Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-30 15:52:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Polish SAML 2.0 Login Sample

Browse Source 
Fixes gh-8163
This commit is contained in:
Josh Cummings 2020-03-20 16:46:51 -06:00
parent 2dd40c7de5
commit b470a4ecca
No known key found for this signature in database
GPG Key ID: 49EF60DD7FF83443
4 changed files with 26 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
samples/boot/saml2login/README.adoc
View File

@ -1,26 +1,20 @@
= OAuth 2.0 Login Sample = OAuth 2.0 Login Sample
This guide provides instructions on setting up the sample application with SAML 2.0 Login using This guide provides instructions on setting up this SAML 2.0 Login sample application.
Spring Security's `saml2Login()` feature.
The sample application uses Spring Boot 2.2.0.M5 and the `spring-security-saml2-service-provider` The sample application uses Spring Boot and the `spring-security-saml2-service-provider`
module which is new in Spring Security 5.2. module which is new in Spring Security 5.2.
== Goals == Goals
`saml2Login()` provides a very simple, basic, implementation of a Service Provider `saml2Login()` provides a very simple implementation of a Service Provider that can receive a SAML 2.0 Response via the HTTP-POST and HTTP-REDIRECT bindings against the SimpleSAMLphp SAML 2.0 reference implementation.
that can receive a SAML 2 Response XML object via the HTTP-POST and HTTP-REDIRECT bindings
against a known SAML reference implementation by SimpleSAMLPhp.
The following features are implemented in the MVP:
The following features are implemented in the MVP 1. Receive and validate a SAML 2.0 Response containing an assertion, and create a corresponding authentication in Spring Security
2. Send a SAML 2.0 AuthNRequest to an Identity Provider
1. Receive and validate a SAML 2.0 Response object containing an assertion 3. Provide a framework for components used in SAML 2.0 authentication that can be swapped by configuration
and create a valid authentication in Spring Security 4. Work against the SimpleSAMLphp reference implementation
2. Send a SAML 2 AuthNRequest object to an Identity Provider
3. Provide a framework for components used in SAML 2.0 authentication that can
be swapped by configuration
4. Sample working against the SimpleSAMLPhP reference implementation
== Run the Sample == Run the Sample
@ -33,7 +27,7 @@ be swapped by configuration
http://localhost:8080/ http://localhost:8080/
You will be redirect to the SimpleSAMLPhp IDP You will be redirect to the SimpleSAMLphp IDP
=== Type in your credentials === Type in your credentials

6
samples/boot/saml2login/src/main/java/sample/IndexController.java
View File

@ -19,15 +19,9 @@ package sample;
import org.springframework.stereotype.Controller; import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.GetMapping;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import sample.Saml2LoginApplication;
@Controller @Controller
public class IndexController { public class IndexController {
private static final Log logger = LogFactory.getLog(Saml2LoginApplication.class);
@GetMapping("/") @GetMapping("/")
public String index() { public String index() {
return "index"; return "index";

8
samples/boot/saml2login/src/main/resources/application.yml
View File

@ -4,13 +4,11 @@ spring:
relyingparty: relyingparty:
registration: registration:
simplesamlphp: simplesamlphp:
signing: signing.credentials:
credentials:
- private-key-location: "classpath:credentials/rp-private.key" - private-key-location: "classpath:credentials/rp-private.key"
certificate-location: "classpath:credentials/rp-certificate.crt" certificate-location: "classpath:credentials/rp-certificate.crt"
identityprovider: identityprovider:
verification:
credentials:
- certificate-location: "classpath:credentials/idp-certificate.crt"
entity-id: https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/metadata.php entity-id: https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/metadata.php
verification.credentials:
- certificate-location: "classpath:credentials/idp-certificate.crt"
sso-url: https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/SSOService.php sso-url: https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/SSOService.php

22
samples/boot/saml2login/src/main/resources/templates/index.html
View File

@ -1,5 +1,5 @@
<!-- <!--
~ Copyright 2002-2019 the original author or authors. ~ Copyright 2002-2020 the original author or authors.
~ ~
~ Licensed under the Apache License, Version 2.0 (the "License"); ~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License. ~ you may not use this file except in compliance with the License.
@ -17,21 +17,19 @@
<!doctype html> <!doctype html>
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="https://www.thymeleaf.org" xmlns:sec="https://www.thymeleaf.org/thymeleaf-extras-springsecurity5"> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="https://www.thymeleaf.org" xmlns:sec="https://www.thymeleaf.org/thymeleaf-extras-springsecurity5">
<head> <head>
<title>Spring Security - SAML 2 Log In</title> <title>Spring Security - SAML 2.0 Login</title>
<meta charset="utf-8" /> <meta charset="utf-8" />
</head> </head>
<body> <body>
<h1>Success</h1> <div>
<div>You are authenticated as <span sec:authentication="name"></span></div> <form th:action="@{/logout}" method="post">
<ul> <input type="submit" value="Logout" />
<li> </form>
<a th:href="@{/logout}">Log Out</a>
</li>
<li>
<a href="https://simplesaml-for-spring-saml.cfapps.io/module.php/core/authenticate.php?as=example-userpass&logout"> <a href="https://simplesaml-for-spring-saml.cfapps.io/module.php/core/authenticate.php?as=example-userpass&logout">
Log out of SimpleSAMLPhp Log out of SimpleSAMLphp
</a> </a>
</li> </div>
</ul> <h1>SAML 2.0 Login with Spring Security</h1>
<div>You are successfully logged in as <span sec:authentication="name"></span></div>
</body> </body>
</html> </html>