IdPv3 - regex activation condition

Cantor, Scott cantor.2 at osu.edu
Fri Jun 26 09:56:10 EDT 2015


> This naive attempt doesn't work:
> 
>    <bean id="shibboleth.noConsentRelyingPartyPredicate"
> parent="shibboleth.Conditions.RelyingPartyId">
>         <constructor-arg>
>             <util:list>
>                 <regex>^http(s)?://.*\.example?\.org/.*</regex>

You can't make up elements in Spring like that, the syntax is wiring Java classes directly, so all you can supply is what the Java class allows. You can find the class in system/conf/utilities.xml

> where can I find a reference for the shibboleth.Conditions.* beans?

I only documented things that I explicitly used in files in the sections where I used them. I don't want to duplicate everything by creating a master reference right now, but eventually I'll do a page on conditions. That's a long way off.

The bean you're inheriting from is the net.shibboleth.idp.profile.logic.RelyingPartyIdPredicate class, which if you look at the javadoc has a c'tor variant that takes a Predicate<String>. We don't have anything that implements that based on a regex, you would have to provide that code and plug that in to the constructor. The "hard" part of actually linking that back to the thing you're evaluating (the relying party name) is done for you.

-- Scott



More information about the users mailing list