added logic for inputting attributes into arrays

PerunAttributes filter did not allow assigning of one LDAP reply into
multiple attributes on SP side. This is now handled by implicitly
converting target attributes into array (even if there is only one) and
changing the subsequent logic to handle arrays.

Signed-off-by: Petr Vsetecka <[email protected]>
Signed-off-by: Pavel Vyskočil <[email protected]>

Author: Gaeldrin

CHANGELOG.md

@@ -4,9 +4,10 @@ All notable changes to this project will be documented in this file.
  ## [Unreleased]
  [Added]
  - List of services is displayed as JSON if parameter 'output=json' is set in URL
- 
+
  [Fixed]
  - Fixed the problem where LDAP calls RPC method in PerunIdentity filter
+ - Fixed assignation of one Perun attribute to multiple SP attributes
 
  ## [v2.1.0]
  [Added]

lib/Auth/Process/PerunAttributes.php

@@ -63,6 +63,7 @@ public function process(&$request)
 
 			$sspAttr = $this->attrMap[$attrName];
 
+			// convert $attrValue into array
 			if (is_null($attrValue)) {
 				$value = array();
 			} else if (is_string($attrValue)) {
@@ -76,10 +77,24 @@ public function process(&$request)
 				"Attribute name: $attrName, Supported types: null, string, array, associative array.");
 			}
 
+			// convert $sspAttr into array
+			if (is_string($sspAttr)) {
+				$attrArray = array($sspAttr);
+			} else if (is_array($sspAttr)) {
+				$attrArray = $sspAttr;
+			} else {
+				throw new SimpleSAML_Error_Exception("sspmod_perun_Auth_Process_PerunAttributes - Unsupported attribute type. ".
+						"Attribute \$attrName, Supported types: string, array.");
+			}
+
 			SimpleSAML\Logger::debug("perun:PerunAttributes: perun attribute $attrName was fetched. " .
-					"Value ".implode(",", $value)." is being set to ssp attribute $sspAttr");
+					"Value " . implode(",", $value) . " is being set to ssp attribute " . implode(",", $attrArray));
+
+			// write $value to all SP attributes
+			foreach ($attrArray as $attribute) {
+				$request['Attributes'][$attribute] = $value;
+			}
 
-			$request['Attributes'][$sspAttr] = $value;
 		}
 
 	}