Custom metadata provider

Jim Fox fox at washington.edu
Wed Dec 9 12:20:12 EST 2015


Another way to go about this is to have an external process that 
periodically reads the databse and builds a local metadata file, which 
Shib can then process normally.  Saves a lot of trouble.

Jim


On Wed, 9 Dec 2015, Rod Widdowson wrote:

> Date: Wed, 9 Dec 2015 08:49:10
> From: Rod Widdowson <rdw at steadingsoftware.com>
> To: 'Shib Dev' <dev at shibboleth.net>
> Reply-To: Shib Dev <dev at shibboleth.net>
> Subject: RE: Custom metadata provider
> 
>>   Please advise on the pieces to be implemented for a (custom) Database
> metadata provider that fetches metadata from the DB. 
>
> There's a lot of work involved.  Most of the code which might help you
> "impl" which means it will change without warning.
>
> Basically you will need to build something that implements
> org.opensaml.saml.metadata.resolver.RefreshableMetadataResolver.
>
> I'd start by looking at
> org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver (but
> remember that many of the objects it inherits from are in the impl tree)
>
> Then for configuration it up you will want to extend
> net.shibboleth.idp.profile.spring.relyingparty.metadata.AbstractMetadataProv
> iderParser in the "usual way for Spring".
>
> Alternatively you could do this in native spring by summoning up your bean
> and putting it in to a
> net.shibboleth.idp.saml.metadata.RelyingPartyMetadataProvider.  Then put
> that SpringFile which defines the those beans into the lisyt beal called
> "shibboleth.MetadataResolverResources".
>
> That’s a lot of work.
>
> Were it feasibly, a much better solution would be to build something which
> implements org.springframework.core.io.Resource and/or
> net.shibboleth.utilities.java.support.resource.Resource and plug that into a
> org.opensaml.saml.metadata.resolver.impl.ResourceBackedMetadataResolver
>
> However that is also in impl and you would not be safe to use it, further
> you'd still have all the issues around parsing.
>
> So....  I'd listen to a RFE which asked that the
> "ResourceBackedMetadataProvider" be extended to have a "beanRef" which would
> be a bean which implemented Resource.
>
> Rod
>
> -- 
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>


More information about the dev mailing list