From ffb4fc9f4ff9e1779ae4da8017fc686881a3e8ae Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Mon, 18 Feb 2019 08:30:49 +0100
Subject: add 'Austrian eID' demo-mode to simulate attribute behavior from 2020

---
 .../id/auth/builder/AuthenticationDataBuilder.java | 49 ++++++++++++++++++++++
 1 file changed, 49 insertions(+)

(limited to 'id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/builder/AuthenticationDataBuilder.java')

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/builder/AuthenticationDataBuilder.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/builder/AuthenticationDataBuilder.java
index 3e6308bf6..c58f19333 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/builder/AuthenticationDataBuilder.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/builder/AuthenticationDataBuilder.java
@@ -75,6 +75,7 @@ import at.gv.egovernment.moa.id.commons.api.data.IMISMandate;
 import at.gv.egovernment.moa.id.commons.api.data.IVerifiyXMLSignatureResponse;
 import at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException;
 import at.gv.egovernment.moa.id.commons.api.exceptions.MOAIDException;
+import at.gv.egovernment.moa.id.commons.config.MOAIDConfigurationConstants;
 import at.gv.egovernment.moa.id.commons.db.dao.session.OASessionStore;
 import at.gv.egovernment.moa.id.config.auth.OAAuthParameterDecorator;
 import at.gv.egovernment.moa.id.data.AuthenticationRoleFactory;
@@ -212,6 +213,18 @@ public class AuthenticationDataBuilder extends AbstractAuthenticationDataBuilder
 		try {
 			//generate basic authentication data
 			generateBasicAuthData(authData, protocolRequest, session);
+						
+			//set Austrian eID demo-mode flag
+			authData.setIseIDNewDemoMode(Boolean.parseBoolean(
+					oaParam.getConfigurationValue(
+							MOAIDConfigurationConstants.SERVICE_AUTH_AUSTRIAN_EID_DEMO_MODE, 
+							String.valueOf(false))));
+			
+			if (authData.isIseIDNewDemoMode()) {
+				Logger.info("Demo-mode for 'New Austrian eID' is active. Set 'BaseIDTransferRestrication' to true");
+				authData.setBaseIDTransferRestrication(true);
+				
+			}
 			
 			
 			// #### generate MOA-ID specific authentication data ######
@@ -521,6 +534,26 @@ public class AuthenticationDataBuilder extends AbstractAuthenticationDataBuilder
 			//build foreign bPKs
 			generateForeignbPK(authData, oaParam.foreignbPKSectorsRequested()); 
 			
+			
+			if (Boolean.parseBoolean(
+					oaParam.getConfigurationValue(
+							MOAIDConfigurationConstants.SERVICE_AUTH_AUSTRIAN_EID_DEMO_MODE, 
+							String.valueOf(false)))) {
+				Logger.info("Demo-Mode for Austrian eID is active. Post-Processing authData according the new requirements ... ");
+
+				//build additional bPKs
+				Logger.debug("Search for additional bPKs");
+				generateAdditonalbPK(authData, oaParam.additionalbPKSectorsRequested());
+				
+				Logger.debug("Clearing identitylink ... ");
+				authData.setIdentityLink(null);
+				
+				Logger.debug("Clearing authBlock ... ");
+				authData.setAuthBlock(null);
+				
+				Logger.info("Post-Processing for Austrian eID finished");
+			}
+			
 			//####################################################################
 			//copy all generic authentication information, which are not processed before to authData
 			Iterator<String> copyInterator = includedToGenericAuthData.iterator();
@@ -827,4 +860,20 @@ public class AuthenticationDataBuilder extends AbstractAuthenticationDataBuilder
 		
 	}
 	
+	private void generateAdditonalbPK(MOAAuthenticationData authData, List<String> additionalbPKSectorsRequested) throws EAAFBuilderException {
+		if (additionalbPKSectorsRequested != null && !additionalbPKSectorsRequested.isEmpty()) {
+			Logger.debug("Sectors for foreign bPKs are configurated. Starting foreign bPK generation ... ");					
+			for (String sector : additionalbPKSectorsRequested) {
+				Logger.trace("Process sector: " + sector + " ... ");
+				Pair<String, String> bpk = new BPKBuilder().generateAreaSpecificPersonIdentifier(
+						authData.getIdentificationValue(), 
+						authData.getIdentificationType(), 										
+						sector);
+				
+				Logger.trace("Calculate additional bPK for sector: " + bpk.getSecond() + " with value: " + bpk.getFirst() );
+				authData.addAdditionalbPKPair(bpk);
+				
+			}
+		}		
+	}
 }
-- 
cgit v1.2.3