Class ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
- java.lang.Object
-
- net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
-
- All Implemented Interfaces:
Function<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>
public class ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction extends Object implements Function<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>
Implements a set of default logic for determining the custom principals to derive the OIDC ACRs from.This operates for the SAML to OIDC proxy use case. The values returned are empty unless the parent context itself contains a child context carrying particular values. The values are either 'passed through' or mapped by the given principal mappings. All input values are either SAML ACRs or AMRs, and all output values are OIDC ACRs.
-
-
Field Summary
Fields Modifier and Type Field Description private Map<Principal,Collection<Principal>>principalMappingsMappings to transform proxied Principals.
-
Constructor Summary
Constructors Constructor Description ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction()Constructor.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description Collection<AuthenticationContextClassReferencePrincipal>apply(ProfileRequestContext input)voidsetMappings(Map<Principal,Collection<Principal>> mappings)Sets the mappings from input/proxied Principals to zero or more equivalent values to use.
-
-
-
Field Detail
-
principalMappings
@Nonnull @NonnullElements private Map<Principal,Collection<Principal>> principalMappings
Mappings to transform proxied Principals.
-
-
Method Detail
-
setMappings
public void setMappings(@Nullable @NonnullElements Map<Principal,Collection<Principal>> mappings)
Sets the mappings from input/proxied Principals to zero or more equivalent values to use.Any values not mapped will be assumed to be passed through.
- Parameters:
mappings-Principalmappings
-
apply
public Collection<AuthenticationContextClassReferencePrincipal> apply(ProfileRequestContext input)
- Specified by:
applyin interfaceFunction<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>
-
-