Interface SignerRoleV2

  • All Known Implementing Classes:
    SignerRoleV2Impl

    public interface SignerRoleV2
    5.2.6 The SignerRoleV2 qualifying property

    Semantics

    The SignerRoleV2 qualifying property shall be a signed qualifying property that qualifies the signer.

    The SignerRoleV2 qualifying property shall encapsulate signer attributes (e.g. role). This qualifying property may encapsulate the following types of attributes:

    • attributes claimed by the signer;
    • attributes certified in attribute certificates issued by an Attribute Authority; or/and
    • assertions signed by a third party.

    Syntax

    The SignerRoleV2 qualifying property shall be defined as in XML Schema file "XAdES01903v132-201601.xsd", whose location is detailed in clause C.1, and is copied below for information.

    The ClaimedRoles element shall contain a non-empty sequence of roles claimed by the signer but which are not certified.

    Additional content types may be defined on a domain application basis and be part of this element.

    NOTE 1: The namespaces given to the corresponding XML schemas allow their unambiguous identification in the case these attributes are expressed in XML syntax (e.g. SAML assertions [i.9] of different versions).

    The CertifiedRolesV2 element shall contain a non-empty sequence of certified attributes, which shall be one of the following:

    • the base-64 encoding of DER-encoded X509 attribute certificates conformant to Recommendation ITU-T X.509 [4] issued to the signer, within the X509AttributeCertificate element; or
    • attribute certificates (issued, in consequence, by Attribute Authorities) in different syntax than the one specified in Recommendation ITU-T X.509 [4], within the OtherAttributeCertificate element. The definition of specific OtherAttributeCertificate is outside of the scope of the present document.

    The SignedAssertions element shall contain a non-empty sequence of assertions signed by a third party.

    NOTE 2: A signed assertion is stronger than a claimed attribute, since a third party asserts with a signature that the attribute of the signer is valid. However, it is less restrictive than an attribute certificate.

    The definition of specific content types for SignedAssertions is outside of the scope of the present document.

    NOTE 3: A possible content can be a signed SAML [i.9] assertion. Empty SignerRoleV2 qualifying properties shall not be generated.

    • Method Detail

      • getClaimedRoles

        java.util.ArrayList<java.lang.String> getClaimedRoles()
      • setClaimedRoles

        void setClaimedRoles​(java.util.ArrayList<java.lang.String> claimedRole)
      • addClaimedRole

        void addClaimedRole​(java.lang.String role)
      • getCertifiedRolesV2

        java.util.ArrayList<java.lang.String> getCertifiedRolesV2()
      • setCertifiedRolesV2

        void setCertifiedRolesV2​(java.util.ArrayList<java.lang.String> certifiedRole)
      • addCertifiedRoleV2

        void addCertifiedRoleV2​(java.lang.String role)
      • getSignedAssertions

        java.util.ArrayList<java.lang.String> getSignedAssertions()
      • setSignedAssertions

        void setSignedAssertions​(java.util.ArrayList<java.lang.String> signedAssertions)