java-saml-validator

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

java-saml-validator

(★ 10)

Reference SAML assertion digital signature validator for Java

java-saml-validator Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

java-saml-validator
===================
***Note:*** This library uses JDK8 specific features so most likely won't work on JDK7.

Reference SAML assertion digital signature validator for Java. This class can be used to validate SAML tokens
and other documents using XML Digital Signature. It attempts to perform as thorough validation
as possible to counter attacks such as XML signature wrapping. It also includes basic safeguards against
 XML external entities (XXE) attacks. See the article for theory:

* [Secure SAML validation to prevent XML signature wrapping attacks](http://ipsec.pl/kryptografia/2013/secure-saml-validation-prevent-xml-signature-wrapping-attacks.html)

Basic usage:

Validator val = new Validator(x509_certificate, xsd_schema,
                    xpath_of_signature_element,
                    xpath_of_body_element);

status = val.validate("documents/file0.xml");

Example from the test suite:

Validator val = new Validator("documents/signer1.der", "schemas/soap-envelope.xsd",
                    // basic XPath syntax
                    "/soape:Envelope/soape:Header/wsse:Security/ds:Signature",
                    "/soape:Envelope/soape:Body");

// soap-envelope.xsd does not specify Id field so XML signature validator will crash if this is not specified
    val.setIdAttribute("http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd", "Id");

assertTrue(val.validate("documents/file0.xml"));

I would like to thank to Juraj Somorovsky for his numerous comments and suggestions. All possible mistakes and innacuracies are mine.

java-saml-validator

java-saml-validator Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

java-saml-validator

java-saml-validator Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README