ws/security/SessionContextStatement.java

a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster/**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The contents of this file are subject to the terms
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * of the Common Development and Distribution License
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * (the License). You may not use this file except in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * compliance with the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * You can obtain a copy of the License at
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * https://opensso.dev.java.net/public/CDDLv1.0.html or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * opensso/legal/CDDLv1.0.txt
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * See the License for the specific language governing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * permission and limitations under the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * When distributing Covered Code, include this CDDL
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Header Notice in each file and include the License file
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * at opensso/legal/CDDLv1.0.txt.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * If applicable, add the following below the CDDL Header,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * with the fields enclosed by brackets [] replaced by
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * your own identifying information:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * "Portions Copyrighted [year] [name of copyright owner]"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * $Id: SessionContextStatement.java,v 1.2 2008/06/25 05:47:22 qcheng Exp $
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterpackage com.sun.identity.liberty.ws.security;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.federation.common.IFSConstants;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.liberty.ws.common.wsse.WSSEConstants;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.assertion.Subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.assertion.SubjectStatement;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLConstants;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLException;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLRequesterException;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLUtils;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.Element;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.Node;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.NodeList;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster/**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The <code>SessionContextStatement</code> element conveys session status
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * of an entity to another system entity within the body of an
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * <code>&lt;saml:assertion&gt;</code> element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * @supported.all.api
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterpublic class SessionContextStatement extends SubjectStatement {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * The Statement is an Session Context Statement.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public final static int SESSIONCONTEXT_STATEMENT = 5;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    protected ProxySubject _proxySubject = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    protected SessionContext _sessionContext = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>SessionContextStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContext</code> object and a <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext <code>SessionContext</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if <code>sessionContext</code> is null or subject
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public SessionContextStatement(SessionContext sessionContext,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if ((sessionContext == null) || (subject ==null)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SAMLUtils.debug.message("SessionContextStatement: " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "SessionContext is null!");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>SessionContextStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContext</code> object, a <code>proxySubject</code> and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * a <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext <code>SessionContext</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject <code>ProxySubject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if <code>sessionContext</code> is null or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public SessionContextStatement(SessionContext sessionContext,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            ProxySubject proxySubject,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if ((sessionContext == null) || (subject ==null)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SAMLUtils.debug.message("SessionContextStatement: " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "SessionContext is null!");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>SessionContextStatement</code> object from a DOM
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param element the Document Element
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if there is an error in the sender or in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *            the element definition.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public SessionContextStatement(Element element)throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // make sure input is not null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    if (element == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        SAMLUtils.debug.message("AttributeStatement: null input.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster              SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    // check if it's an SessionContextStatement
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        boolean valid = SAMLUtils.checkStatement(element,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            "SessionContextStatement");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    if (!valid) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        SAMLUtils.debug.message("SessionContextStatement: Wrong input.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        SAMLUtils.bundle.getString("wrongInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    //Handle the children elements of SessionContextStatement
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    NodeList nodes = element.getChildNodes();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    int nodeCount = nodes.getLength();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    if (nodeCount > 0) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        for (int i = 0; i < nodeCount; i++) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        Node currentNode = nodes.item(i);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (currentNode.getNodeType() == Node.ELEMENT_NODE) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            String tagName = currentNode.getLocalName();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            String tagNS = currentNode.getNamespaceURI();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if ((tagName == null) || tagName.length() == 0 ||
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            tagNS == null || tagNS.length() == 0) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("SessionContextStatement:"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                + " The tag name or tag namespace of child"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                + " element is either null or empty.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (tagName.equals("Subject") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            tagNS.equals(SAMLConstants.assertionSAMLNameSpaceURI)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (this._subject != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("SessionContext" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "Statement should only contain " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "one subject");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                      SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                this._subject = new Subject((Element) currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else if (tagName.equals("ProxySubject") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            tagNS.equals(WSSEConstants.NS_SEC)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (_proxySubject != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("SessionContext" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "Statement should only contain " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    "one ProxySubject");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                      SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                _proxySubject =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                new ProxySubject((Element) currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else if (tagName.equals("SessionContext") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            tagNS.equals(WSSEConstants.NS_SEC)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (_sessionContext != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("SessionContext" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                "Statement should only contain " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                "one SessionContext");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                      SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                _sessionContext =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                new SessionContext((Element) currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("SessionContextStatement:"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                + "Wrong element " + tagName + " included.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                  SAMLUtils.bundle.getString("wrongInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } // end of if (currentNode.getNodeType() == Node.ELEMENT_NODE)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } // end of for loop
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }  // end of if (nodeCount > 0)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Return the <code>ProxySubject</code> in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContextStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return <code>ProxySubject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ProxySubject getProxySubject() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns the <code>SessionContext</code> in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContextStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return <code>SessionContext</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public SessionContext getSessionContext() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Sets the <code>ProxySubject</code> for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContextStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject the object to be set.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return true if the operation is successful.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public boolean setProxySubject(ProxySubject proxySubject) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (proxySubject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "setResourceID:Input is null.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            return false;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return true;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns the real type of the Statement.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return An integer which represents <code>SessionContextStatement</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         internally.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public int getStatementType() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return SESSIONCONTEXT_STATEMENT;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns  a String representation of <code>SessionContextStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return String representation of the <code>SessionContextStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public String toString()  {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return toString(true, false);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns a String representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param includeNS Determines whether or not the namespace qualifier is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *        prepended  to the Element when converted.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param declareNS Determines whether or not the namespace is declared
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *        within the Element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return String representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         <code>&lt;saml:ResourceAccessStatement&gt;</code> element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public  String  toString(boolean includeNS, boolean declareNS) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        StringBuffer xml = new StringBuffer(1000);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    String prefix = "";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        String secprefix = "";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        String libprefix = "";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        String uri = "";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        String securi = "";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (includeNS) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster             prefix = SAMLConstants.ASSERTION_PREFIX;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster             libprefix = IFSConstants.LIB_PREFIX;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster             secprefix = WSSEConstants.TAG_SEC + ":";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (declareNS) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            uri = SAMLConstants.assertionDeclareStr;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        securi = " " + WSSEConstants.TAG_XMLNS + ":" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster             WSSEConstants.TAG_SEC + "=" + "\"" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster             WSSEConstants.NS_SEC + "\"";
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    try {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            xml.append("<").append(secprefix).
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        append(WSSEConstants.TAG_SESSIONCONTEXTSTATEMENT).
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        append(securi).append(">\n");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        xml.append(this._subject.toString(includeNS, true));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (_proxySubject != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        xml.append(_proxySubject.toString(includeNS, declareNS));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        xml.append(_sessionContext.toXMLString(includeNS, declareNS));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        xml.append("</").append(secprefix).
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        append("SessionContextStatement>");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    } catch (Exception e) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return(xml.toString());
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster}
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster