ScopeAttribute.php

Go to the documentation of this file.

<?php

class sspmod_core_Auth_Process_ScopeAttribute extends SimpleSAML_Auth_ProcessingFilter
{
        private $scopeAttribute;


        private $sourceAttribute;


        private $targetAttribute;

        private $onlyIfEmpty = false;


        public function __construct($config, $reserved)
    {
                parent::__construct($config, $reserved);
                assert(is_array($config));

                $config = SimpleSAML_Configuration::loadFromArray($config, 'ScopeAttribute');

                $this->scopeAttribute = $config->getString('scopeAttribute');
                $this->sourceAttribute = $config->getString('sourceAttribute');
                $this->targetAttribute = $config->getString('targetAttribute');
                $this->onlyIfEmpty = $config->getBoolean('onlyIfEmpty', false);
        }


        public function process(&$request)
    {
                assert(is_array($request));
                assert(array_key_exists('Attributes', $request));

                $attributes =& $request['Attributes'];

                if (!isset($attributes[$this->scopeAttribute])) {
                        return;
                }

                if (!isset($attributes[$this->sourceAttribute])) {
                        return;
                }

                if (!isset($attributes[$this->targetAttribute])) {
                        $attributes[$this->targetAttribute] = array();
                }

                if ($this->onlyIfEmpty && count($attributes[$this->targetAttribute]) > 0) {
                        return;
                }

                foreach ($attributes[$this->scopeAttribute] as $scope) {
                        if (strpos($scope, '@') !== false) {
                                $scope = explode('@', $scope, 2);
                                $scope = $scope[1];
                        }

                        foreach ($attributes[$this->sourceAttribute] as $value) {
                                $value = $value . '@' . $scope;

                                if (in_array($value, $attributes[$this->targetAttribute], true)) {
                                        // Already present
                                        continue;
                                }

                                $attributes[$this->targetAttribute][] = $value;
                        }
                }
        }
}