Create SAML 2.0 assertion by existing element in OpenSAML

Question

I am trying to create an SAML 2.0 assertion with OpenSAML using an existing assertion element for a token renewal process.

 // Obtain the token
            Token tk = tkStorage.getToken(data.getTokenId());

            OMElement assertionOMElement = tk.getToken();
            int samlRstversion = data.getSamlRstVersion(); 
if(samlRstversion == 2) {
                    DefaultBootstrap.bootstrap();
                    UnmarshallerFactory unmarshallerFactory = Configuration.getUnmarshallerFactory();
                    Unmarshaller unmarshaller = unmarshallerFactory.getUnmarshaller((Element)assertionOMElement);
                    Element x1 = (Element)assertionOMElement;
                    Assertion samlAssertion = (Assertion) unmarshaller
                            .unmarshall(x1);
    //Add conditions to the assertion
}

I'm getting two errors.

When the DefaultBootstrap.bootstrap(); is used, it throws an exception java.lang.UnsupportedOperationException: This parser does not support specification "null" version "null"
When DefaultBootstrap.bootstrap() is removed it throws at Assertion samlAssertion = (Assertion) unmarshaller.unmarshall(x1);

Is there something that I have missed?

score 1 · Answer 1 · edited Apr 10 '18 at 23:22

1

Firstly, you always have to run the bootstrap or else you get errors.

It seams like the first error is because you have a too old implementation of JAXP https://lists.internet2.edu/sympa/arc/mace-opensaml-users/2010-01/msg00015.html

The OpenSAML team suggests using Apache Xerces or Xalan.

edited Apr 10 '18 at 23:22

Simeon Leyzerzon

18,658
9
54
82

answered Aug 23 '14 at 00:23

Stefan Rasmusson

5,445
3
21
48

score 0 · Accepted Answer · edited Apr 10 '18 at 23:18

There were two errors which caused the exception. Of course the bootsrap() had to be done in order to continue with marshalling or unmarshalling.

In a previous line of the code the DOM implementation was changing to DOOM. DocumentBuilderFactoryImpl.setDOOMRequired(true); Even though it was deprecated the code was using it. So before do bootstrap() it had to be set to false since the underlying JAXB implementation uses the DOM.
Also, casting OMElement assertionOMElement to Element threw this exception. org.w3c.dom.DOMException: NAMESPACE_ERR: An attempt is made to create or change an object in a way which is incorrect with regard to namespaces.

Solution was to convert the OMElement to String and then build the Document from it and get the DocumentElement

String s = assertionOMElement.toString();
DocumentBuilderFactory documentBuilderFactory = DocumentBuilderFactory.newInstance();
documentBuilderFactory.setNamespaceAware(true);
DocumentBuilder docBuilder = documentBuilderFactory.newDocumentBuilder();
Document document = docBuilder.parse(new ByteArrayInputStream(s.trim().getBytes()));
Element element = document.getDocumentElement();

Create SAML 2.0 assertion by existing element in OpenSAML

2 Answers2