| /* |
| * Licensed to the Apache Software Foundation (ASF) under one or more |
| * contributor license agreements. See the NOTICE file distributed with |
| * this work for additional information regarding copyright ownership. |
| * The ASF licenses this file to You under the Apache License, Version 2.0 |
| * (the "License"); you may not use this file except in compliance with |
| * the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #include <rp_security_context_token_builder.h> |
| #include <neethi_operator.h> |
| #include <neethi_policy.h> |
| #include <neethi_exactlyone.h> |
| #include <neethi_all.h> |
| #include <neethi_engine.h> |
| |
| /*private functions*/ |
| |
| axis2_status_t AXIS2_CALL |
| security_context_token_process_alternatives( |
| const axutil_env_t *env, |
| neethi_all_t *all, |
| rp_security_context_token_t * security_context_token); |
| |
| /***********************************/ |
| |
| AXIS2_EXTERN neethi_assertion_t *AXIS2_CALL |
| rp_security_context_token_builder_build( |
| const axutil_env_t *env, |
| axiom_node_t *node, |
| axiom_element_t *element, |
| axis2_char_t *sp_ns_uri, |
| axis2_bool_t is_secure_conversation_token) |
| { |
| rp_security_context_token_t *security_context_token = NULL; |
| neethi_policy_t *policy = NULL; |
| axiom_node_t *child_node = NULL; |
| axiom_element_t *child_element = NULL; |
| axiom_children_iterator_t *children_iter = NULL; |
| axutil_array_list_t *alternatives = NULL; |
| neethi_operator_t *component = NULL; |
| neethi_all_t *all = NULL; |
| axis2_char_t *inclusion_value = NULL; |
| axutil_qname_t *qname = NULL; |
| neethi_assertion_t *assertion = NULL; |
| neethi_policy_t *normalized_policy = NULL; |
| |
| security_context_token = rp_security_context_token_create(env); |
| qname = axutil_qname_create(env, RP_INCLUDE_TOKEN, sp_ns_uri, RP_SP_PREFIX); |
| inclusion_value = axiom_element_get_attribute_value(element, env, qname); |
| axutil_qname_free(qname, env); |
| qname = NULL; |
| |
| rp_security_context_token_set_inclusion(security_context_token, env, inclusion_value); |
| rp_security_context_token_set_is_secure_conversation_token(security_context_token, env, |
| is_secure_conversation_token); |
| |
| if(!axutil_strcmp(sp_ns_uri, RP_SP_NS_11)) |
| { |
| rp_security_context_token_set_sc10_security_context_token(security_context_token, env, |
| AXIS2_TRUE); |
| } |
| else |
| { |
| rp_security_context_token_set_sc10_security_context_token(security_context_token, env, |
| AXIS2_FALSE); |
| } |
| |
| child_node = axiom_node_get_first_element(node, env); |
| if(!child_node) |
| { |
| return NULL; |
| } |
| |
| children_iter = axiom_element_get_children(element, env, node); |
| if(children_iter) |
| { |
| while(axiom_children_iterator_has_next(children_iter, env)) |
| { |
| child_node = axiom_children_iterator_next(children_iter, env); |
| if(child_node) |
| { |
| if(axiom_node_get_node_type(child_node, env) == AXIOM_ELEMENT) |
| { |
| child_element = (axiom_element_t *)axiom_node_get_data_element(child_node, env); |
| if(child_element) |
| { |
| axis2_char_t *localname = NULL; |
| localname = axiom_element_get_localname(child_element, env); |
| if(axutil_strcmp(localname, RP_ISSUER) == 0) |
| { |
| axis2_char_t *ns = NULL; |
| axutil_qname_t *node_qname = NULL; |
| |
| node_qname = axiom_element_get_qname(child_element, env, child_node); |
| if(!node_qname) |
| { |
| AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, |
| "[neethi] Cannot get qname from element %s.", localname); |
| return NULL; |
| } |
| |
| ns = axutil_qname_get_uri(node_qname, env); |
| if(!ns) |
| { |
| AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, |
| "[neethi] Cannot get namespace from element %s.", localname); |
| return NULL; |
| } |
| if(!(axutil_strcmp(ns, RP_SP_NS_11) && axutil_strcmp(ns, RP_SP_NS_12))) |
| { |
| axis2_char_t *issuer = NULL; |
| issuer = axiom_element_get_text(child_element, env, child_node); |
| rp_security_context_token_set_issuer(security_context_token, env, |
| issuer); |
| } |
| else |
| { |
| AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, |
| "[neethi] Unknown Assertion %s with namespace %s", localname, |
| ns); |
| return NULL; |
| } |
| } |
| else |
| { |
| policy = neethi_engine_get_policy(env, child_node, child_element); |
| if(!policy) |
| { |
| return NULL; |
| } |
| normalized_policy = neethi_engine_get_normalize(env, AXIS2_FALSE, |
| policy); |
| neethi_policy_free(policy, env); |
| policy = NULL; |
| alternatives = neethi_policy_get_alternatives(normalized_policy, env); |
| component = (neethi_operator_t *)axutil_array_list_get(alternatives, |
| env, 0); |
| all = (neethi_all_t *)neethi_operator_get_value(component, env); |
| security_context_token_process_alternatives(env, all, |
| security_context_token); |
| |
| assertion = neethi_assertion_create_with_args(env, |
| (AXIS2_FREE_VOID_ARG)rp_security_context_token_free, |
| security_context_token, ASSERTION_TYPE_SECURITY_CONTEXT_TOKEN); |
| |
| neethi_policy_free(normalized_policy, env); |
| normalized_policy = NULL; |
| } |
| } |
| } |
| } |
| } |
| } |
| return assertion; |
| } |
| |
| axis2_status_t AXIS2_CALL |
| security_context_token_process_alternatives( |
| const axutil_env_t *env, |
| neethi_all_t *all, |
| rp_security_context_token_t * security_context_token) |
| { |
| neethi_operator_t *operator = NULL; |
| axutil_array_list_t *arraylist = NULL; |
| neethi_assertion_t *assertion = NULL; |
| neethi_assertion_type_t type; |
| |
| int i = 0; |
| |
| arraylist = neethi_all_get_policy_components(all, env); |
| |
| for(i = 0; i < axutil_array_list_size(arraylist, env); i++) |
| { |
| operator = (neethi_operator_t *)axutil_array_list_get(arraylist, env, i); |
| assertion = (neethi_assertion_t *)neethi_operator_get_value(operator, env); |
| type = neethi_assertion_get_type(assertion, env); |
| |
| if(type == ASSERTION_TYPE_REQUIRE_DERIVED_KEYS_SC10) |
| { |
| rp_security_context_token_set_derivedkey(security_context_token, env, DERIVEKEY_NEEDED); |
| rp_security_context_token_set_derivedkey_version(security_context_token, env, |
| DERIVEKEY_VERSION_SC10); |
| } |
| else if(type == ASSERTION_TYPE_REQUIRE_DERIVED_KEYS_SC13) |
| { |
| rp_security_context_token_set_derivedkey(security_context_token, env, DERIVEKEY_NEEDED); |
| rp_security_context_token_set_derivedkey_version(security_context_token, env, |
| DERIVEKEY_VERSION_SC13); |
| } |
| else if(type == ASSERTION_TYPE_REQUIRE_EXTERNAL_URI) |
| { |
| rp_security_context_token_set_require_external_uri_ref(security_context_token, env, |
| AXIS2_TRUE); |
| } |
| else if(type == ASSERTION_TYPE_SC10_SECURITY_CONTEXT_TOKEN) |
| { |
| rp_security_context_token_set_sc10_security_context_token(security_context_token, env, |
| AXIS2_TRUE); |
| } |
| else if(type == ASSERTION_TYPE_SC13_SECURITY_CONTEXT_TOKEN) |
| { |
| rp_security_context_token_set_sc10_security_context_token(security_context_token, env, |
| AXIS2_FALSE); |
| } |
| else if(type == ASSERTION_TYPE_ISSUER) |
| { |
| axis2_char_t *issuer = NULL; |
| issuer = (axis2_char_t *)neethi_assertion_get_value(assertion, env); |
| rp_security_context_token_set_issuer(security_context_token, env, issuer); |
| } |
| else if(type == ASSERTION_TYPE_BOOTSTRAP_POLICY) |
| { |
| neethi_policy_t *bootstrap_policy = NULL; |
| bootstrap_policy = (neethi_policy_t *)neethi_assertion_get_value(assertion, env); |
| rp_security_context_token_set_bootstrap_policy(security_context_token, env, |
| bootstrap_policy); |
| } |
| else |
| return AXIS2_FAILURE; |
| } |
| return AXIS2_SUCCESS; |
| } |
