[java-opensaml] branch master updated: IDP-1229 - Add Scoping/RequesterID chains into various IdP features

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=a5d3b55ea3672bd407181d3f91e9e55895133e14

The following commit(s) were added to refs/heads/master by this push:
       new  a5d3b55   IDP-1229 -  Add Scoping/RequesterID chains into various IdP features
a5d3b55 is described below

commit a5d3b55ea3672bd407181d3f91e9e55895133e14
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Oct 26 11:39:33 2017 -0400

    IDP-1229 -  Add Scoping/RequesterID chains into various IdP features
    
    https://issues.shibboleth.net/jira/browse/IDP-1229
    
    Predicate to test for proxied requesters.
---
 .../messaging/logic/ProxiedRequesterPredicate.java | 70 ++++++++++++++++++++++
 1 file changed, 70 insertions(+)

diff --git a/opensaml-saml-api/src/main/java/org/opensaml/saml/common/messaging/logic/ProxiedRequesterPredicate.java b/opensaml-saml-api/src/main/java/org/opensaml/saml/common/messaging/logic/ProxiedRequesterPredicate.java
new file mode 100644
index 0000000..9c79638
--- /dev/null
+++ b/opensaml-saml-api/src/main/java/org/opensaml/saml/common/messaging/logic/ProxiedRequesterPredicate.java
@@ -0,0 +1,70 @@
+/*
+ * Licensed to the University Corporation for Advanced Internet Development,
+ * Inc. (UCAID) under one or more contributor license agreements.  See the
+ * NOTICE file distributed with this work for additional information regarding
+ * copyright ownership. The UCAID licenses this file to You under the Apache
+ * License, Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License.  You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.opensaml.saml.common.messaging.logic;
+
+import java.util.Collection;
+import java.util.Collections;
+import java.util.HashSet;
+import java.util.Set;
+
+import javax.annotation.Nonnull;
+import javax.annotation.Nullable;
+
+import org.opensaml.messaging.context.MessageContext;
+import org.opensaml.profile.context.ProxiedRequesterContext;
+
+import com.google.common.base.Predicate;
+
+import net.shibboleth.utilities.java.support.annotation.constraint.NonnullElements;
+import net.shibboleth.utilities.java.support.logic.Constraint;
+import net.shibboleth.utilities.java.support.primitive.StringSupport;
+
+/**
+ * Predicate that determines whether one of a set of candidates is contained in a
+ * a {@link ProxiedRequesterContext} subcontext.
+ * 
+ * @since 3.4.0
+ */
+public class ProxiedRequesterPredicate implements Predicate<MessageContext<?>> {
+
+    /** Set of entityIDs to check for. */
+    @Nonnull @NonnullElements private final Set<String> entityIds;
+
+    /**
+     * Constructor.
+     * 
+     * @param ids the entityIDs to check for
+     */
+    public ProxiedRequesterPredicate(@Nonnull @NonnullElements final Collection<String> ids) {
+        Constraint.isNotNull(ids, "EntityID collection cannot be null");
+        
+        entityIds = new HashSet<>(StringSupport.normalizeStringCollection(ids));
+    }
+    
+    /** {@inheritDoc} */
+    @Nullable public boolean apply(@Nullable final MessageContext<?> input) {
+        
+        final ProxiedRequesterContext ctx = input != null ? input.getSubcontext(ProxiedRequesterContext.class) : null;
+        if (ctx != null) {
+            return !Collections.disjoint(entityIds, ctx.getRequesters());
+        } else {
+            return false;
+        }
+    }
+
+}
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.