[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/views/login.vm

[noreply at shibboleth.net]

Author: scantor
Date: Tue Sep 29 21:29:28 2015
New Revision: 7793

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7793&view=rev
Log:
IDP-821 - Enforce extended flow predicates, and add some comments

Modified:
    trunk/idp-conf/src/main/resources/views/login.vm

Modified: trunk/idp-conf/src/main/resources/views/login.vm
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/views/login.vm?rev=7793&r1=7792&r2=7793&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/views/login.vm	(original)
+++ trunk/idp-conf/src/main/resources/views/login.vm	Tue Sep 29 21:29:28 2015
@@ -11,6 +11,8 @@
 ## authenticationWarningContext - context with login warning state
 ## ldapResponseContext - context with LDAP state (if using native LDAP)
 ## rpUIContext - the context with SP UI information from the metadata
+## extendedAuthenticationFlows - collection of "extended" AuthenticationFlowDescriptor objects
+## passwordPrincipals - contents of the shibboleth.authn.Password.PrincipalOverride bean
 ## encoder - HTMLEncoder class
 ## request - HttpServletRequest
 ## response - HttpServletResponse
@@ -80,7 +82,7 @@
             #end
 
             #foreach ($extFlow in $extendedAuthenticationFlows)
-              #if ($authenticationContext.isAcceptable($extFlow))
+              #if ($authenticationContext.isAcceptable($extFlow) and $extFlow.apply(profileRequestContext))
                 <div class="form-element-wrapper">
                   <button class="form-element form-button" type="submit" name="_eventId_$extFlow.getId()">
                     #springMessageText("idp.login.$extFlow.getId().replace('authn/','')", $extFlow.getId().replace('authn/',''))