ScopeAttribute.php

Go to the documentation of this file.

<?php

class sspmod_core_Auth_Process_ScopeAttribute extends SimpleSAML_Auth_ProcessingFilter {

        private $scopeAttribute;


        private $sourceAttribute;


        private $targetAttribute;

        private $onlyIfEmpty = false;


        public function __construct($config, $reserved) {
                parent::__construct($config, $reserved);
                assert('is_array($config)');

                $config = SimpleSAML_Configuration::loadFromArray($config, 'ScopeAttribute');

                $this->scopeAttribute = $config->getString('scopeAttribute');
                $this->sourceAttribute = $config->getString('sourceAttribute');
                $this->targetAttribute = $config->getString('targetAttribute');
                $this->onlyIfEmpty = $config->getBoolean('onlyIfEmpty', false);
        }


        public function process(&$request) {
                assert('is_array($request)');
                assert('array_key_exists("Attributes", $request)');

                $attributes =& $request['Attributes'];

                if (!isset($attributes[$this->scopeAttribute])) {
                        return;
                }

                if (!isset($attributes[$this->sourceAttribute])) {
                        return;
                }

                if (!isset($attributes[$this->targetAttribute])) {
                        $attributes[$this->targetAttribute] = array();
                }

                if ($this->onlyIfEmpty and count($attributes[$this->targetAttribute]) > 0) {
                        return;
                }

                foreach ($attributes[$this->scopeAttribute] as $scope) {

                        if (strpos($scope, '@') !== FALSE) {
                                $scope = explode('@', $scope, 2);
                                $scope = $scope[1];
                        }

                        foreach ($attributes[$this->sourceAttribute] as $value) {
                                $value = $value . '@' . $scope;

                                if (in_array($value, $attributes[$this->targetAttribute], TRUE)) {
                                        // Already present
                                        continue;
                                }

                                $attributes[$this->targetAttribute][] = $value;
                        }
                }

        }

}