[java-identity-provider] branch master updated: IDP-1229 - Add Scoping/RequesterID chains into various IdP features

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=5b3fb9827bdd82956f6e2a087310baf85688ab73

The following commit(s) were added to refs/heads/master by this push:
       new  5b3fb98   IDP-1229 -  Add Scoping/RequesterID chains into various IdP features
5b3fb98 is described below

commit 5b3fb9827bdd82956f6e2a087310baf85688ab73
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Oct 25 20:32:08 2017 -0400

    IDP-1229 -  Add Scoping/RequesterID chains into various IdP features
    
    https://issues.shibboleth.net/jira/browse/IDP-1229
    
    Wire in message handler to extract proxied requesters.
---
 .../main/resources/system/flows/saml/saml2/sso-abstract-beans.xml | 8 ++++++++
 .../main/resources/system/flows/saml/saml2/sso-abstract-flow.xml  | 1 +
 2 files changed, 9 insertions(+)

diff --git a/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml b/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml
index c4f10af..bc06edd 100644
--- a/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml
@@ -53,6 +53,14 @@
     <bean id="ProcessRequestedAuthnContext"
         class="net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext" scope="prototype"
         p:ignoredContexts-ref="#{getObject('shibboleth.IgnoredContexts') != null ? 'shibboleth.IgnoredContexts' : 'shibboleth.DefaultIgnoredContexts'}" />
+
+    <bean id="ExtractProxiedRequesters"
+            class="net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor" scope="prototype"
+            c:executionDirection="INBOUND">
+        <constructor-arg name="messageHandler">
+            <bean class="org.opensaml.saml.saml2.binding.impl.ExtractProxiedRequestersHandler" scope="prototype" />
+        </constructor-arg>
+    </bean>
         
     <bean id="ResolveAttributesPredicate"
         class="net.shibboleth.idp.saml.profile.config.logic.ResolveAttributesProfileConfigPredicate" />
diff --git a/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml b/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml
index 0e1d3a9..de52618 100644
--- a/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml
+++ b/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml
@@ -15,6 +15,7 @@
     <action-state id="DoProfileWork">
         <evaluate expression="VerifyChannelBindings" />
         <evaluate expression="PopulateECPContext" />
+        <evaluate expression="ExtractProxiedRequesters" />
         <evaluate expression="'proceed'" />
         
         <transition on="proceed" to="PopulateClientStorageLoadContext" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.