C14N selections
Cantor, Scott
cantor.2 at osu.edu
Sat Jan 25 19:22:14 EST 2014
On 1/25/14, 12:46 PM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>Am I correct in assuming that the idea is that things like SP based
>selection will go into the Activation Condition, but format mismatch
>should
>be handled by the @event {@link AuthnEventIds#RESELECT_FLOW}
It's pretty arbitrary, but it probably has to do with reuse. The Predicate
is generically over the ProfileRequestContext, so the idea was to have
predicates we can reuse.
I didn't really do that with the Simple example, but I probably should
have. Instead of using a predicate that's solely about the action, I could
do it in doPreExecute and return Reselect.
>Both could be done in either place and obviously testing up front can be
>cheaper, but in some way it seems that the C14 Stage understands the
>NameID
>and should do that selection, but needs know nothing about SPs and so it
>can
>be left for something else
An SP test (the PrincipalConnector feature) is definitely supposed to be
in the Predicate (I built that one already).
I think by the same logic above, checking for the NameIDPrincipal type and
the Format, etc. probably should just be in doPreExecute.
-- Scott
More information about the dev
mailing list