[java-identity-provider] branch main updated: IDP-1875 - Subject decorator is not run with the MFA flow

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=2714b7af9f4297e4b9dac1ac364fae33072a5e2b

The following commit(s) were added to refs/heads/main by this push:
     new 2714b7af9 IDP-1875 - Subject decorator is not run with the MFA flow
2714b7af9 is described below

commit 2714b7af9f4297e4b9dac1ac364fae33072a5e2b
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Nov 2 13:34:23 2021 -0400

    IDP-1875 - Subject decorator is not run with the MFA flow
    
    https://shibboleth.atlassian.net/browse/IDP-1875
---
 .../idp/authn/impl/FinalizeMultiFactorAuthentication.java          | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/FinalizeMultiFactorAuthentication.java b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/FinalizeMultiFactorAuthentication.java
index bd1d82461..cacc0ee8f 100644
--- a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/FinalizeMultiFactorAuthentication.java
+++ b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/FinalizeMultiFactorAuthentication.java
@@ -18,6 +18,7 @@
 package net.shibboleth.idp.authn.impl;
 
 import java.util.Collection;
+import java.util.function.BiConsumer;
 import java.util.function.Function;
 import java.util.function.Predicate;
 
@@ -198,6 +199,12 @@ public class FinalizeMultiFactorAuthentication extends AbstractAuthenticationAct
         
         authenticationContext.setAuthenticationResult(result);
         
+        final BiConsumer<ProfileRequestContext,Subject> decorator =
+                authenticationContext.getAttemptedFlow().getSubjectDecorator();
+        if (decorator != null) {
+            decorator.accept(profileRequestContext, result.getSubject());
+        }
+        
         // Override cacheability if a predicate is installed.
         if (authenticationContext.isResultCacheable() && resultCachingPredicate != null) {
             authenticationContext.setResultCacheable(resultCachingPredicate.test(profileRequestContext));

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.