org.opensaml.saml.saml2.profile.impl

Class AddProxyRestrictionToAssertions

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction<InboundMessageType,OutboundMessageType>

org.opensaml.profile.action.AbstractConditionalProfileAction

org.opensaml.saml.saml2.profile.impl.AddProxyRestrictionToAssertions

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction

public class AddProxyRestrictionToAssertions
extends AbstractConditionalProfileAction

Action adds an ProxyRestriction to every Assertion contained in a SAML 2 response, with the audiences and count obtained from a lookup function. If the containing Conditions is not present, it will be created.

Event:

EventIds.PROCEED_EVENT_ID, EventIds.INVALID_MSG_CTX

Field Summary

Fields

Modifier and Type	Field and Description
private Collection<String>	audiences Audiences to add.
private org.slf4j.Logger	log Class logger.
private com.google.common.base.Function<ProfileRequestContext,Collection<String>>	proxyAudiencesLookupStrategy Strategy used to obtain the audiences to add.
private com.google.common.base.Function<ProfileRequestContext,Long>	proxyCountLookupStrategy Strategy used to obtain the proxy count to add.
private Response	response Response to modify.
private com.google.common.base.Function<ProfileRequestContext,Response>	responseLookupStrategy Strategy used to locate the Response to operate on.

Constructor Summary

Constructors

Constructor and Description
AddProxyRestrictionToAssertions() Constructor.

Method Summary

Modifier and Type	Method and Description
private void	addProxyRestriction(ProfileRequestContext profileRequestContext, Conditions conditions) Add the audiences obtained from a lookup function to the ProxyRestriction.
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
private ProxyRestriction	getProxyRestriction(Conditions conditions) Get the ProxyRestriction to which audiences will be added.
void	setProxyAudiencesLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy) Set the strategy used to obtain the proxy restrictions to apply.
void	setProxyCountLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Long> strategy) Set the strategy used to obtain the proxy count to apply.
void	setResponseLookupStrategy(com.google.common.base.Function<ProfileRequestContext,Response> strategy) Set the strategy used to locate the Response to operate on.

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

responseLookupStrategy

@Nonnull
private com.google.common.base.Function<ProfileRequestContext,Response> responseLookupStrategy

Strategy used to locate the Response to operate on.

proxyAudiencesLookupStrategy

@Nullable
private com.google.common.base.Function<ProfileRequestContext,Collection<String>> proxyAudiencesLookupStrategy

Strategy used to obtain the audiences to add.

proxyCountLookupStrategy

@Nullable
private com.google.common.base.Function<ProfileRequestContext,Long> proxyCountLookupStrategy

Strategy used to obtain the proxy count to add.

response

@Nullable
private Response response

Response to modify.

audiences

@Nullable
private Collection<String> audiences

Audiences to add.

Constructor Detail

AddProxyRestrictionToAssertions

public AddProxyRestrictionToAssertions()

Constructor.

Method Detail

setResponseLookupStrategy

public void setResponseLookupStrategy(@Nonnull
                                      com.google.common.base.Function<ProfileRequestContext,Response> strategy)

Set the strategy used to locate the Response to operate on.

Parameters:

strategy - lookup strategy

setProxyAudiencesLookupStrategy

public void setProxyAudiencesLookupStrategy(@Nonnull
                                            com.google.common.base.Function<ProfileRequestContext,Collection<String>> strategy)

Set the strategy used to obtain the proxy restrictions to apply.

Parameters:

strategy - lookup strategy

setProxyCountLookupStrategy

public void setProxyCountLookupStrategy(@Nonnull
                                        com.google.common.base.Function<ProfileRequestContext,Long> strategy)

Set the strategy used to obtain the proxy count to apply.

Parameters:

strategy - lookup strategy

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractConditionalProfileAction

doExecute

protected void doExecute(@Nonnull
                         ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction

addProxyRestriction

private void addProxyRestriction(@Nonnull
                                 ProfileRequestContext profileRequestContext,
                                 @Nonnull
                                 Conditions conditions)

Add the audiences obtained from a lookup function to the ProxyRestriction. If no ProxyRestriction exists on the given Conditions one is created and added.

Parameters:

profileRequestContext - current profile request context

conditions - condition that has, or will receive the created, ProxyRestriction

getProxyRestriction

@Nonnull
private ProxyRestriction getProxyRestriction(@Nonnull
                                                      Conditions conditions)

Get the ProxyRestriction to which audiences will be added.

Parameters:

conditions - existing set of conditions

Returns:

the condition to which audiences will be added