feat: added ACR comparison value in spid backend configuration

italia · Sep 22, 2021 · 2d6c4fa · 2d6c4fa
1 parent 0ccc57f
commit 2d6c4fa
Show file tree

Hide file tree

Showing 3 changed files with 75 additions and 0 deletions.
diff --git a/example/backends/spidsaml2.py b/example/backends/spidsaml2.py
@@ -315,6 +315,7 @@ def authn_request(self, context, entity_id):
         req_authn_context = authn_context or requested_authn_context(
             class_ref=self._authn_context
         )
+        req_authn_context.comparison = self.config.get("spid_acr_comparison", "minimum")
 
         # force_auth = true only if SpidL >= 2
         if "SpidL1" in authn_context.authn_context_class_ref[0].text:

diff --git a/example/metadata/idp/spid-entities-idps.xml b/example/metadata/idp/spid-entities-idps.xml
diff --git a/example/plugins/backends/spidsaml2_backend.yaml b/example/plugins/backends/spidsaml2_backend.yaml
@@ -17,6 +17,8 @@ config:
     - https://www.spid.gov.it/SpidL2
     - https://www.spid.gov.it/SpidL3
 
+  spid_acr_comparison: "minimum"
+
   acr_mapping:
     "": 'https://www.spid.gov.it/SpidL2'
     # specify AuthnContext per IdP