EncryptedAssertion.php

Go to the documentation of this file.

<?php
 
namespace SAML2;
 
use RobRichards\XMLSecLibs\XMLSecEnc;
use RobRichards\XMLSecLibs\XMLSecurityKey;
 
class EncryptedAssertion
{
    private $encryptedData;
 
    public function __construct(\DOMElement $xml = null)
    {
        if ($xml === null) {
            return;
        }
 
        $data = Utils::xpQuery($xml, './xenc:EncryptedData');
        if (count($data) === 0) {
            throw new \Exception('Missing encrypted data in <saml:EncryptedAssertion>.');
        } elseif (count($data) > 1) {
            throw new \Exception('More than one encrypted data element in <saml:EncryptedAssertion>.');
        }
        $this->encryptedData = $data[0];
    }
 
    public function setAssertion(Assertion $assertion, XMLSecurityKey $key)
    {
        $xml = $assertion->toXML();
 
        Utils::getContainer()->debugMessage($xml, 'encrypt');
 
        $enc = new XMLSecEnc();
        $enc->setNode($xml);
        $enc->type = XMLSecEnc::Element;
 
        switch ($key->type) {
            case XMLSecurityKey::TRIPLEDES_CBC:
            case XMLSecurityKey::AES128_CBC:
            case XMLSecurityKey::AES192_CBC:
            case XMLSecurityKey::AES256_CBC:
                $symmetricKey = $key;
                break;
 
            case XMLSecurityKey::RSA_1_5:
            case XMLSecurityKey::RSA_OAEP_MGF1P:
                $symmetricKey = new XMLSecurityKey(XMLSecurityKey::AES128_CBC);
                $symmetricKey->generateSessionKey();
 
                $enc->encryptKey($key, $symmetricKey);
 
                break;
 
            default:
                throw new \Exception('Unknown key type for encryption: ' . $key->type);
        }
 
        $this->encryptedData = $enc->encryptNode($symmetricKey);
    }
 
    public function getAssertion(XMLSecurityKey $inputKey, array $blacklist = array())
    {
        $assertionXML = Utils::decryptElement($this->encryptedData, $inputKey, $blacklist);
 
        Utils::getContainer()->debugMessage($assertionXML, 'decrypt');
 
        return new Assertion($assertionXML);
    }
 
    public function toXML(\DOMNode $parentElement = null)
    {
        if ($parentElement === null) {
            $document = DOMDocumentFactory::create();
            $parentElement = $document;
        } else {
            $document = $parentElement->ownerDocument;
        }
 
        $root = $document->createElementNS(Constants::NS_SAML, 'saml:' . 'EncryptedAssertion');
        $parentElement->appendChild($root);
 
        $root->appendChild($document->importNode($this->encryptedData, true));
 
        return $root;
    }
}