AttributePredicate Syntax

[Tom Zeller]

> On Feb 9, 2016, at 3:06 PM, Walter Forbes Hoehn (wassa) <wassa at memphis.edu> wrote:
> 
> Can anyone provide a pointer for how to access attributes returned during AuthN (idp.authn.LDAP.returnAttributes) subsequently within the AuthN flow? I want to use them within an AttributePredicate, which I think means that I should provide a custom AttributeContextLookupStrategy, but I can’t seem to find any examples of overriding that properly.

For example :

net.shibboleth.idp.authn.impl;

public class AttributeSourcedSubjectCanonicalization extends AbstractSubjectCanonicalizationAction {
    
    /** Lookup strategy for {@link AttributeContext} to read from. */
    @Nonnull private Function<ProfileRequestContext,AttributeContext> attributeContextLookupStrategy;

    /** Constructor. */
    public AttributeSourcedSubjectCanonicalization() {

        attributeContextLookupStrategy = Functions.compose(new ChildContextLookup<>(AttributeContext.class),
                new ChildContextLookup<ProfileRequestContext,SubjectCanonicalizationContext>(
                        SubjectCanonicalizationContext.class));
    }

But that’s getting the AttributeContext from the SubjectCanonicalizationContext, which may/may not be proper for your case.