[java-idp-testbed COMMIT] in /trunk/src/main/resources: conf/authn-flow-descriptors.xml conf/idp.properties conf/sess...
noreply at shibboleth.net
noreply at shibboleth.net
Wed Oct 16 15:02:41 EDT 2013
Author: scantor
Date: Wed Oct 16 15:02:40 2013
New Revision: 12
URL: http://svn.shibboleth.net/view/java-idp-testbed?rev=12&view=rev
Log:
Idea for enabling flows without affecting bean declarations.
Modified:
trunk/src/main/resources/conf/authn-flow-descriptors.xml
trunk/src/main/resources/conf/idp.properties
trunk/src/main/resources/conf/session-manager.xml
trunk/src/main/resources/flows/authn/authn-beans.xml
Modified: trunk/src/main/resources/conf/authn-flow-descriptors.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/authn-flow-descriptors.xml?rev=12&r1=11&r2=12&view=diff
==============================================================================
--- trunk/src/main/resources/conf/authn-flow-descriptors.xml (original)
+++ trunk/src/main/resources/conf/authn-flow-descriptors.xml Wed Oct 16 15:02:40 2013
@@ -73,7 +73,7 @@
</list>
</property>
</bean>
-
+
</util:list>
</beans>
Modified: trunk/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/idp.properties?rev=12&r1=11&r2=12&view=diff
==============================================================================
--- trunk/src/main/resources/conf/idp.properties (original)
+++ trunk/src/main/resources/conf/idp.properties Wed Oct 16 15:02:40 2013
@@ -28,6 +28,9 @@
# Support lookup by SP for SAML logout
idp.session.secondaryServiceIndex = false
+# Regular expression expressing flows to enable
+idp.authn.flows = JAASForm
+
# Default lifetime and timeout of various authentication methods
idp.authn.defaultLifetime = PT60M
idp.authn.defaultTimeout = PT30M
Modified: trunk/src/main/resources/conf/session-manager.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/session-manager.xml?rev=12&r1=11&r2=12&view=diff
==============================================================================
--- trunk/src/main/resources/conf/session-manager.xml (original)
+++ trunk/src/main/resources/conf/session-manager.xml Wed Oct 16 15:02:40 2013
@@ -12,9 +12,12 @@
default-init-method="initialize"
default-destroy-method="destroy">
+ <bean id="shibboleth.SessionIDGenerator" class="net.shibboleth.utilities.java.support.security.SecureRandomIdentifierGenerationStrategy"
+ c:identifierSize="${idp.session.idSize}" />
+
<bean id="shibboleth.SessionManager" class="net.shibboleth.idp.session.impl.StorageBackedSessionManager"
p:httpServletRequest-ref="shibboleth.HttpServletRequest" p:httpServletResponse-ref="shibboleth.HttpServletResponse"
- p:authenticationFlowDescriptors-ref="shibboleth.AvailableAuthenticationFlows"
+ p:authenticationFlowDescriptors="#{@'shibboleth.AvailableAuthenticationFlows'.?[id matches 'AuthenticationFlow/(${idp.authn.flows})']}"
p:cookieManager-ref="shibboleth.CookieManager"
p:storageService-ref="shibboleth.StorageService"
p:consistentAddress="${idp.session.consistentAddress}"
@@ -22,11 +25,7 @@
p:sessionSlop="${idp.session.slop}"
p:maskStorageFailure="${idp.session.maskStorageFailure}"
p:trackSPSessions="${idp.session.trackSPSessions}"
- p:secondaryServiceIndex="${idp.session.secondaryServiceIndex}">
- <property name="IDGenerator">
- <bean class="net.shibboleth.utilities.java.support.security.SecureRandomIdentifierGenerationStrategy"
- c:identifierSize="${idp.session.idSize}" />
- </property>
- </bean>
+ p:secondaryServiceIndex="${idp.session.secondaryServiceIndex}"
+ p:IDGenerator-ref="shibboleth.SessionIDGenerator" />
</beans>
Modified: trunk/src/main/resources/flows/authn/authn-beans.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/flows/authn/authn-beans.xml?rev=12&r1=11&r2=12&view=diff
==============================================================================
--- trunk/src/main/resources/flows/authn/authn-beans.xml (original)
+++ trunk/src/main/resources/flows/authn/authn-beans.xml Wed Oct 16 15:02:40 2013
@@ -19,7 +19,7 @@
<!-- The beans to inject to configure the initialization of the subsystem come from the imported files above. -->
<bean id="InitializeAuthenticationContext" class="net.shibboleth.idp.authn.impl.InitializeAuthenticationContext" scope="prototype"
- p:availableFlows-ref="shibboleth.AvailableAuthenticationFlows"
+ p:availableFlows="#{@'shibboleth.AvailableAuthenticationFlows'.?[id matches 'AuthenticationFlow/(${idp.authn.flows})']}"
p:principalEvalPredicateFactoryRegistry-ref="shibboleth.AuthnComparisonRegistry" />
<bean id="PopulateSessionContext" class="net.shibboleth.idp.session.impl.PopulateSessionContext" scope="prototype"
More information about the commits
mailing list