binary_security_token.go

package xmlsecurity

import (
	"crypto/x509"
	"encoding/base64"
	"errors"

	"github.com/beevik/etree"
	"github.com/deb-ict/go-xml"
)

type BinarySecurityToken interface {
	xml.Node
	X509CertificateProvider
	GetId() string
	SetId(id string)
	GetValueType() string
	SetValueType(valueType string)
	GetEncodingType() string
	SetEncodingType(encodingType string)
	GetValue() string
	SetValue(value string)
}

type binarySecurityToken struct {
	Id           string
	ValueType    string
	EncodingType string
	Value        string
}

func NewBinarySecurityToken(context xml.Context) (BinarySecurityToken, error) {
	return &binarySecurityToken{}, nil
}

func NewBinarySecurityTokenNode(context xml.Context) (xml.Node, error) {
	return NewBinarySecurityToken(context)
}

func (node *binarySecurityToken) GetId() string {
	return node.Id
}

func (node *binarySecurityToken) SetId(id string) {
	node.Id = id
}

func (node *binarySecurityToken) GetValueType() string {
	return node.ValueType
}

func (node *binarySecurityToken) SetValueType(valueType string) {
	node.ValueType = valueType
}

func (node *binarySecurityToken) GetEncodingType() string {
	return node.EncodingType
}

func (node *binarySecurityToken) SetEncodingType(encodingType string) {
	node.EncodingType = encodingType
}

func (node *binarySecurityToken) GetValue() string {
	return node.Value
}

func (node *binarySecurityToken) SetValue(value string) {
	node.Value = value
}

func (node *binarySecurityToken) GetX509Certificate(context xml.Context) (*x509.Certificate, error) {
	if node.GetValueType() != "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" {
		return nil, errors.New("invalid ValueType")
	}
	if node.EncodingType != "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" {
		return nil, errors.New("invalid EncodingType")
	}

	certificateBytes, err := base64.StdEncoding.DecodeString(node.GetValue())
	if err != nil {
		return nil, err
	}

	return x509.ParseCertificate(certificateBytes)
}

func (node *binarySecurityToken) LoadXml(context xml.Context, el *etree.Element) error {
	err := xml.ValidateElement(el, "BinarySecurityToken", WsseNamespace)
	if err != nil {
		return err
	}

	node.SetId(GetWsuId(context, el))
	node.SetValueType(el.SelectAttrValue("ValueType", ""))
	node.SetEncodingType(el.SelectAttrValue("EncodingType", ""))
	node.SetValue(el.Text())

	return nil
}

func (node *binarySecurityToken) GetXml(context xml.Context) (*etree.Element, error) {
	el := etree.NewElement("BinarySecurityToken")
	el.Space = context.GetNamespacePrefix(WsseNamespace)

	if node.GetId() != "" {
		SetWsuId(context, el, node.GetId())
	}
	if node.GetValueType() != "" {
		el.CreateAttr("ValueType", node.GetValueType())
	}
	if node.GetEncodingType() != "" {
		el.CreateAttr("EncodingType", node.GetEncodingType())
	}
	el.SetText(node.Value)

	return el, nil
}