Package org.forgerock.openig.openam

Class CdSsoConditionAdviceFilter

java.lang.Object

org.forgerock.openig.openam.AbstractConditionAdviceFilter

org.forgerock.openig.openam.CdSsoConditionAdviceFilter

All Implemented Interfaces:

Filter

public class CdSsoConditionAdviceFilter
extends AbstractConditionAdviceFilter

This filter handles any condition advices returned from AM during a policy evaluation, which one will depend on the policy. The condition advices are contained in the PolicyDecisionContext. If a supported condition advice is found then we send a redirect to AM with the advice details to fulfill the conditions.

This specific condition advice filter manages the redirect to AM according to the OIDC flow required to handle cross-domain SSO.

Field Summary

Fields inherited from class org.forgerock.openig.openam.AbstractConditionAdviceFilter

amService, formatEncoder

Method Summary

Modifier and Type	Method	Description
protected Promise<Response,NeverThrowsException>	doRedirect(Context context, Request request, Handler next, List<org.forgerock.openig.openam.AbstractConditionAdviceFilter.Advice> advices, URI originalUri)	Handle redirect to the instance to verify the required advices.

Methods inherited from class org.forgerock.openig.openam.AbstractConditionAdviceFilter

customAdvicesResponse, filter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

doRedirect

protected Promise<Response,NeverThrowsException> doRedirect(Context context,
 Request request,
 Handler next,
 List<org.forgerock.openig.openam.AbstractConditionAdviceFilter.Advice> advices,
 URI originalUri)

Description copied from class: AbstractConditionAdviceFilter

Handle redirect to the instance to verify the required advices.

Specified by:

doRedirect in class AbstractConditionAdviceFilter

Parameters:

context - the Context

request - the Request

next - the Handler

advices - the list of advices to be verified

originalUri - the originalUri, based on UriRouterContext#getOriginalUri, may have been updated based on a call to AuthRedirectContext#notifyImpendingIgRedirectAndUpdateUri

Returns:

a redirect response Promise