From d7ae9bc9cedcf65e620d4d3d75075ae374dac65e Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Sun, 10 Feb 2013 14:29:07 +0000
Subject: [PATCH] Intial support for an InCommon/LIGO MDX pilot.

---
 build.xml                 |   1 +
 mdx/us_incommon/beans.xml | 111 ++++++++++++++++++++++++++++++++++++--
 mdx/us_incommon/verbs.xml |  25 ++++++++-
 3 files changed, 131 insertions(+), 6 deletions(-)

diff --git a/build.xml b/build.xml
index 54919738..c48cc26d 100644
--- a/build.xml
+++ b/build.xml
@@ -876,6 +876,7 @@
 		<CHANNEL.import channel="nz_tuakiri"/>
         <CHANNEL.import channel="si_arnes"/>
         <CHANNEL.import channel="uk_eduserv"/>
+		<CHANNEL.import channel="us_incommon"/>
 	</target>
 	
     <!--
diff --git a/mdx/us_incommon/beans.xml b/mdx/us_incommon/beans.xml
index 983c4090..3b4fe2f3 100644
--- a/mdx/us_incommon/beans.xml
+++ b/mdx/us_incommon/beans.xml
@@ -51,6 +51,47 @@
         <property name="verificationCertificate" ref="us_incommon_signingCertificate"/>
     </bean>
 
+    <!--
+        us_incommon_registrar
+        
+        Unique ID for the registrar associated with this channel.
+        
+        TODO confirm this value with InCommon
+    -->
+    <bean id="us_incommon_registrar" class="java.lang.String">
+        <constructor-arg value="urn:mace:incommon"/>
+    </bean>
+    
+    <!--
+        us_incommon_check_regauth
+        
+        Any registrationAuthority already present on an entity in this
+        channel must match the known registration authority value.
+    -->
+    <bean id="us_incommon_check_regauth" parent="check_regauth_parent"
+        p:id="us_incommon_check_regauth">
+        <property name="transformParameters">
+            <map>
+                <entry key="expectedAuthority" value-ref="us_incommon_registrar"/>
+            </map>
+        </property>
+    </bean>
+    
+    <!--
+        us_incommon_default_regauth
+        
+        Provide a default registrationAuthority appropriate to
+        this channel.
+    -->
+    <bean id="us_incommon_default_regauth" parent="default_regauth_parent"
+        p:id="us_incommon_default_regauth">
+        <property name="transformParameters">
+            <map>
+                <entry key="defaultAuthority" value-ref="us_incommon_registrar"/>
+            </map>
+        </property>
+    </bean>
+    
     <!--
         Fetch and process the production entities as a collection.
     -->
@@ -58,7 +99,6 @@
         p:id="us_incommon_productionEntities">
         <property name="composedStages">
             <list>
-                <!-- no export aggregate; use the production one instead -->
                 <ref bean="us_incommon_productionAggregate"/>
 
                 <!--
@@ -72,14 +112,77 @@
                 
                 <ref bean="disassemble"/>
                 
+                <ref bean="us_incommon_check_regauth"/>
                 <ref bean="standardImportActions"/>
             </list>
         </property>
     </bean>
     
     <!--
-        Select primary export aggregate.
+        Filter out all entities not involved in the pilot.
     -->
-    <alias alias="us_incommon_exportedAggregate" name="us_incommon_productionAggregate"/>
-    <alias alias="us_incommon_exportedEntities"  name="us_incommon_productionEntities"/>
+    <bean id="us_incommon_pilot_filterEntities" parent="stage_parent"
+        class="net.shibboleth.metadata.dom.saml.EntityFilterStage"
+        p:id="us_incommon_pilot_filterEntities"
+        p:whitelistingEntities="true">
+        <property name="designatedEntities">
+            <set>
+                <value>https://wiki.ligo.org/shibboleth-sp</value>
+            </set>
+        </property>
+    </bean>
+    
+    <!--
+        Synthesise an export collection by filtering the production entities.
+    -->
+    <bean id="us_incommon_exportedEntities" parent="composite_parent"
+        p:id="us_incommon_exportedEntities">
+        <property name="composedStages">
+            <list>
+                <ref bean="us_incommon_productionAggregate"/>
+                
+                <!--
+                    Check for fatal errors at the aggregate level:
+                        missing or expired validUntil attribute
+                        invalid signature
+                -->
+                <ref bean="check_validUntil"/>
+                <ref bean="us_incommon_checkSignature"/>
+                <ref bean="errorTerminatingFilter"/>
+                
+                <ref bean="disassemble"/>
+                
+                <!-- filter out anything we don't want -->
+                <ref bean="us_incommon_pilot_filterEntities"/>
+                
+                <!-- default and check registrar -->
+                <ref bean="us_incommon_default_regauth"/>
+                <ref bean="us_incommon_check_regauth"/>
+
+                <!--
+                    Unfortunately in this case, the "standard" import actions will remove all
+                    entity attributes, and we wish to keep some of the InCommon category
+                    designations.
+                    
+                    TODO This will mean unbundling standardImportActions everywhere
+                    it is currently used.
+                -->
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+    
+    <!--
+        Fake an export aggregate by aggregating the exported entities.
+    -->
+    <bean id="us_incommon_exportedAggregate" parent="composite_parent"
+        p:id="us_incommon_exportedAggregate">
+        <property name="composedStages">
+            <list>
+                <ref bean="us_incommon_exportedEntities"/>
+                <ref bean="assemble"/>
+            </list>
+        </property>
+    </bean>
+
 </beans>
diff --git a/mdx/us_incommon/verbs.xml b/mdx/us_incommon/verbs.xml
index 69e546e4..c8b97487 100644
--- a/mdx/us_incommon/verbs.xml
+++ b/mdx/us_incommon/verbs.xml
@@ -54,6 +54,27 @@
         </property>
     </bean>
     
-    <alias alias="import"    name="importProduction"/>
-    <alias alias="importRaw" name="importProductionRaw"/>
+    <bean id="importExported" parent="pipeline_parent"
+        p:id="importExported">
+        <property name="stages">
+            <list>
+                <ref bean="us_incommon_exportedEntities"/>
+                <ref bean="standardImportTail"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+    
+    <bean id="importExportedRaw" parent="pipeline_parent"
+        p:id="importExportedRaw">
+        <property name="stages">
+            <list>
+                <ref bean="us_incommon_exportedAggregate"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+    
+    <alias alias="import"    name="importExported"/>
+    <alias alias="importRaw" name="importExportedRaw"/>
 </beans>