lasso_provider_new ()

LassoProvider *
lasso_provider_new (LassoProviderRole role,
                    const char *metadata,
                    const char *public_key,
                    const char *ca_cert_chain);

Creates a new LassoProvider.

lasso_provider_new_from_buffer ()

LassoProvider *
lasso_provider_new_from_buffer (LassoProviderRole role,
                                const char *metadata,
                                const char *public_key,
                                const char *ca_cert_chain);

Creates a new LassoProvider.

lasso_provider_get_assertion_consumer_service_url ()

gchar *
lasso_provider_get_assertion_consumer_service_url
                               (LassoProvider *provider,
                                const char *service_id);

Extracts the AssertionConsumerServiceURL from the provider metadata descriptor.

lasso_provider_get_metadata_one ()

gchar *
lasso_provider_get_metadata_one (LassoProvider *provider,
                                 const char *name);

Extracts the element name from the provider metadata descriptor.

lasso_provider_get_metadata_list ()

GList *
lasso_provider_get_metadata_list (LassoProvider *provider,
                                  const char *name);

Extracts zero to many elements from the provider metadata descriptor.

lasso_provider_new_from_dump ()

LassoProvider *
lasso_provider_new_from_dump (const gchar *dump);

Restores the dump to a new LassoProvider.

lasso_provider_get_first_http_method ()

LassoHttpMethod
lasso_provider_get_first_http_method (LassoProvider *provider,
                                      LassoProvider *remote_provider,
                                      LassoMdProtocolType protocol_type);

Looks up and returns a LassoHttpMethod appropriate for performing the protocol_type between provider and remote_provider .

lasso_provider_accept_http_method ()

gboolean
lasso_provider_accept_http_method (LassoProvider *provider,
                                   LassoProvider *remote_provider,
                                   LassoMdProtocolType protocol_type,
                                   LassoHttpMethod http_method,
                                   gboolean initiate_profile);

Gets if http_method is an appropriate method for the protocol_type profile between provider and remote_provider .

lasso_provider_has_protocol_profile ()

gboolean
lasso_provider_has_protocol_profile (LassoProvider *provider,
                                     LassoMdProtocolType protocol_type,
                                     const char *protocol_profile);

Gets if provider supports protocol_profile .

lasso_provider_get_base64_succinct_id ()

gchar *
lasso_provider_get_base64_succinct_id (const LassoProvider *provider);

Computes and returns the base64-encoded provider succinct ID.

lasso_provider_get_organization ()

xmlNode *
lasso_provider_get_organization (const LassoProvider *provider);

Returns the provider metadata <Organization> XML node.

lasso_provider_get_protocol_conformance ()

LassoProtocolConformance
lasso_provider_get_protocol_conformance
                               (const LassoProvider *provider);

Return the protocol conformance of the given provider, it should allow to switch behaviour of SP and IdP code toward a specific protocol. See also LassoProtocolConformance.

lasso_provider_get_encryption_mode ()

LassoEncryptionMode
lasso_provider_get_encryption_mode (LassoProvider *provider);

Return the current encryption mode.

lasso_provider_set_encryption_mode ()

void
lasso_provider_set_encryption_mode (LassoProvider *provider,
                                    LassoEncryptionMode encryption_mode);

Activate or desactivate encryption

lasso_provider_set_encryption_sym_key_type ()

void
lasso_provider_set_encryption_sym_key_type
                               (LassoProvider *provider,
                                LassoEncryptionSymKeyType encryption_sym_key_type);

Set the type of the generated encryption symetric key

lasso_provider_verify_single_node_signature ()

lasso_error_t
lasso_provider_verify_single_node_signature
                               (LassoProvider *provider,
                                LassoNode *node,
                                const char *id_attr_name);

Return wheter the provider signed this node.

lasso_provider_get_default_name_id_format ()

gchar *
lasso_provider_get_default_name_id_format
                               (LassoProvider *provider);

If the provider has a list of supported name id formats in its metadatas, return the first one.

lasso_provider_get_sp_name_qualifier ()

const char *
lasso_provider_get_sp_name_qualifier (LassoProvider *provider);

Return the entityID to use for qualifying NameIdentifier.

lasso_provider_get_idp_supported_attributes ()

GList *
lasso_provider_get_idp_supported_attributes
                               (LassoProvider *provider);

If the provider supports the IDP SSO role, then return the list of Attribute definition that this provider declared supporting.

lasso_provider_get_valid_until ()

char *
lasso_provider_get_valid_until (LassoProvider *provider);

Return the time after which the metadata for this provider will become invalid. This is an ISO-8601 formatted string.

lasso_provider_get_cache_duration ()

char *
lasso_provider_get_cache_duration (LassoProvider *provider);

Return the time during which the metadata for this provider can be kept.

lasso_provider_get_metadata_one_for_role ()

char *
lasso_provider_get_metadata_one_for_role
                               (LassoProvider *provider,
                                LassoProviderRole role,
                                const char *name);

Return the given information extracted from the metadata of the given LassoProvider for the given role descriptor.

Retun value: a newly allocated string or NULL. If non-NULL must be freed by the caller.

lasso_provider_get_metadata_list_for_role ()

GList *
lasso_provider_get_metadata_list_for_role
                               (const LassoProvider *provider,
                                LassoProviderRole role,
                                const char *name);

Extracts zero to many elements from the provider descriptor for the given role .

lasso_provider_get_metadata_keys_for_role ()

GList *
lasso_provider_get_metadata_keys_for_role
                               (LassoProvider *provider,
                                LassoProviderRole role);

Returns the list of metadata keys existing for the given provider.

lasso_provider_get_roles ()

LassoProviderRole
lasso_provider_get_roles (LassoProvider *provider);

Return the bitmask of the supported roles.

lasso_provider_match_conformance ()

gboolean
lasso_provider_match_conformance (LassoProvider *provider,
                                  LassoProvider *another_provider);

Return whether the two provider support a same protocol. See also LassoProtocolConformance.

lasso_provider_set_protocol_conformance ()

void
lasso_provider_set_protocol_conformance
                               (LassoProvider *provider,
                                LassoProtocolConformance protocol_conformance);

Normally the protocol conformance is set when the metadata for the provider is loaded because the metadata defines the type of server. However some LassoServer variants do not have metadata (e.g. ECP) therefore instead of loading the metadata it is necessary to explicitly set the protocol conformance because parts of the Lasso library dispatch based on the protocol conformance. Without the protocol conformance being set it is likely the wrong code will execute.

**WARNING**, do not manually set the protocol conformance if metadata has been loaded, metadata is the final arbiter of protocol conformance.

struct LassoProvider

struct LassoProvider {
	LassoNode parent;

	gchar *ProviderID;
	LassoProviderRole role;

	char *metadata_filename;
	gchar *public_key;
	gchar *ca_cert_chain;
};

Any kind of provider, identity provider, service provider, attribute authority, authorization authority will be represented by a LassoProvider object. This object will holds public keys, certificate chains and metadata informations. The ID-FF 1.2 and SAML 2.0 metadata files are flattened inside a key-value map that you can access using the functions lasso_provider_get_metadata_one_for_role(), lasso_provider_get_metadata_list_for_role(), lasso_provider_get_metadata_keys_for_role().

enum LassoProviderRole

LassoProviderRole is an enumeration allowing to enumerate the roles handled by a provider, it can be used in a bitmask as each value is a power of 2 (except LASSO_PROVIDER_ROLE_ANY which is the full bitmask and LASSO_PROVIDER_ROLE_NONE).

enum LassoHttpMethod

Method.

enum LassoMdProtocolType

Liberty Metadata Type.

enum LassoProtocolConformance

Provider protocol conformance.

enum LassoEncryptionMode

Encryption mode.

enum LassoEncryptionSymKeyType

Encryption symetric key type.