java解析 SAMLResponse

要在Java中解析SAMLResponse，可以使用开源的SAML库，例如OpenSAML或Shibboleth。以下是使用OpenSAML解析SAMLResponse的基本步骤：

1. 添加依赖项：在Maven项目中，可以在pom.xml文件中添加以下依赖项：

<dependency>
    <groupId>org.opensaml</groupId>
    <artifactId>opensaml-core</artifactId>
    <version>3.4.5</version>
</dependency>
<dependency>
    <groupId>org.opensaml</groupId>
    <artifactId>opensaml-saml-api</artifactId>
    <version>3.4.5</version>
</dependency>
<dependency>
    <groupId>org.opensaml</groupId>
    <artifactId>opensaml-saml-impl</artifactId>
    <version>3.4.5</version>
</dependency>

2. 解码SAMLResponse：使用Base64解码SAMLResponse字符串。

String samlResponse = "..." // SAMLResponse字符串
byte[] decodedResponse = Base64.getDecoder().decode(samlResponse);

3. 创建SAML消息上下文：使用OpenSAML创建SAML消息上下文。

BasicParserPool parserPool = new BasicParserPool();
DocumentBuilderFactory documentBuilderFactory = DocumentBuilderFactory.newInstance();
documentBuilderFactory.setNamespaceAware(true);
parserPool.setNamespaceAware(true);
parserPool.setBuilderFactory(documentBuilderFactory);
Element samlElement = parserPool.parse(new ByteArrayInputStream(decodedResponse)).getDocumentElement();
UnmarshallerFactory unmarshallerFactory = Configuration.getUnmarshallerFactory();
Unmarshaller unmarshaller = unmarshallerFactory.getUnmarshaller(samlElement);
XMLObject samlObject = unmarshaller.unmarshall(samlElement);
MessageContext<SAMLObject> messageContext = new MessageContext<>();
messageContext.setMessage((SAMLObject) samlObject);

4. 验证SAML消息：使用OpenSAML验证SAML消息。

SAMLMessageValidator<SAMLObject> validator = new SAMLMessageValidator<>();
validator.validate(messageContext);

5. 获取SAML属性：从SAML消息中获取所需的属性。

Response response = (Response) messageContext.getMessage();
List<Assertion> assertions = response.getAssertions();
for (Assertion assertion : assertions) {
    List<AttributeStatement> attributeStatements = assertion.getAttributeStatements();
    for (AttributeStatement attributeStatement : attributeStatements) {
        List<Attribute> attributes = attributeStatement.getAttributes();
        for (Attribute attribute : attributes) {
            String attributeName = attribute.getName();
            List<XMLObject> attributeValues = attribute.getAttributeValues();
            for (XMLObject attributeValue : attributeValues) {
                String attributeValueString = attributeValue.getDOM().getTextContent();
            }
        }
    }
}

以上是使用OpenSAML解析SAMLResponse的基本步骤，可以根据具体需求进行调整和扩展。