| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System; |
| | | 5 | | using System.Collections.ObjectModel; |
| | | 6 | | using System.Globalization; |
| | | 7 | | using System.IO; |
| | | 8 | | using System.Xml; |
| | | 9 | | using CoreWCF.IdentityModel.Policy; |
| | | 10 | | using CoreWCF.Security; |
| | | 11 | | |
| | | 12 | | namespace CoreWCF.IdentityModel.Tokens |
| | | 13 | | { |
| | | 14 | | public class GenericXmlSecurityToken : SecurityToken |
| | | 15 | | { |
| | | 16 | | private const int SupportedPersistanceVersion = 1; |
| | | 17 | | private readonly string _id; |
| | | 18 | | private readonly DateTime _effectiveTime; |
| | | 19 | | private readonly DateTime _expirationTime; |
| | | 20 | | |
| | 0 | 21 | | public GenericXmlSecurityToken( |
| | 0 | 22 | | XmlElement tokenXml, |
| | 0 | 23 | | SecurityToken proofToken, |
| | 0 | 24 | | DateTime effectiveTime, |
| | 0 | 25 | | DateTime expirationTime, |
| | 0 | 26 | | SecurityKeyIdentifierClause internalTokenReference, |
| | 0 | 27 | | SecurityKeyIdentifierClause externalTokenReference, |
| | 0 | 28 | | ReadOnlyCollection<IAuthorizationPolicy> authorizationPolicies |
| | 0 | 29 | | ) |
| | | 30 | | { |
| | 0 | 31 | | if (tokenXml == null) |
| | | 32 | | { |
| | 0 | 33 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull(nameof(tokenXml)); |
| | | 34 | | } |
| | | 35 | | |
| | 0 | 36 | | _id = GetId(tokenXml); |
| | 0 | 37 | | TokenXml = tokenXml; |
| | 0 | 38 | | ProofToken = proofToken; |
| | 0 | 39 | | _effectiveTime = effectiveTime.ToUniversalTime(); |
| | 0 | 40 | | _expirationTime = expirationTime.ToUniversalTime(); |
| | | 41 | | |
| | 0 | 42 | | InternalTokenReference = internalTokenReference; |
| | 0 | 43 | | ExternalTokenReference = externalTokenReference; |
| | 0 | 44 | | AuthorizationPolicies = authorizationPolicies ?? EmptyReadOnlyCollection<IAuthorizationPolicy>.Instance; |
| | 0 | 45 | | } |
| | | 46 | | |
| | 0 | 47 | | public override string Id => _id; |
| | | 48 | | |
| | 0 | 49 | | public override DateTime ValidFrom => _effectiveTime; |
| | | 50 | | |
| | 0 | 51 | | public override DateTime ValidTo => _expirationTime; |
| | | 52 | | |
| | 0 | 53 | | public SecurityKeyIdentifierClause InternalTokenReference { get; } |
| | | 54 | | |
| | 0 | 55 | | public SecurityKeyIdentifierClause ExternalTokenReference { get; } |
| | | 56 | | |
| | 0 | 57 | | public XmlElement TokenXml { get; } |
| | | 58 | | |
| | 0 | 59 | | public SecurityToken ProofToken { get; } |
| | | 60 | | |
| | 0 | 61 | | public ReadOnlyCollection<IAuthorizationPolicy> AuthorizationPolicies { get; } |
| | | 62 | | |
| | | 63 | | public override ReadOnlyCollection<SecurityKey> SecurityKeys |
| | | 64 | | { |
| | | 65 | | get |
| | | 66 | | { |
| | 0 | 67 | | if (ProofToken != null) |
| | | 68 | | { |
| | 0 | 69 | | return ProofToken.SecurityKeys; |
| | | 70 | | } |
| | | 71 | | else |
| | | 72 | | { |
| | 0 | 73 | | return EmptyReadOnlyCollection<SecurityKey>.Instance; |
| | | 74 | | } |
| | | 75 | | } |
| | | 76 | | } |
| | | 77 | | |
| | | 78 | | public override string ToString() |
| | | 79 | | { |
| | 0 | 80 | | StringWriter writer = new StringWriter(CultureInfo.InvariantCulture); |
| | 0 | 81 | | writer.WriteLine("Generic XML token:"); |
| | 0 | 82 | | writer.WriteLine(" validFrom: {0}", ValidFrom); |
| | 0 | 83 | | writer.WriteLine(" validTo: {0}", ValidTo); |
| | 0 | 84 | | if (InternalTokenReference != null) |
| | | 85 | | { |
| | 0 | 86 | | writer.WriteLine(" InternalTokenReference: {0}", InternalTokenReference); |
| | | 87 | | } |
| | | 88 | | |
| | 0 | 89 | | if (ExternalTokenReference != null) |
| | | 90 | | { |
| | 0 | 91 | | writer.WriteLine(" ExternalTokenReference: {0}", ExternalTokenReference); |
| | | 92 | | } |
| | | 93 | | |
| | 0 | 94 | | writer.WriteLine(" Token Element: ({0}, {1})", TokenXml.LocalName, TokenXml.NamespaceURI); |
| | 0 | 95 | | return writer.ToString(); |
| | | 96 | | } |
| | | 97 | | |
| | | 98 | | private static string GetId(XmlElement tokenXml) |
| | | 99 | | { |
| | 0 | 100 | | if (tokenXml != null) |
| | | 101 | | { |
| | 0 | 102 | | string id = tokenXml.GetAttribute(UtilityStrings.IdAttribute, UtilityStrings.Namespace); |
| | 0 | 103 | | if (string.IsNullOrEmpty(id)) |
| | | 104 | | { |
| | | 105 | | // special case SAML 1.1 as this is the only possible ID as |
| | | 106 | | // spec is closed. SAML 2.0 is xs:ID |
| | 0 | 107 | | id = tokenXml.GetAttribute("AssertionID"); |
| | | 108 | | |
| | | 109 | | // if we are still null, "Id" |
| | 0 | 110 | | if (string.IsNullOrEmpty(id)) |
| | | 111 | | { |
| | 0 | 112 | | id = tokenXml.GetAttribute("Id"); |
| | | 113 | | } |
| | | 114 | | |
| | | 115 | | //This fixes the unecnrypted SAML 2.0 case. Eg: <Assertion ID="_05955298-214f-41e7-b4c3-84dbff7f01b9 |
| | 0 | 116 | | if (string.IsNullOrEmpty(id)) |
| | | 117 | | { |
| | 0 | 118 | | id = tokenXml.GetAttribute("ID"); |
| | | 119 | | } |
| | | 120 | | } |
| | | 121 | | |
| | 0 | 122 | | if (!string.IsNullOrEmpty(id)) |
| | | 123 | | { |
| | 0 | 124 | | return id; |
| | | 125 | | } |
| | | 126 | | } |
| | | 127 | | |
| | 0 | 128 | | return null; |
| | | 129 | | } |
| | | 130 | | |
| | | 131 | | public override bool CanCreateKeyIdentifierClause<T>() |
| | | 132 | | { |
| | 0 | 133 | | if (InternalTokenReference != null && typeof(T) == InternalTokenReference.GetType()) |
| | | 134 | | { |
| | 0 | 135 | | return true; |
| | | 136 | | } |
| | | 137 | | |
| | 0 | 138 | | if (ExternalTokenReference != null && typeof(T) == ExternalTokenReference.GetType()) |
| | | 139 | | { |
| | 0 | 140 | | return true; |
| | | 141 | | } |
| | | 142 | | |
| | 0 | 143 | | return false; |
| | | 144 | | } |
| | | 145 | | |
| | | 146 | | public override T CreateKeyIdentifierClause<T>() |
| | | 147 | | { |
| | 0 | 148 | | if (InternalTokenReference != null && typeof(T) == InternalTokenReference.GetType()) |
| | | 149 | | { |
| | 0 | 150 | | return (T)InternalTokenReference; |
| | | 151 | | } |
| | | 152 | | |
| | 0 | 153 | | if (ExternalTokenReference != null && typeof(T) == ExternalTokenReference.GetType()) |
| | | 154 | | { |
| | 0 | 155 | | return (T)ExternalTokenReference; |
| | | 156 | | } |
| | | 157 | | |
| | 0 | 158 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new SecurityTokenException(SR.Format(SR.UnableToCr |
| | | 159 | | } |
| | | 160 | | |
| | | 161 | | public override bool MatchesKeyIdentifierClause(SecurityKeyIdentifierClause keyIdentifierClause) |
| | | 162 | | { |
| | 0 | 163 | | if (InternalTokenReference != null && InternalTokenReference.Matches(keyIdentifierClause)) |
| | | 164 | | { |
| | 0 | 165 | | return true; |
| | | 166 | | } |
| | 0 | 167 | | else if (ExternalTokenReference != null && ExternalTokenReference.Matches(keyIdentifierClause)) |
| | | 168 | | { |
| | 0 | 169 | | return true; |
| | | 170 | | } |
| | | 171 | | |
| | 0 | 172 | | return false; |
| | | 173 | | } |
| | | 174 | | } |
| | | 175 | | } |