[java-idp-testbed COMMIT] in /trunk/src/main/resources: conf/idp.properties conf/ipaddress-authn-config.xml flows/aut...

[noreply at shibboleth.net]

Author: scantor
Date: Mon Nov  4 23:29:00 2013
New Revision: 36

URL: http://svn.shibboleth.net/view/java-idp-testbed?rev=36&view=rev
Log:
Allow IP authn flow to trigger reselect of a different flow.

Modified:
    trunk/src/main/resources/conf/idp.properties
    trunk/src/main/resources/conf/ipaddress-authn-config.xml
    trunk/src/main/resources/flows/authn/authn-abstract-flow.xml
    trunk/src/main/resources/flows/authn/authn-flow.xml
    trunk/src/main/resources/flows/authn/ipaddress-authn-flow.xml

Modified: trunk/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/idp.properties?rev=36&r1=35&r2=36&view=diff
==============================================================================
--- trunk/src/main/resources/conf/idp.properties (original)
+++ trunk/src/main/resources/conf/idp.properties Mon Nov  4 23:29:00 2013
@@ -42,7 +42,7 @@
 idp.session.secondaryServiceIndex = false
 
 # Regular expression expressing flows to enable 
-idp.authn.flows = JAASForm
+idp.authn.flows = IPAddress|JAASForm
 
 # Default lifetime and timeout of various authentication methods
 idp.authn.defaultLifetime = PT60M

Modified: trunk/src/main/resources/conf/ipaddress-authn-config.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/ipaddress-authn-config.xml?rev=36&r1=35&r2=36&view=diff
==============================================================================
--- trunk/src/main/resources/conf/ipaddress-authn-config.xml (original)
+++ trunk/src/main/resources/conf/ipaddress-authn-config.xml Mon Nov  4 23:29:00 2013
@@ -28,12 +28,14 @@
     <!-- You can configure the address range(s) and principal name(s) for IP-based login here. -->
 
     <util:map id="shibboleth.authn.IPAddress.Mappings">
+        <!--
         <entry key="jdoe">
             <list>
                 <value>127.0.0.1/32</value>
                 <value>::1/128</value>
             </list>
         </entry>
+        -->
     </util:map>
 
 </beans>

Modified: trunk/src/main/resources/flows/authn/authn-abstract-flow.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/flows/authn/authn-abstract-flow.xml?rev=36&r1=35&r2=36&view=diff
==============================================================================
--- trunk/src/main/resources/flows/authn/authn-abstract-flow.xml (original)
+++ trunk/src/main/resources/flows/authn/authn-abstract-flow.xml Mon Nov  4 23:29:00 2013
@@ -15,6 +15,7 @@
     <end-state id="NoCredentials" />
     <end-state id="NoPotentialFlow" />
     <end-state id="RequestUnsupported" />
+    <end-state id="ReselectFlow" />
     <end-state id="SubjectCanonicalizationError" />
 
     <!-- Default is to turn any event into its own end-state. -->

Modified: trunk/src/main/resources/flows/authn/authn-flow.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/flows/authn/authn-flow.xml?rev=36&r1=35&r2=36&view=diff
==============================================================================
--- trunk/src/main/resources/flows/authn/authn-flow.xml (original)
+++ trunk/src/main/resources/flows/authn/authn-flow.xml Mon Nov  4 23:29:00 2013
@@ -55,9 +55,11 @@
 
     <!--
     This invokes an authentication flow to attempt a login. Anything but proceed
-    is an error, otherwise control passes to the wrap-up actions.
+    is an error, otherwise control passes to the wrap-up actions, except for a
+    ReselectFlow signal to loop back up and try another.
     -->
     <subflow-state id="CallAuthenticationFlow" subflow="#{currentEvent.id}">
+        <transition on="ReselectFlow" to="SelectAuthenticationFlow" />
         <transition on="proceed" to="InvalidateSessionOnIdentitySwitch" />
     </subflow-state>
 

Modified: trunk/src/main/resources/flows/authn/ipaddress-authn-flow.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/flows/authn/ipaddress-authn-flow.xml?rev=36&r1=35&r2=36&view=diff
==============================================================================
--- trunk/src/main/resources/flows/authn/ipaddress-authn-flow.xml (original)
+++ trunk/src/main/resources/flows/authn/ipaddress-authn-flow.xml Mon Nov  4 23:29:00 2013
@@ -18,12 +18,14 @@
     
     <action-state id="ValidateUserAgentAddress">
         <evaluate expression="ValidateUserAgentAddress" />
-        
-        <!--  Example to wire a second validation range in using a differently named bean. -->
-        <!-- <transition on="InvalidCredentials" to="ValidateUserAgentAddress2" /> -->
-        
         <transition on="proceed" to="CallSubjectCanonicalization" />
     </action-state>
+
+    <!-- As a "fall-through" method, remap selected events to select a different flow. -->    
+    <global-transitions>
+        <transition on="NoCredentials" to="ReselectFlow" />
+        <transition on="InvalidCredentials" to="ReselectFlow" />
+    </global-transitions>
     
     <bean-import resource="ipaddress-authn-beans.xml" />