Access principal name from servlet filter

[Etienne Dysli-Metref]

On 26/08/15 13:26, Etienne Dysli-Metref wrote:
> Ok so I got my action and flow implemented and running with SWF in an
> integration test. :) Here is what I did to make the IdP run it:
> 1. Created the flow definition and beans files at
>    flows/intercept/vho-cookie-{flow,beans}.xml

I'd like to point out for the archives that this is a fatal mistake.
With the way the webflow registry is set up in the IdP the vho-cookie
receive the id "intercept" and overwrites the master intercept flow.
This causes the other intercept flows to not run (i.e. no consent) and
some heavy head->desk banging... bad!

The flow definition should be in its own subdirectory:
flows/intercept/vho-cookie/vho-cookie-flow.xml to receive the correct id
"intercept/vho-cookie".

DEBUG
[org.springframework.webflow.definition.registry.FlowDefinitionRegistryImpl:99]
- Registering flow definition 'file
[/opt/shibboleth-idp/flows/../system/flows/intercept/intercept-flow.xml]' under
id 'intercept'
DEBUG
[org.springframework.webflow.definition.registry.FlowDefinitionRegistryImpl:99]
- Registering flow definition 'file
[/opt/shibboleth-idp/flows/intercept/vho-cookie-flow.xml]' under id
'intercept'

Many thanks to my colleague Daniel for spotting this in the debug log!

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20150828/86243dff/attachment.sig>