ScopeAttribute.php

Go to the documentation of this file.

<?php
 
class sspmod_core_Auth_Process_ScopeAttribute extends SimpleSAML_Auth_ProcessingFilter
{
        private $scopeAttribute;
 
 
        private $sourceAttribute;
 
 
        private $targetAttribute;
 
        private $onlyIfEmpty = false;
 
 
        public function __construct($config, $reserved)
    {
                parent::__construct($config, $reserved);
                assert(is_array($config));
 
                $config = SimpleSAML_Configuration::loadFromArray($config, 'ScopeAttribute');
 
                $this->scopeAttribute = $config->getString('scopeAttribute');
                $this->sourceAttribute = $config->getString('sourceAttribute');
                $this->targetAttribute = $config->getString('targetAttribute');
                $this->onlyIfEmpty = $config->getBoolean('onlyIfEmpty', false);
        }
 
 
        public function process(&$request)
    {
                assert(is_array($request));
                assert(array_key_exists('Attributes', $request));
 
                $attributes =& $request['Attributes'];
 
                if (!isset($attributes[$this->scopeAttribute])) {
                        return;
                }
 
                if (!isset($attributes[$this->sourceAttribute])) {
                        return;
                }
 
                if (!isset($attributes[$this->targetAttribute])) {
                        $attributes[$this->targetAttribute] = array();
                }
 
                if ($this->onlyIfEmpty && count($attributes[$this->targetAttribute]) > 0) {
                        return;
                }
 
                foreach ($attributes[$this->scopeAttribute] as $scope) {
                        if (strpos($scope, '@') !== false) {
                                $scope = explode('@', $scope, 2);
                                $scope = $scope[1];
                        }
 
                        foreach ($attributes[$this->sourceAttribute] as $value) {
                                $value = $value . '@' . $scope;
 
                                if (in_array($value, $attributes[$this->targetAttribute], true)) {
                                        // Already present
                                        continue;
                                }
 
                                $attributes[$this->targetAttribute][] = $value;
                        }
                }
        }
}