Package net.shibboleth.idp.plugin.oidc.op.profile.logic

Class AttributeResolutionSubjectLookupFunction

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

All Implemented Interfaces:

Function<ProfileRequestContext,String>, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent, ContextDataLookupFunction<ProfileRequestContext,String>

public class AttributeResolutionSubjectLookupFunction
extends AbstractIdentifiableInitializableComponent
implements ContextDataLookupFunction<ProfileRequestContext,String>

A function that returns subject identifier from filtered claims. Encoded value of the first attribute that would be encoded as claim sub is returned. TODO: This needs revisiting, it's not really a great way to configure this. Specifying the attribute(s) to pull from would be the expected solution here. It may be warranted to just repurpose the IdP's NameID generation layer since that's nominally type-invariant anyway, it can handle both SAML 1 and SAML 2 objects now.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,AttributeContext>	attributeContextLookupStrategy	Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.
private org.slf4j.Logger	log	Class logger.
private static final String	SUB_CLAIM_NAME	Name of the sub claim.
private ReloadableService<AttributeTranscoderRegistry>	transcoderRegistry	Transcoder registry service object.

Constructor Summary

Constructors

Constructor	Description
AttributeResolutionSubjectLookupFunction()	Constructor.

Method Summary

Modifier and Type	Method	Description
String	apply(ProfileRequestContext input)
protected void	doInitialize()
void	setAttributeContextLookupStrategy(Function<ProfileRequestContext,AttributeContext> strategy)	Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.
void	setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry> registry)	Sets the registry of transcoding rules to apply to encode attributes.

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

SUB_CLAIM_NAME

@Nonnull
@NotEmpty
private static final String SUB_CLAIM_NAME

Name of the sub claim.

See Also:

• Constant Field Values

log

@Nonnull
private org.slf4j.Logger log

Class logger.

attributeContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,AttributeContext> attributeContextLookupStrategy

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

transcoderRegistry

@NonnullAfterInit
private ReloadableService<AttributeTranscoderRegistry> transcoderRegistry

Transcoder registry service object.

Constructor Details

AttributeResolutionSubjectLookupFunction

AttributeResolutionSubjectLookupFunction()

Constructor.

Method Details

setTranscoderRegistry

public void setTranscoderRegistry(@Nonnull
 ReloadableService<AttributeTranscoderRegistry> registry)

Sets the registry of transcoding rules to apply to encode attributes.

Parameters:

registry - registry service interface

setAttributeContextLookupStrategy

public void setAttributeContextLookupStrategy(@Nonnull
 Function<ProfileRequestContext,AttributeContext> strategy)

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

Parameters:

strategy - strategy used to locate the AttributeContext associated with a given ProfileRequestContext

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

apply

@Nullable
public String apply(@Nullable
 ProfileRequestContext input)

Specified by:

apply in interface Function<ProfileRequestContext,String>