </project>

12 years, 7 months

1
0
0 / 0

Picketlink SVN: r1243 - in product/trunk: parent and 5 other directories.

by picketlink-commits＠lists.jboss.org

Author: anil.saldhana(a)jboss.com Date: 2011-09-19 17:39:19 -0400 (Mon, 19 Sep 2011) New Revision: 1243 Modified: product/trunk/parent/pom.xml product/trunk/picketlink-core/pom.xml product/trunk/picketlink-webapps/idp/pom.xml product/trunk/picketlink-webapps/pdp/pom.xml product/trunk/picketlink-webapps/picketlink-sts/pom.xml product/trunk/picketlink-webapps/pom.xml product/trunk/pom.xml Log: PLFED-234: next 2.0.2 Modified: product/trunk/parent/pom.xml =================================================================== --- product/trunk/parent/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/parent/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -8,7 +8,7 @@ <groupId>org.picketlink.product</groupId> <artifactId>picketlink-fed-parent</artifactId> <packaging>pom</packaging> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <name>PicketLink Federation- Parent</name> <url>http://labs.jboss.org/portal/picketlink/</url> <description>PicketLink is a cross-cutting project that handles identity needs for the JEMS projects</description> @@ -23,8 +23,8 @@ <url>http://www.jboss.org</url> </organization> <scm> - <connection>scm:svn:http://anonsvn.jboss.org/repos/picketlink/product/tags/2.0.1.alpha1</connection> - <developerConnection>scm:svn:https://svn.jboss.org/repos/picketlink/product/tags/2.0.1.alpha1</developerConnection> + <connection>scm:svn:http://anonsvn.jboss.org/repos/picketlink/product/tags/2.0.2-SNAP...</connection> + <developerConnection>scm:svn:https://svn.jboss.org/repos/picketlink/product/tags/2.0.2-SNAPSHO...</developerConnection> </scm> <build> Modified: product/trunk/picketlink-core/pom.xml =================================================================== --- product/trunk/picketlink-core/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/picketlink-core/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-fed-parent</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>../parent</relativePath> </parent> <modelVersion>4.0.0</modelVersion> Modified: product/trunk/picketlink-webapps/idp/pom.xml =================================================================== --- product/trunk/picketlink-webapps/idp/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/picketlink-webapps/idp/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-federation-webapps</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>../</relativePath> </parent> Modified: product/trunk/picketlink-webapps/pdp/pom.xml =================================================================== --- product/trunk/picketlink-webapps/pdp/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/picketlink-webapps/pdp/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-federation-webapps</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>../</relativePath> </parent> Modified: product/trunk/picketlink-webapps/picketlink-sts/pom.xml =================================================================== --- product/trunk/picketlink-webapps/picketlink-sts/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/picketlink-webapps/picketlink-sts/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-federation-webapps</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>../</relativePath> </parent> Modified: product/trunk/picketlink-webapps/pom.xml =================================================================== --- product/trunk/picketlink-webapps/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/picketlink-webapps/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-fed-parent</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>../parent</relativePath> </parent> <modelVersion>4.0.0</modelVersion> Modified: product/trunk/pom.xml =================================================================== --- product/trunk/pom.xml 2011-09-19 21:28:56 UTC (rev 1242) +++ product/trunk/pom.xml 2011-09-19 21:39:19 UTC (rev 1243) @@ -2,7 +2,7 @@ <parent> <groupId>org.picketlink.product</groupId> <artifactId>picketlink-fed-parent</artifactId> - <version>2.0.1</version> + <version>2.0.2-SNAPSHOT</version> <relativePath>parent</relativePath> </parent> <modelVersion>4.0.0</modelVersion>

12 years, 7 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

picketlink-commits September 2011