Federated Single Sign-on with Shibboleth

Shibboleth supports federated (i.e. multiple Identity Provider, IdP) Single Sign-on (SSO) with SAML 2.0.

Shibboleth 2 supports SAML 2.0 and WS-Federation Passive (ADFS), but NOT OAuth 2.0 and OpenID 2.

Reference:

1. https://shibboleth.net/about/
2. https://wiki.shibboleth.net/confluence/display/DEV/Supported+Protocols
3. https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig
4. https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy

How to Handle SAML 2.0 HTTP Redirect Binding in AngularJS

"The default settings of the ui-router in AngularJS produces URLs like http://localhost/#/products/details/12345. Your Servlet gets a request for / and after a successful SAML authentication you are sent back to http://localhost/. The location hash #/products/details/12345 is lost during the authentication."

This is ok if you have a landing page, but not after session timeout.

"The solution was to enable the hmtl5mode in the $locationProvider and add a base tag to the HTML. When this feature is enabled, the URLs look like http://localhost/products/details/12345."

Reference: http://www.jasha.eu/blogposts/2015/10/saml-authentication-angularjs-spring-security.html

Also good links:

1. https://www.mutuallyhuman.com/blog/2013/05/09/choosing-an-sso-strategy-saml-vs-oauth2/
2. https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/458610/Identity_Assurance_Hub_Service_Profile_v1.2a.pdf

How JBoss EAP 6 Recieves Client Certificate with CLIENT-CERT

When you configure you web application with client certificate authentication.

<login-config>
    <auth-method>CLIENT-CERT</auth-method>
</login-config>

The jbossweb/catalina valve is receiving the client certificate by:
org.apache.catalina.authenticator.SSLAuthenticator#authenticate(Request, HttpServletResponse, LoginConfig)

// Retrieve the certificate chain for this client
X509Certificate certs[] = request.getCertificateChain();
if ((certs == null) || (certs.length < 1)) {
    if (getContainer().getLogger().isDebugEnabled())
        getContainer().getLogger().debug("  No certificates included with this request");
    response.sendError(HttpServletResponse.SC_UNAUTHORIZED,
                       MESSAGES.missingRequestCertificate());
    return (false);
}

org.apache.catalina.connector.Request#getCertificateChain()

public X509Certificate[] getCertificateChain() {
    X509Certificate certs[] = (X509Certificate[]) getAttribute(Globals.CERTIFICATES_ATTR);

org.apache.catalina.CERTIFICATES_ATTR

/**
 * The request attribute under which we store the array of X509Certificate
 * objects representing the certificate chain presented by our client,
 * if any.
 */
public static final String CERTIFICATES_ATTR =
    "javax.servlet.request.X509Certificate";

Reference from JBoss EAP 6.4 and http://maven.repository.redhat.com/techpreview/all/org/jboss/web/jbossweb/7.5.7.Final-redhat-1/jbossweb-7.5.7.Final-redhat-1-sources.jar.

SAML Security

https://www.owasp.org/index.php/SAML_Security_Cheat_Sheet

http://docs.oasis-open.org/security/saml/v2.0/saml-sec-consider-2.0-os.pdf

Google Chrome not Starting in Ubuntu 16.04 LTS

1. Open you file browser ("Files" in the launcher).
2. Then go up to "edit" in the top of screen menu bar and select preferences.
3. Then tick "Show hidden and backup files".
4. Go back to your file browser and scroll down to ".local" and open the folder.
5. Then open "share" folder.
6. Open "applications" folder.
7. Select every folder with chrome in it's name and trash (empty trash).
8. Open the launcher and Chromium Web Browser.

From http://askubuntu.com/questions/488823/google-chrome-not-starting.

How to Center a Window in Swing

frame.setLocationRelativeTo(null);

How to Install Look And Feel in Swing

1. Programmatically

UIManager.setLookAndFeel(UIManager.getCrossPlatformLookAndFeelClassName());

2. System Property

java -Dswing.defaultlaf=javax.swing.plaf.nimbus.NimbusLookAndFeel MyApp

3. Globally

Add the following line to the $JAVA_HOME/lib/swing.properties:

swing.defaultlaf=javax.swing.plaf.nimbus.NimbusLookAndFeel

For details see https://docs.oracle.com/javase/tutorial/uiswing/lookandfeel/nimbus.html.

How to Add Double Click Listener to JTable

table.addMouseListener(new MouseAdapter() {
    public void mouseClicked(MouseEvent evt) {
        if (evt.getClickCount() == 2) {
                 Point point = evt.getPoint();
                 int row = table.rowAtPoint(point);
        }
    }
});

A Graphical Overview of Swing Components

Screenshot from NetBeans palette.

How To Programmatically Close a JInternalFrame

desktopPane.getDesktopManager().closeFrame(internalFrame);

For details see http://esus.com/programmatically-closing-a-jinternalframe/.

Default Sorting for JTable

table.setAutoCreateRowSorter(true);

For details see http://www.codejava.net/java-se/swing/6-techniques-for-sorting-jtable-you-should-know.

Eclipse Versions and Names

Sometime you need to know the version of Eclipse and not just the version name. Here is a list of the today latest names and versions

Eclipse Neon (4.6)
Eclipse Mars (4.5)
Eclipse Luna (4.4)
Eclipse Kepler (4.3)
Eclipse Juno (4.2)

A Visual Guide to Java Swing Layout Managers

https://docs.oracle.com/javase/tutorial/uiswing/layout/visual.html

WebSocket in Java EE 7

What is WebSocket?

"WebSocket is a protocol which allows for communication between the client and the server/endpoint using a single TCP connection. The advantage WebSocket has over HTTP is that the protocol is full-duplex (allows for simultaneous two-way communcation) and it’s header is much smaller than that of a HTTP header, allowing for more efficient communcation even over small packets of data."

To read more ...

Default Method in Java 8

Introduction

Default Method in Java 8 is used for adding new methods in Interface without needing to altering implementing Classes.

Example: Original version

public interface Car {

    public int getSpeed();
}

public class SportCar implements Car {

    @Override
    public int getSpeed() {
        return 100;
    }
}

Now we want to add new methods to interface, but if we did we also need to update implementing Classes. Instead of doing that we could use the new Default Method feature in Java 8

public interface Car {

    public int getSpeed();

    public default Color getColor() {
        return Color.RED;
    }
}

Java Streams in Java 8

java.util.stream.Stream

Stream is a new feature in Java 8 that brings a lot of operation for Collections. Here I will present the most important, but for a complete list see the Java API.

In the below examples I will use a List of Strings.

List<String> strings = Arrays.asList(new String[] { "Alf", "Bo", "Doo", "Core", "Adam", "Nisse" });

filter()

strings.stream().filter(s -> s.contains("o")).forEach(System.out::println);

map()

The map() method converts each element into another object via the given function.

strings.stream().map(s -> s.toUpperCase()).forEach(System.out::println);

sorted()

strings.stream().sorted((s1, s2) -> s1.compareTo(s2)).forEach(System.out::println);

collect()

Creates a new Collection.

List<String> result = strings.stream().sorted().collect(Collectors.toList());

match()

Returns matched elements in Collections.

boolean anyMatch = strings.stream().anyMatch(s -> s.startsWith("A"));
System.out.println("anyMatch: " + anyMatch);

boolean allMatch = strings.stream().allMatch(s -> s.startsWith("A"));
System.out.println("allMatch: " + allMatch);

boolean noneMatch = strings.stream().noneMatch(s -> s.startsWith("A"));
System.out.println("noneMatch: " + noneMatch);

count()

long noItems = strings.stream().count();
System.out.println("noItems: " + noItems);

reduce()

Collaps the entire Collections to single element.

Optional<String> reduce = strings.stream().reduce((s1, s2) -> s1 + ", " + s2);
System.out.println("reduce: "+ reduce.get());

Lambda Expression in Java 8

Introduction

Lambda expression is used to replace one method classes/interface with inline code.

Syntax

(arg1, arg2...) -> { body }

• Declaring the types of the parameters is optional.
• Using parentheses around the parameter is optional if you have only one parameter.
• Using curly braces is optional (unless you need multiple statements).
• The “return” keyword is optional if you have a single expression that returns a value.

Examples

        new Thread(() -> {
            System.out.println("Hello from runnable.");
        }).start();

        List<String> s = Arrays.asList(new String[] { "foo", "bar", "code" });
        Collections.sort(s, (String s1, String s2) -> {
            return s1.compareTo(s2);
        });

        Collections.sort(s, (s1, s2) -> s1.compareTo(s2));

        for (String i : s) {
            System.out.println(i);
        }

Reference

http://www.oracle.com/webfolder/technetwork/tutorials/obe/java/Lambda-QuickStart/index.html

Good Interactive GIT Tutorial

http://learngitbranching.js.org/

And a good cheat sheet: http://cheat.errtheblog.com/s/git