beans.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
    Common beans for this channel.
-->
<beans xmlns="http://www.springframework.org/schema/beans"
    default-lazy-init="true"
    xmlns:c="http://www.springframework.org/schema/c"
    xmlns:p="http://www.springframework.org/schema/p"
    xmlns:util="http://www.springframework.org/schema/util"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd">

    <!--
        Import additional channel-local beans.
    -->
    <import resource="file:${edugain.dir}/entity-blacklist.xml"/>
    <import resource="file:${edugain.dir}/verify-blacklist.xml"/>

    <!--
        Location of various resources.
    -->
    <!-- production aggregate -->
    <bean id="int_edugain_productionAggregate_url" parent="String">
        <constructor-arg value="https://mds.edugain.org/edugain-v2.xml"/>
    </bean>
    <!-- beta (test) aggregate -->
    <bean id="int_edugain_betaAggregate_url" parent="String">
        <constructor-arg value="http://mds.edugain.org/edugain-v1-beta.xml"/>
    </bean>
    <!-- Downloaded copy of production aggregate. -->
    <bean id="int_edugain_productionAggregate_file" parent="File">
        <constructor-arg value="${output.edugain.download}"/>
    </bean>

    <!--
        Fetches the eduGAIN production aggregate from its designated URL.

        Other aggregates may be substituted if their location exists as a bean
        named "int_edugain_<ID>Aggregate_url" above, and the property
        "int.edugain.aggregate.name" is set to "<ID>". "production" is used
        as the default.

        If a flow is being run from build.xml using ant, the property name
        needs to be prefixed with "mda.", as "mda.int.edugain.aggregate.name":

            ant -Dmda.int.edugain.aggregate.name=beta ...
    -->
    <bean id="int_edugain_productionAggregate" parent="mda.DOMResourceSourceStage">
        <property name="parserPool" ref="parserPool"/>
        <property name="DOMResource">
            <bean parent="mda.HTTPResource">
                <constructor-arg name="client" ref="httpClient"/>
                <constructor-arg name="url"
                    ref="int_edugain_${int.edugain.aggregate.name:production}Aggregate_url"/>
            </bean>
        </property>
    </bean>

    <!--
        Fetches the downloaded copy of the eduGAIN production aggregate.
    -->
    <bean id="int_edugain_productionAggregate_fromFile" parent="mda.DOMResourceSourceStage">
        <property name="parserPool" ref="parserPool"/>
        <property name="DOMResource">
            <bean parent="FileSystemResource"
                c:_-ref="int_edugain_productionAggregate_file"/>
        </property>
    </bean>

    <!--
        eduGAIN signing certificate.
    -->
    <bean id="int_edugain_signingCertificate" parent="mda.X509CertificateFactoryBean"
        p:resource="classpath:int_edugain/mds-v2.cer"/>

    <!--
        Check a signature against the eduGAIN signing certificate.
    -->
    <bean id="int_edugain_checkSignature" parent="XMLSignatureValidationStageSHA256">
        <property name="verificationCertificate" ref="int_edugain_signingCertificate"/>
    </bean>

    <!--
        Remove blacklisted entities.
    -->
    <bean id="int_edugain_removeBlacklistedEntities" parent="mda.EntityFilterStage"
        p:keepingEntities="false"
        p:designatedEntities-ref="int_edugain_entity_blacklist"/>

    <!--
        Fetch the production entities as a collection.
    -->
    <bean id="int_edugain_productionEntities" parent="mda.CompositeStage">
        <property name="stages">
            <list>
                <ref bean="int_edugain_productionAggregate_fromFile"/>

                <!--
                    Check for fatal errors at the aggregate level:
                        missing or expired validUntil attribute

                    Signature was checked when the file was downloaded,
                    so we don't need to do it again here.
                -->
                <ref bean="check_validUntil"/>
                <ref bean="errorTerminatingFilter"/>

                <ref bean="disassemble"/>

                <ref bean="int_edugain_removeBlacklistedEntities"/>
            </list>
        </property>
    </bean>

</beans>