ScopeFromAttribute.php

Go to the documentation of this file.

<?php

class sspmod_core_Auth_Process_ScopeFromAttribute extends SimpleSAML_Auth_ProcessingFilter {
        private $sourceAttribute;
        private $targetAttribute;

        public function __construct($config, $reserved) {
                parent::__construct($config, $reserved);
                assert(is_array($config));

                $config = SimpleSAML_Configuration::loadFromArray($config, 'ScopeFromAttribute');
                $this->targetAttribute = $config->getString('targetAttribute');
                $this->sourceAttribute = $config->getString('sourceAttribute');
        } // end constructor


        public function process(&$request) {
                assert(is_array($request));
                assert(array_key_exists('Attributes', $request));

                $attributes =& $request['Attributes'];

                if (!isset($attributes[$this->sourceAttribute])) {
                        return;
                }

                // will not overwrite existing attribute
                if (isset($attributes[$this->targetAttribute])) {
                        return;
                }

                $sourceAttrVal = $attributes[$this->sourceAttribute][0];

                /* the last position of an @ is usually the beginning of the scope
                 * string */
                $scopeIndex = strrpos($sourceAttrVal, '@');

                if ($scopeIndex !== FALSE) {
                        $attributes[$this->targetAttribute] = array();
                        $scope = substr($sourceAttrVal, $scopeIndex+1);
                        $attributes[$this->targetAttribute][] = $scope;
                        SimpleSAML\Logger::debug('ScopeFromAttribute: Inserted new attribute ' .
                                                 $this->targetAttribute . ', with scope ' .
                                                 $scope);
                } else {
                        SimpleSAML\Logger::warning('ScopeFromAttribute: The configured source attribute ' .
                                                   $this->sourceAttribute .
                                                   ' does not have a scope. Did not add attribute ' .
                                                   $this->targetAttribute . '.');
                }
        } /* end process */
}