Package net.shibboleth.oidc.profile.config.navigate

Class ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction

java.lang.Object

net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction

All Implemented Interfaces:

Function<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>

public class ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
extends Object
implements Function<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>

Implements a set of default logic for determining the custom principals to derive the OIDC ACRs from.

This operates for the SAML to OIDC proxy use case. The values returned are empty unless the parent context itself contains a child context carrying particular values. The values are either 'passed through' or mapped by the given principal mappings. All input values are either SAML ACRs or AMRs, and all output values are OIDC ACRs.

Field Summary

Fields

Modifier and Type	Field	Description
private Map<Principal,Collection<Principal>>	principalMappings	Mappings to transform proxied Principals.

Constructor Summary

Constructors

Constructor	Description
ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction()	Constructor.

Method Summary

Modifier and Type	Method	Description
Collection<AuthenticationContextClassReferencePrincipal>	apply(ProfileRequestContext input)
void	setMappings(Map<Principal,Collection<Principal>> mappings)	Sets the mappings from input/proxied Principals to zero or more equivalent values to use.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

principalMappings

@Nonnull
@NonnullElements
private Map<Principal,Collection<Principal>> principalMappings

Mappings to transform proxied Principals.

Constructor Details

ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction

public ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction()

Constructor.

Method Details

setMappings

public void setMappings(@Nullable @NonnullElements
 Map<Principal,Collection<Principal>> mappings)

Sets the mappings from input/proxied Principals to zero or more equivalent values to use.

Any values not mapped will be assumed to be passed through.

Parameters:

mappings - Principal mappings

apply

public Collection<AuthenticationContextClassReferencePrincipal> apply(ProfileRequestContext input)

Specified by:

apply in interface Function<ProfileRequestContext,Collection<AuthenticationContextClassReferencePrincipal>>