OpenConext / OpenConext-engineblock-metadata

51%

master: 52%

LAST BUILD ON BRANCH feature/attribute-aggregation

branch: feature/attribute-aggregation

CHANGE BRANCH

x

Reset

• feature/attribute-aggregation
• 1.4.5
• 2.0
• 2.0.1
• 2.1.0
• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.3.0
• 2.4.0
• 2.4.1
• 2.4.2
• 2.5.0
• 3.0.0
• 3.0.1
• 3.1.0
• 3.1.1
• 3.1.2
• engineblock5-compat
• eol
• feature/cached-repository-wayf-issue
• feature/caching-metadata-repository
• feature/change-behaviour-trusted-proxies
• feature/configurable-signature-method
• feature/doctrine-push-deletes
• feature/remove-implicit-vo-id
• feature/retrieve-attribute-source
• feature/security-checker
• feature/support-contact-telephone-number
• feature/support-push-pull-combination
• feature/unconnected-idps-in-wayf
• feature/upgrade-saml2-library
• master
• pr/7
• release/3.x

Build # 78

Build Type

push

travis-ci

Committed by jorissteyn

Commit Message

Support optional 'source' in ARP rules

Data in ARP is structured in an associative array:

    attribute name => [ list of value rules ]

We now support storing an optional source for each attribute:

    attribute name => [
        [
            value => '...'
            source => '...'
        ]
    ]

Sources have no effect on the enforcement of the policy. For example,
consider the following hypothetical situation:

  - when an ARP specifies the attribute 'eduPersonOrcid' should be
    included from 'source1'

  - but the aggregator returns no eduPersonOrcid attribute, while the
    IdP does return the attribute

In those cases then the attribute will be included in the SAML response
because the source is not considered when matching attributes.

Run Details

894 of 1762 relevant lines covered (50.74%)

2.7 hits per line