Added filter for RemoveAllAttributes

Author: vyskocilpavel

lib/Auth/Process/RemoveAllAttributes.php

@@ -6,21 +6,41 @@
  * Because the attributes should not depends on IdP which user currently used.
  *
  * @author Ondrej Velisek <[email protected]>
+ * @author Pavel Vyskočil <[email protected]>
  */
-
 class sspmod_perun_Auth_Process_RemoveAllAttributes extends SimpleSAML_Auth_ProcessingFilter
 {
 
+	const FILTER_ATTRIBUTE_LIST = "filterAttributeList";
+
+	private $filterAttributeList = array();
+
 	public function __construct($config, $reserved)
 	{
 		parent::__construct($config, $reserved);
+
+		if (isset($config[self::FILTER_ATTRIBUTE_LIST])) {
+			$this->filterAttributeList = $config[self::FILTER_ATTRIBUTE_LIST];
+		}
 	}
 
 	public function process(&$request)
 	{
 		assert('is_array($request)');
 
+		$attributes = array();
+
+		foreach ($request['Attributes'] as $attributeKey => $attributeValue) {
+			if (in_array($attributeKey, $this->filterAttributeList)) {
+				$attributes[$attributeKey] = $attributeValue;
+			}
+		}
+
 		$request['Attributes'] = array();
+
+		foreach ($attributes as $attributeKey => $attributeValue) {
+			$request['Attributes'][$attributeKey] = $attributeValue;
+		}
 	}
 
 }