[java-idp-testbed COMMIT] /trunk/src/main/resources/conf/authn-flow-descriptors.xml

[noreply at shibboleth.net]

Author: scantor
Date: Wed Oct 30 15:05:15 2013
New Revision: 32

URL: http://svn.shibboleth.net/view/java-idp-testbed?rev=32&view=rev
Log:
Add a custom bean to shrink storage of AuthnResults.

Modified:
    trunk/src/main/resources/conf/authn-flow-descriptors.xml

Modified: trunk/src/main/resources/conf/authn-flow-descriptors.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/authn-flow-descriptors.xml?rev=32&r1=31&r2=32&view=diff
==============================================================================
--- trunk/src/main/resources/conf/authn-flow-descriptors.xml (original)
+++ trunk/src/main/resources/conf/authn-flow-descriptors.xml Wed Oct 30 15:05:15 2013
@@ -21,6 +21,7 @@
     <util:list id="shibboleth.AvailableAuthenticationFlows">
         
         <bean c:id="AuthenticationFlow/IPAddress" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+                p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
                 p:passiveAuthenticationSupported="true"
                 p:forcedAuthenticationSupported="false"
                 p:lifetime="PT60S" p:inactivityTimeout="PT60S">
@@ -33,6 +34,7 @@
         </bean>
         
         <bean c:id="AuthenticationFlow/RemoteUser" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+                p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
                 p:passiveAuthenticationSupported="false"
                 p:forcedAuthenticationSupported="true"
                 p:lifetime="${idp.authn.defaultLifetime}" p:inactivityTimeout="${idp.authn.defaultTimeout}">
@@ -47,6 +49,7 @@
         </bean>
 
         <bean c:id="AuthenticationFlow/JAASForm" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+                p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
                 p:passiveAuthenticationSupported="false"
                 p:forcedAuthenticationSupported="true"
                 p:lifetime="${idp.authn.defaultLifetime}" p:inactivityTimeout="${idp.authn.defaultTimeout}">
@@ -61,6 +64,7 @@
         </bean>
 
         <bean c:id="AuthenticationFlow/JAASBasic" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+                p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
                 p:passiveAuthenticationSupported="true"
                 p:forcedAuthenticationSupported="false"
                 p:lifetime="${idp.authn.defaultLifetime}" p:inactivityTimeout="${idp.authn.defaultTimeout}">
@@ -76,4 +80,23 @@
 
     </util:list>
 
+    <!--
+    Defining this allows us to specify symbolic text replacements that shrink the size of results
+    saved to client-side storage such as cookies.
+    -->
+    <bean id="shibboleth.DefaultAuthenticationResultSerializer"
+            class="net.shibboleth.idp.authn.DefaultAuthenticationResultSerializer">
+        <property name="symbolics">
+            <map>
+                <entry key="net.shibboleth.idp.saml.authn.AuthnContextClassRefPrincipal" value="1" />
+                <entry key="net.shibboleth.idp.saml.authn.AuthnContextDeclRefPrincipal" value="2" />
+                <entry key="javax.security.auth.kerberos.KerberosPrincipal" value="3" />
+                
+                <entry key="urn:oasis:names:tc:SAML:2.0:ac:classes:Password" value="10" />
+                <entry key="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" value="11" />
+                <entry key="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol" value="12" />
+            </map>
+        </property>
+    </bean>
+
 </beans>