[java-identity-provider COMMIT] in /trunk: idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult....

[noreply at shibboleth.net]

Author: scantor
Date: Mon Oct 10 16:17:26 2016
New Revision: 8484

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8484&view=rev
Log:
IDP-1061 - Supported way to detect (and audit) SSO vs. fresh authentication

https://issues.shibboleth.net/jira/browse/IDP-1061

ExternalAuthentication interface extended to support signaling this
SSO audit field added

Added:
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/navigate/PreviousResultLookupFunction.java   (with props)
Modified:
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult.java
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthnAuditFields.java
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/ExternalAuthentication.java
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/ExternalAuthenticationContext.java
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ExternalAuthenticationImpl.java
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateExternalAuthentication.java
    trunk/idp-authn-impl/src/test/java/net/shibboleth/idp/authn/impl/ValidateExternalAuthenticationTest.java
    trunk/idp-conf/src/main/resources/system/conf/audit-system.xml

Modified: trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult.java?rev=8484&r1=8483&r2=8484&view=diff
==============================================================================
--- trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult.java	(original)
+++ trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthenticationResult.java	Mon Oct 10 16:17:26 2016
@@ -175,7 +175,7 @@
     }
     
     /**
-     * Get whether this result was loaded from a session as the product of a previous request.
+     * Set whether this result was loaded from a session as the product of a previous request.
      * 
      * @param flag flag to set
      * 

Modified: trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthnAuditFields.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthnAuditFields.java?rev=8484&r1=8483&r2=8484&view=diff
==============================================================================
--- trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthnAuditFields.java	(original)
+++ trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/AuthnAuditFields.java	Mon Oct 10 16:17:26 2016
@@ -28,6 +28,9 @@
 
     /** Authentication flow ID field. */
     @Nonnull @NotEmpty public static final String AUTHN_FLOW_ID = "AF";
+
+    /** SSO indicator signaling authentication was not "freshly" performed. */
+    @Nonnull @NotEmpty public static final String SSO = "SSO";
     
     /** Constructor. */
     private AuthnAuditFields() {

Modified: trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/ExternalAuthentication.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/ExternalAuthentication.java?rev=8484&r1=8483&r2=8484&view=diff
==============================================================================
--- trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/ExternalAuthentication.java	(original)
+++ trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/ExternalAuthentication.java	Mon Oct 10 16:17:26 2016
@@ -64,6 +64,14 @@
      */
     @Nonnull @NotEmpty public static final String REVOKECONSENT_KEY = "revokeConsent";
 
+    /**
+     * Request attribute to which a signal to set
+     * {@link net.shibboleth.idp.authn.AuthenticationResult#setPreviousResult(boolean)} may be bound.
+     * 
+     * @since 3.3.0
+     */
+    @Nonnull @NotEmpty public static final String PREVIOUSRESULT_KEY = "previousResult";
+    
     /** Request attribute that indicates whether the authentication request requires forced authentication. */
     @Nonnull @NotEmpty public static final String FORCE_AUTHN_PARAM = "forceAuthn";
 

Modified: trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/ExternalAuthenticationContext.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/ExternalAuthenticationContext.java?rev=8484&r1=8483&r2=8484&view=diff
==============================================================================
--- trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/ExternalAuthenticationContext.java	(original)
+++ trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/ExternalAuthenticationContext.java	Mon Oct 10 16:17:26 2016
@@ -58,6 +58,9 @@
     /** Flag preventing caching of result for SSO. */
     private boolean doNotCache;
     
+    /** Flag indicating this "new" result is really "old". */
+    private boolean previousResult;
+    
     /**

[... 202 lines stripped ...]