[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml

[noreply at shibboleth.net]

Author: tzeller
Date: Tue May  3 10:19:06 2016
New Revision: 8222

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8222&view=rev
Log:
IDP-937 - Log rejected attribute consent via new action-state.

Modified:
    trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml?rev=8222&r1=8221&r2=8222&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/intercept/attribute-release-flow.xml	Tue May  3 10:19:06 2016
@@ -119,9 +119,17 @@
             <evaluate expression="SetRPUIInformation.getRPUIContextCreateStrategy().apply(opensamlProfileRequestContext)" result="viewScope.rpUIContext" />
             <evaluate expression="flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null" result="viewScope.custom" />
         </on-render>
+        <transition on="AttributeReleaseRejected" to="WriteAttributeReleaseConsentAuditLog" />
         <transition on="proceed" to="TestForGlobalConsent" />
     </view-state>
 
+
+    <!-- If consent was rejected by user, write to consent audit log and propagate the error event. -->
+
+    <action-state id="WriteAttributeReleaseConsentAuditLog">
+        <evaluate expression="WriteAttributeReleaseConsentAuditLog" />
+        <evaluate expression="'AttributeReleaseRejected'" />
+    </action-state>
 
     <!-- If global consent was given by user, create appropriate storage result and end flow. -->