Interface AuthzDecisionStatementsProvider


  • @SupportedAll
    public interface AuthzDecisionStatementsProvider
    This interface defines the plug-in point for producing AuthzDecisionStatements. Note that there is no implementation of the AuthzDecisionStatement in OpenAM, and no processing of these statements, other than calling toXMLString(bool, bool) on them when toXMLString(bool, bool) is called on the encapsulating Assertion, and isMutable and makeImmutable. The isMutable method should always return true prior to signature generation, and the makeImmutable is called after the signature is generated to tell the object to reject any subsequent changes. Thus a 'bare-bones' implementation of this interface could return a List of implementations of the AuthzDecisionStatement interface, where the implementation simply returns the xml string corresponding to the AuthzDecisionStatement in toXMLString, and always return true from isMutable. Note that the toXMLString method of the AssertionImpl class should be consulted to determine the proper formatting and character escaping in the String returned from toXMLString in the AuthzDecisionStatement implementations.
    See Also:
    AuthzDecisionStatement
    • Method Detail

      • get

        List<AuthzDecisionStatement> get​(SSOToken ssoToken,
                                         SAML2Config config)
        Parameters:
        ssoToken - The SSOToken corresponding to the asserted subject
        config - The SAML2Config state for the invoked STS instance.
        Returns:
        The List of AuthzDecisionStatement instances to be included in the assertion. List must be non-null - return Collections.emptyList() if no AuthzDecisionStatements are to be included in the assertion.