IdP v3 intercept flow that restricts /some/ users

[Cantor, Scott]

On 7/15/15, 10:14 AM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>This seems to work.  Could I pull the list of SPs from a properties file?

Not in the XML list syntax, but you can do it with a Spring expression pulled from a property, yes.

Depends how you want the property to look. We have some like that but I didn't want them to be quoted in the property file, so I did some munging to make that work.

The raw syntax in Spring is documented on the Spring page in the wiki:

#{ { 'foo', 'bar' } }

Outer delimter signals a Spring expression, inner braces denote a list, and the strings are quoted.

So a property containing quoted strings delimited by commas can be plugged in via

#{ { %{your.property.name} } }

That can go directly in as the value of the list-valued property you're populating with the <list> now.

If you wanted to get fancier and avoid the quotes in the property file, handle whitespace better, etc., you can embed this bean as the value:

<bean parent="shibboleth.CommaDelimStringArray" c:_0="#{ '%{your.property.name}'.trim() }" />


I'll try and add that to the Spring page if somebody doesn't beat me to it.

-- Scott