Package net.shibboleth.idp.authn.impl
Class InitializeRequestedPrincipalContext
java.lang.Object
net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
org.opensaml.profile.action.AbstractProfileAction
org.opensaml.profile.action.AbstractConditionalProfileAction
net.shibboleth.idp.profile.AbstractProfileAction
net.shibboleth.idp.authn.AbstractAuthenticationAction
net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext
- All Implemented Interfaces:
Component
,DestructableComponent
,InitializableComponent
,ProfileAction
,Aware
,MessageSource
,MessageSourceAware
,Action
An action that creates an
RequestedPrincipalContext
and attaches it to the current
AuthenticationContext
, if the profile request context contains a RelyingPartyContext
with an AuthenticationProfileConfiguration
containing one or more default authentication
methods.
If such a context already exists, it is left in place unless setReplaceExistingContext(boolean)
is set.
- Event:
EventIds.PROCEED_EVENT_ID
,IdPEventIds.INVALID_RELYING_PARTY_CTX
,IdPEventIds.INVALID_PROFILE_CONFIG
- Postcondition:
- See above.
-
Field Summary
FieldsModifier and TypeFieldDescriptionProfile configuration source for requested principals.private final org.slf4j.Logger
Class logger.Strategy used to locate theRelyingPartyContext
associated with a givenProfileRequestContext
.private boolean
Whether to replace an existing subcontext, if any. -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected void
doExecute
(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Performs this authentication action.protected boolean
doPreExecute
(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Performs this authentication action's pre-execute step.void
Set the strategy used to locate theRelyingPartyContext
associated with a givenProfileRequestContext
.void
setReplaceExistingContext
(boolean flag) Whether any existingRequestedPrincipalContext
should be replaced, defaults to "false".Methods inherited from class net.shibboleth.idp.authn.AbstractAuthenticationAction
doExecute, doPreExecute, setAuthenticationContextLookupStrategy
Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction
doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy
Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction
getActivationCondition, setActivationCondition
Methods inherited from class org.opensaml.profile.action.AbstractProfileAction
doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse
Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent
initialize, isInitialized
-
Field Details
-
log
@Nonnull private final org.slf4j.Logger logClass logger. -
replaceExistingContext
private boolean replaceExistingContextWhether to replace an existing subcontext, if any. -
relyingPartyContextLookupStrategy
@Nonnull private Function<ProfileRequestContext,RelyingPartyContext> relyingPartyContextLookupStrategyStrategy used to locate theRelyingPartyContext
associated with a givenProfileRequestContext
. -
authenticationProfileConfig
Profile configuration source for requested principals.
-
-
Constructor Details
-
InitializeRequestedPrincipalContext
public InitializeRequestedPrincipalContext()Constructor.
-
-
Method Details
-
setReplaceExistingContext
public void setReplaceExistingContext(boolean flag) Whether any existingRequestedPrincipalContext
should be replaced, defaults to "false".Normally an existing context would indicate requirements that shouldn't be circumvented to comply with expected profile behavior.
- Parameters:
flag
- flag to set
-
setRelyingPartyContextLookupStrategy
public void setRelyingPartyContextLookupStrategy(@Nonnull Function<ProfileRequestContext, RelyingPartyContext> strategy) Set the strategy used to locate theRelyingPartyContext
associated with a givenProfileRequestContext
.- Parameters:
strategy
- strategy used to locate theRelyingPartyContext
associated with a givenProfileRequestContext
-
doPreExecute
protected boolean doPreExecute(@Nonnull ProfileRequestContext profileRequestContext, @Nonnull AuthenticationContext authenticationContext) Performs this authentication action's pre-execute step. Default implementation just returns true.- Overrides:
doPreExecute
in classAbstractAuthenticationAction
- Parameters:
profileRequestContext
- the current IdP profile request contextauthenticationContext
- the current authentication context- Returns:
- true iff execution should continue
-
doExecute
protected void doExecute(@Nonnull ProfileRequestContext profileRequestContext, @Nonnull AuthenticationContext authenticationContext) Performs this authentication action. Default implementation throws an exception.- Overrides:
doExecute
in classAbstractAuthenticationAction
- Parameters:
profileRequestContext
- the current IdP profile request contextauthenticationContext
- the current authentication context
-