net.shibboleth.idp.saml.saml1.profile.impl

Class AddAttributeStatementToAssertion

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction<InboundMessageType,OutboundMessageType>

org.opensaml.profile.action.AbstractConditionalProfileAction<InboundMessageType,OutboundMessageType>

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion

net.shibboleth.idp.saml.saml1.profile.impl.AddAttributeStatementToAssertion

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, org.opensaml.profile.action.ProfileAction, org.springframework.beans.factory.Aware, org.springframework.context.MessageSource, org.springframework.context.MessageSourceAware, org.springframework.webflow.execution.Action

public class AddAttributeStatementToAssertion
extends BaseAddAttributeStatementToAssertion

Action that builds an AttributeStatement and adds it to an Assertion returned by a lookup strategy, by default in the InOutOperationContext.getOutboundMessageContext().

If no Response exists, then an Assertion directly in the outbound message context will be used or created

The IdPAttribute set to be encoded is drawn from an AttributeContext returned from a lookup strategy, by default located on the RelyingPartyContext beneath the profile request context.

Event:

EventIds.PROCEED_EVENT_ID, EventIds.INVALID_MSG_CTX, IdPEventIds.UNABLE_ENCODE_ATTRIBUTE

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private class	AddAttributeStatementToAssertion.AssertionStrategy Default strategy for obtaining assertion to modify.

Field Summary

Fields

Modifier and Type	Field and Description
private Function<org.opensaml.profile.context.ProfileRequestContext,org.opensaml.saml.saml1.core.Assertion>	assertionLookupStrategy Strategy used to locate the Assertion to operate on.
private org.slf4j.Logger	log Class logger.

Constructor Summary

Constructors

Constructor and Description
AddAttributeStatementToAssertion() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
private org.opensaml.saml.saml1.core.AttributeStatement	buildAttributeStatement(org.opensaml.profile.context.ProfileRequestContext profileRequestContext, Collection<IdPAttribute> attributes) Builds an attribute statement from a collection of attributes.
protected void	doExecute(org.opensaml.profile.context.ProfileRequestContext profileRequestContext)
private void	encodeAttribute(org.opensaml.profile.context.ProfileRequestContext profileRequestContext, IdPAttribute attribute, Collection<org.opensaml.saml.saml1.core.Attribute> results) Encodes a IdPAttribute into zero or more Attribute objects if a proper encoder is available.
void	setAssertionLookupStrategy(Function<org.opensaml.profile.context.ProfileRequestContext,org.opensaml.saml.saml1.core.Assertion> strategy) Set the strategy used to locate the Assertion to operate on.

Methods inherited from class net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion

doPreExecute, getAttributeContext, getIdGenerator, getIssuerId, isIgnoringUnencodableAttributes, isStatementInOwnAssertion, setAttributeContextLookupStrategy, setIdentifierGeneratorLookupStrategy, setIgnoringUnencodableAttributes, setIssuerLookupStrategy, setStatementInOwnAssertion

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

assertionLookupStrategy

@Nonnull
private Function<org.opensaml.profile.context.ProfileRequestContext,org.opensaml.saml.saml1.core.Assertion> assertionLookupStrategy

Strategy used to locate the Assertion to operate on.

Constructor Detail

AddAttributeStatementToAssertion

public AddAttributeStatementToAssertion()

Constructor.

Method Detail

setAssertionLookupStrategy

public void setAssertionLookupStrategy(@Nonnull
                              Function<org.opensaml.profile.context.ProfileRequestContext,org.opensaml.saml.saml1.core.Assertion> strategy)

Set the strategy used to locate the Assertion to operate on.

Parameters:

strategy - strategy used to locate the Assertion to operate on

doExecute

protected void doExecute(@Nonnull
             org.opensaml.profile.context.ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class org.opensaml.profile.action.AbstractProfileAction

buildAttributeStatement

@Nullable
private org.opensaml.saml.saml1.core.AttributeStatement buildAttributeStatement(@Nonnull
                                                                               org.opensaml.profile.context.ProfileRequestContext profileRequestContext,
                                                                               @Nullable@NullableElements
                                                                               Collection<IdPAttribute> attributes)
                                                                         throws AttributeEncodingException

Builds an attribute statement from a collection of attributes.

Parameters:

profileRequestContext - current profile request context

attributes - the collection of attributes

Returns:

the attribute statement or null if no attributes can be encoded

Throws:

AttributeEncodingException - thrown if there is a problem encoding an attribute

encodeAttribute

private void encodeAttribute(@Nonnull
                   org.opensaml.profile.context.ProfileRequestContext profileRequestContext,
                   @Nonnull
                   IdPAttribute attribute,
                   @Nonnull@NonnullElements
                   Collection<org.opensaml.saml.saml1.core.Attribute> results)
                      throws AttributeEncodingException

Encodes a IdPAttribute into zero or more Attribute objects if a proper encoder is available.

Parameters:

profileRequestContext - current profile request context

attribute - the attribute to be encoded

results - collection to add the encoded SAML attributes to

Throws:

AttributeEncodingException - thrown if there is a problem encoding an attribute