import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
private FilterChainProxy samlFilter(SAMLEntryPoint samlEntryPoint, SAMLContextProvider contextProvider) {
	List<SecurityFilterChain> chains = new ArrayList<>();
	chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher("/saml/login/**"),
		samlEntryPoint));
	chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher("/saml/metadata/**"),
		new MetadataDisplayFilter()));
	try {
		chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher("/saml/SSO/**"),
			samlWebSSOProcessingFilter(samlAuthenticationProvider, contextProvider, samlProcessor)));
	} catch (Exception e) {
		e.printStackTrace();
	}
	SAMLDiscovery samlDiscovery = new SAMLDiscovery();
	samlDiscovery.setMetadata(cachingMetadataManager);
	samlDiscovery.setContextProvider(contextProvider);
	chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher("/saml/discovery/**"),
		samlDiscovery));
	return new FilterChainProxy(chains);
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Override
public void configure(ServiceProviderBuilder builder) throws Exception {
    SAMLContextProvider samlContextProviderBean = builder.getSharedObject(SAMLContextProvider.class);
    if (samlContextProviderBean == null && !samlContextProviderProperties.getLb().isEnabled()) {
        if (samlContextProvider == null) {
            samlContextProvider = createDefaultSamlContextProvider();
        }
        builder.setSharedObject(SAMLContextProvider.class, samlContextProvider);
    }
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Override
public void configure(ServiceProviderBuilder builder) throws Exception {
    SAMLContextProvider samlContextProviderBean = builder.getSharedObject(SAMLContextProvider.class);
    if (samlContextProviderBean == null) {
        if (samlContextProvider == null) {
            samlContextProvider = createDefaultSamlContextProviderLB();
            samlContextProvider.setScheme(Optional.ofNullable(scheme).orElseGet(config::getScheme));
            samlContextProvider.setServerName(Optional.ofNullable(serverName).orElseGet(config::getServerName));
            samlContextProvider.setIncludeServerPortInRequestURL(Optional.ofNullable(includeServerPortInRequestURL).orElseGet(config::getIncludeServerPortInRequestUrl));
            samlContextProvider.setServerPort(Optional.ofNullable(serverPort).orElseGet(config::getServerPort));
            samlContextProvider.setContextPath(Optional.ofNullable(contextPath).orElseGet(config::getContextPath));
        }
        builder.setSharedObject(SAMLContextProvider.class, samlContextProvider);
    }
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Override
public void afterPropertiesSet() {
    //All existing beans are thrown as shared objects to the ServiceProviderSecurityBuilder, which will wire all
    //beans/objects related to spring security SAML.
    serviceProviderBuilder.setSharedObject(ParserPool.class, ParserPoolHolder.getPool());
    serviceProviderBuilder.setSharedObject(WebSSOProfileConsumerImpl.class, (WebSSOProfileConsumerImpl) webSSOProfileConsumer);
    serviceProviderBuilder.setSharedObject(WebSSOProfileConsumerHoKImpl.class, hokWebSSOProfileConsumer);
    serviceProviderBuilder.setSharedObject(ServiceProviderEndpoints.class, new ServiceProviderEndpoints());
    serviceProviderBuilder.setSharedObject(ResourceLoader.class, resourceLoader);
    serviceProviderBuilder.setSharedObject(SAMLSSOProperties.class, sAMLSsoProperties);
    serviceProviderBuilder.setSharedObject(ExtendedMetadata.class, extendedMetadata);
    serviceProviderBuilder.setSharedObject(LocalExtendedMetadata.class, localExtendedMetadata);
    serviceProviderBuilder.setSharedObject(SAMLAuthenticationProvider.class, samlAuthenticationProvider);
    serviceProviderBuilder.setSharedObject(SAMLContextProvider.class, samlContextProvider);
    serviceProviderBuilder.setSharedObject(KeyManager.class, keyManager);
    serviceProviderBuilder.setSharedObject(MetadataManager.class, metadataManager);
    serviceProviderBuilder.setSharedObject(MetadataGenerator.class, metadataGenerator);
    serviceProviderBuilder.setSharedObject(SAMLProcessor.class, samlProcessor);
    serviceProviderBuilder.setSharedObject(WebSSOProfile.class, webSSOProfile);
    serviceProviderBuilder.setSharedObject(WebSSOProfileECPImpl.class, ecpProfile);
    serviceProviderBuilder.setSharedObject(WebSSOProfileHoKImpl.class, hokWebSSOProfile);
    serviceProviderBuilder.setSharedObject(SingleLogoutProfile.class, sloProfile);
    serviceProviderBuilder.setSharedObject(WebSSOProfileConsumer.class, webSSOProfileConsumer);
    serviceProviderBuilder.setSharedObject(WebSSOProfileConsumerHoKImpl.class, hokWebSSOProfileConsumer);
    serviceProviderBuilder.setSharedObject(SAMLLogger.class, samlLogger);
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Test
public void configure() throws Exception {
    SAMLContextProviderConfigurer configurer = spy(new SAMLContextProviderConfigurer());
    SAMLContextProvider provider = mock(SAMLContextProvider.class);
    when(configurer.createDefaultSamlContextProvider()).thenReturn(provider);
    configurer.init(builder);
    configurer.configure(builder);
    verify(builder).setSharedObject(eq(SAMLContextProvider.class), eq(provider));
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Test
public void configure_forBean() throws Exception {
    SAMLContextProviderConfigurer configurer = spy(new SAMLContextProviderConfigurer());
    SAMLContextProvider provider = mock(SAMLContextProvider.class);
    when(builder.getSharedObject(SAMLContextProvider.class)).thenReturn(provider);
    configurer.init(builder);
    configurer.configure(builder);
    verify(configurer, never()).createDefaultSamlContextProvider();
    verify(builder, never()).setSharedObject(any(), any());
    verifyZeroInteractions( provider);
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Test
public void configure_forConstructor() throws Exception {
    SAMLContextProvider provider = mock(SAMLContextProvider.class);
    SAMLContextProviderConfigurer configurer = spy(new SAMLContextProviderConfigurer(provider));
    configurer.init(builder);
    configurer.configure(builder);
    verify(configurer, never()).createDefaultSamlContextProvider();
    verify(builder).setSharedObject(SAMLContextProvider.class, provider);
    verifyZeroInteractions( provider);
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@Override
public void init(HttpSecurity http) {

	metadataProvider = identityProvider.metadataProvider();
	ExtendedMetadata extendedMetadata = extendedMetadata(identityProvider.discoveryEnabled);
	extendedMetadataDelegate = extendedMetadataDelegate(extendedMetadata);
	serviceProvider.keyManager = serviceProvider.keyManager();
	cachingMetadataManager = cachingMetadataManager();
	webSSOProfile = new WebSSOProfileImpl(samlProcessor, cachingMetadataManager);
	samlAuthenticationProvider = samlAuthenticationProvider(webSSOProfileConsumer);

	bootstrap();

	SAMLContextProvider contextProvider = contextProvider();
	SAMLEntryPoint samlEntryPoint = samlEntryPoint(contextProvider);

	try {
		http
			.httpBasic()
			.authenticationEntryPoint(samlEntryPoint);

		CsrfConfigurer<HttpSecurity> csrfConfigurer = http.getConfigurer(CsrfConfigurer.class);
		if(csrfConfigurer != null) {
			// Workaround to get working with Spring Security 3.2.
			RequestMatcher ignored = new AntPathRequestMatcher("/saml/SSO");
			RequestMatcher notIgnored = new NegatedRequestMatcher(ignored);
			RequestMatcher matcher = new AndRequestMatcher(new DefaultRequiresCsrfMatcher(), notIgnored);

			csrfConfigurer.requireCsrfProtectionMatcher(matcher);
		}
	} catch (Exception e) {
		e.printStackTrace();
	}

	http
		.addFilterBefore(metadataGeneratorFilter(samlEntryPoint, extendedMetadata), ChannelProcessingFilter.class)
		.addFilterAfter(samlFilter(samlEntryPoint, contextProvider), BasicAuthenticationFilter.class)
		.authenticationProvider(samlAuthenticationProvider);
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
@VisibleForTesting
protected SAMLContextProvider createDefaultSamlContextProvider() {
    return new SAMLContextProviderImpl();
}
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
public SAMLContextProviderConfigurer(SAMLContextProvider samlContextProvider) {

        this.samlContextProvider = samlContextProvider;
    }
 

import org.springframework.security.saml.context.SAMLContextProvider; //导入依赖的package包/类
/**
 * Sets entity responsible for populating local entity context data.
 * It is set in the custom config, so can be optional here.
 * User could override it if desired.
 *
 * @param contextProvider provider implementation
 */
@Autowired(required = false)
@Override
public void setContextProvider(SAMLContextProvider contextProvider) {
	super.setContextProvider(contextProvider);
}