package at.asitplus.eidas.specific.modules.auth.eidas.v2.handler; import java.util.Arrays; import java.util.HashMap; import java.util.Map; import org.apache.commons.lang3.StringUtils; import org.springframework.beans.factory.annotation.Autowired; import at.gv.egiz.eaaf.core.api.idp.IConfiguration; import at.gv.egiz.eaaf.core.api.idp.ISpConfiguration; import eu.eidas.auth.commons.light.impl.LightRequest.Builder; import lombok.Getter; import lombok.Setter; import lombok.extern.slf4j.Slf4j; /** * Ulraine specific eIDAS AuthnRequest generation. * * @author tlenz * */ @Slf4j public class UaEidProcessor extends AbstractEidProcessor { private static final String CONFIG_PROP_UA_SPECIFIC_LOA = "auth.eIDAS.node_v2.loa.ua.requested"; private static final String canHandleCC = "UA"; @Autowired IConfiguration config; @Getter @Setter private int priority = 1; @Override public String getName() { return "UA-PostProcessor"; } @Override public boolean canHandle(String countryCode) { return countryCode != null && countryCode.equalsIgnoreCase(canHandleCC); } @Override protected Map getCountrySpecificRequestedAttributes() { return new HashMap<>(); } protected void buildLevelOfAssurance(ISpConfiguration spConfig, Builder authnRequestBuilder) { // allow override of LoA, because UA maybe only support not-notified LoA levels String uaSpecificLoA = config.getBasicConfiguration(CONFIG_PROP_UA_SPECIFIC_LOA); if (StringUtils.isNotEmpty(uaSpecificLoA)) { authnRequestBuilder.levelsOfAssuranceValues(Arrays.asList(uaSpecificLoA)); log.info("Set UA specific LoA level to: {}", uaSpecificLoA); } else { super.buildLevelOfAssurance(spConfig, authnRequestBuilder); } } }