Interface SignerRoleV2
- All Known Implementing Classes:
SignerRoleV2Impl
Semantics
The SignerRoleV2 qualifying property shall be a signed qualifying property that qualifies the signer.
The SignerRoleV2 qualifying property shall encapsulate signer attributes (e.g. role). This qualifying property may encapsulate the following types of attributes:
- attributes claimed by the signer;
- attributes certified in attribute certificates issued by an Attribute Authority; or/and
- assertions signed by a third party.
Syntax
The SignerRoleV2 qualifying property shall be defined as in XML Schema file "XAdES01903v132-201601.xsd", whose location is detailed in clause C.1, and is copied below for information.
invalid input: '<'xsd:element name="SignerRoleV2" type="SignerRoleV2Type"/>
invalid input: '<'xsd:complexType name="SignerRoleV2Type">
invalid input: '<'xsd:sequence>
invalid input: '<'xsd:element ref="ClaimedRoles" minOccurs="0"/>
invalid input: '<'xsd:element ref="CertifiedRolesV2" minOccurs="0"/>
invalid input: '<'xsd:element ref="SignedAssertions" minOccurs="0"/>
invalid input: '<'/xsd:sequence>
invalid input: '<'/xsd:complexType>
invalid input: '<'xsd:element name="ClaimedRoles" type="ClaimedRolesListType"/>
invalid input: '<'xsd:element name="CertifiedRolesV2" type="CertifiedRolesListTypeV2"/>
invalid input: '<'xsd:element name="SignedAssertions" type="SignedAssertionsListType"/>
invalid input: '<'xsd:complexType name="ClaimedRolesListType">
invalid input: '<'xsd:sequence>
invalid input: '<'xsd:element name="ClaimedRole" type="AnyType" maxOccurs="unbounded"/>
invalid input: '<'/xsd:sequence>
invalid input: '<'/xsd:complexType>
invalid input: '<'xsd:complexType name="CertifiedRolesListTypeV2">
invalid input: '<'xsd:sequence>
invalid input: '<'xsd:element name="CertifiedRole" type="CertifiedRoleTypeV2" maxOccurs="unbounded"/>
invalid input: '<'/xsd:sequence>
invalid input: '<'/xsd:complexType>
invalid input: '<'xsd:complexType name="CertifiedRoleTypeV2">
invalid input: '<'xsd:choice>
invalid input: '<'xsd:element ref="X509AttributeCertificate"/>
invalid input: '<'xsd:element ref="OtherAttributeCertificate"/>
invalid input: '<'/xsd:choice>
invalid input: '<'/xsd:complexType>
invalid input: '<'xsd:element name="X509AttributeCertificate" type="EncapsulatedPKIDataType"/>
invalid input: '<'xsd:element name="OtherAttributeCertificate" type="AnyType"/>
invalid input: '<'xsd:complexType name="SignedAssertionsListType">
invalid input: '<'xsd:sequence>
invalid input: '<'xsd:element ref="SignedAssertion" maxOccurs="unbounded"/>
invalid input: '<'/xsd:sequence>
invalid input: '<'/xsd:complexType>
invalid input: '<'xsd:element name="SignedAssertion" type="AnyType"/>
The ClaimedRoles element shall contain a non-empty sequence of roles claimed by the signer but which are not certified.
Additional content types may be defined on a domain application basis and be part of this element.
NOTE 1: The namespaces given to the corresponding XML schemas allow their unambiguous identification in the case these attributes are expressed in XML syntax (e.g. SAML assertions [i.9] of different versions).
The CertifiedRolesV2 element shall contain a non-empty sequence of certified attributes, which shall be one of the following:
- the base-64 encoding of DER-encoded X509 attribute certificates conformant to Recommendation ITU-T X.509 [4] issued to the signer, within the X509AttributeCertificate element; or
- attribute certificates (issued, in consequence, by Attribute Authorities) in different syntax than the one specified in Recommendation ITU-T X.509 [4], within the OtherAttributeCertificate element. The definition of specific OtherAttributeCertificate is outside of the scope of the present document.
The SignedAssertions element shall contain a non-empty sequence of assertions signed by a third party.
NOTE 2: A signed assertion is stronger than a claimed attribute, since a third party asserts with a signature that the attribute of the signer is valid. However, it is less restrictive than an attribute certificate.
The definition of specific content types for SignedAssertions is outside of the scope of the present document.
NOTE 3: A possible content can be a signed SAML [i.9] assertion. Empty SignerRoleV2 qualifying properties shall not be generated.
-
Method Summary
Modifier and TypeMethodDescriptionvoid
addCertifiedRoleV2
(String role) void
addClaimedRole
(String role) void
setCertifiedRolesV2
(ArrayList<String> certifiedRole) void
setClaimedRoles
(ArrayList<String> claimedRole) void
setSignedAssertions
(ArrayList<String> signedAssertions)
-
Method Details
-
getClaimedRoles
-
setClaimedRoles
-
addClaimedRole
-
getCertifiedRolesV2
-
setCertifiedRolesV2
-
addCertifiedRoleV2
-
getSignedAssertions
-
setSignedAssertions
-