From ba6ba0af88d8c9472a63356ddf3d19f84847c2d7 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <thomas.lenz@egiz.gv.at>
Date: Wed, 28 Jul 2021 11:33:11 +0200
Subject: add new authentication module for EHVD communication

---
 .../ehvd/attributes/PvpRoleAttributeBuilder.java   | 58 ++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java

(limited to 'id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java')

diff --git a/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java b/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java
new file mode 100644
index 000000000..0f1c96aa8
--- /dev/null
+++ b/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java
@@ -0,0 +1,58 @@
+package at.gv.egovernment.moa.id.auth.modules.ehvd.attributes;
+
+import java.util.stream.Collectors;
+
+import at.gv.egiz.eaaf.core.api.idp.IAttributeGenerator;
+import at.gv.egiz.eaaf.core.api.idp.IAuthData;
+import at.gv.egiz.eaaf.core.api.idp.IPVPAttributeBuilder;
+import at.gv.egiz.eaaf.core.api.idp.ISPConfiguration;
+import at.gv.egiz.eaaf.core.exceptions.AttributeBuilderException;
+import at.gv.egiz.eaaf.core.impl.idp.builder.attributes.PVPMETADATA;
+import at.gv.egovernment.moa.id.data.IMOAAuthData;
+import at.gv.egovernment.moa.logging.Logger;
+
+@PVPMETADATA
+public class PvpRoleAttributeBuilder implements IPVPAttributeBuilder {
+
+  private static final String ROLE_NAME_DELIMITER = ";";
+  
+  @Override
+  public <ATT> ATT build(ISPConfiguration oaParam, IAuthData authData,
+      IAttributeGenerator<ATT> g) throws AttributeBuilderException {
+    if (authData instanceof IMOAAuthData) {
+      IMOAAuthData moaAuthData = (IMOAAuthData)authData;
+      if (moaAuthData.getAuthenticationRoles() != null 
+          && !moaAuthData.getAuthenticationRoles().isEmpty()) {
+        return g.buildStringAttribute(ROLES_FRIENDLY_NAME, ROLES_NAME,
+            moaAuthData.getAuthenticationRoles().stream()
+                .map(el -> el.getRawRoleString())
+                .collect(Collectors.joining(ROLE_NAME_DELIMITER)));
+        
+        
+      } else {
+        Logger.trace("No PVP roles available. Skipping attribute: " + ROLES_FRIENDLY_NAME);
+        
+      }
+            
+    } else {
+      Logger.info("Attribute: " + ROLES_FRIENDLY_NAME + " is only available in MOA-ID context");
+      
+    }
+       
+    return null;
+    
+  }
+
+  @Override
+  public <ATT> ATT buildEmpty(IAttributeGenerator<ATT> g) {
+    return g.buildEmptyAttribute(ROLES_FRIENDLY_NAME, ROLES_NAME);
+    
+  }
+
+  @Override
+  public String getName() {
+    return ROLES_NAME;
+    
+  }
+  
+}
-- 
cgit v1.2.3


From 031d236181704248475554ebf7ae373096637a4f Mon Sep 17 00:00:00 2001
From: Thomas Lenz <thomas.lenz@egiz.gv.at>
Date: Wed, 8 Sep 2021 13:45:25 +0200
Subject: update EHVD Role filtering and mapping

---
 .../ehvd/attributes/PvpRoleAttributeBuilder.java   | 25 +++++++++++-----------
 1 file changed, 12 insertions(+), 13 deletions(-)

(limited to 'id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java')

diff --git a/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java b/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java
index 0f1c96aa8..a79aa86dd 100644
--- a/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java
+++ b/id/server/modules/moa-id-module-ehvd_integration/src/main/java/at/gv/egovernment/moa/id/auth/modules/ehvd/attributes/PvpRoleAttributeBuilder.java
@@ -15,44 +15,43 @@ import at.gv.egovernment.moa.logging.Logger;
 public class PvpRoleAttributeBuilder implements IPVPAttributeBuilder {
 
   private static final String ROLE_NAME_DELIMITER = ";";
-  
+
   @Override
   public <ATT> ATT build(ISPConfiguration oaParam, IAuthData authData,
       IAttributeGenerator<ATT> g) throws AttributeBuilderException {
     if (authData instanceof IMOAAuthData) {
-      IMOAAuthData moaAuthData = (IMOAAuthData)authData;
-      if (moaAuthData.getAuthenticationRoles() != null 
+      final IMOAAuthData moaAuthData = (IMOAAuthData) authData;
+      if (moaAuthData.getAuthenticationRoles() != null
           && !moaAuthData.getAuthenticationRoles().isEmpty()) {
         return g.buildStringAttribute(ROLES_FRIENDLY_NAME, ROLES_NAME,
             moaAuthData.getAuthenticationRoles().stream()
                 .map(el -> el.getRawRoleString())
                 .collect(Collectors.joining(ROLE_NAME_DELIMITER)));
-        
-        
+
       } else {
         Logger.trace("No PVP roles available. Skipping attribute: " + ROLES_FRIENDLY_NAME);
-        
+
       }
-            
+
     } else {
       Logger.info("Attribute: " + ROLES_FRIENDLY_NAME + " is only available in MOA-ID context");
-      
+
     }
-       
+
     return null;
-    
+
   }
 
   @Override
   public <ATT> ATT buildEmpty(IAttributeGenerator<ATT> g) {
     return g.buildEmptyAttribute(ROLES_FRIENDLY_NAME, ROLES_NAME);
-    
+
   }
 
   @Override
   public String getName() {
     return ROLES_NAME;
-    
+
   }
-  
+
 }
-- 
cgit v1.2.3