[JIRA] Commented: (SSPCPP-376) Add a post-filtering hashing feature to shorten long attributes, namely ePTIDs

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-376?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14066#comment-14066 ] 

Scott Cantor commented on SSPCPP-376:
-------------------------------------

Maintaining the filtering requirement is a bit trickier; couple possibilities:

Add a workflow option that runs resolvers either before or after filtering. That's a bit invasive because of the many places executing this workflow now.

Would be ideal to implement it somehow via the attribute serialization step, but that happens in-process too and wouldn't have access to the hash functions. Probably would require a new decoder and attribute class that tracks both pre- and post-hashed values, exposes the pre-hashed to the filter step, but the post-hashed as the serialized form.


> Add a post-filtering hashing feature to shorten long attributes, namely ePTIDs 
> -------------------------------------------------------------------------------
>
>                 Key: SSPCPP-376
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-376
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: Attribute Resolution / Filtering
>            Reporter: Thomas Lenggenhager
>            Assignee: Scott Cantor
>             Fix For: 2.5
>
>   Original Estimate: 1 day
>  Remaining Estimate: 1 day
>
> Longish attribute values like the ones for eduPersonTargetedID can lead to problems within applications, which do not expect that long values and are not able to store them in their internal storage. A good example is JIRA itself.
> If the SP could generate a hash for such long attributes, the problem would disappear, without having to wait for a fix of the application itself.
> In order to still be able to track back user activity, it will be necessary that the SP logs (or stores?) enough details about hashes it generated.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira