digidentity/libsaml

module Saml
  module Elements
    class RequestedAuthnContext

      module ComparisonTypes
        EXACT   = 'exact'
        MINIMUM = 'minimum'
        MAXIMUM = 'maximum'
        BETTER  = 'better'
        ALL     = [EXACT, MINIMUM, MAXIMUM, BETTER, nil]
      end

      include Saml::ClassRefs

      include Saml::Base

      tag 'RequestedAuthnContext'
      namespace 'samlp'

      attribute :comparison, String, tag: "Comparison"

      has_many :authn_context_class_refs, String, namespace: "saml", tag: "AuthnContextClassRef"

      validates :authn_context_class_ref, presence: true, inclusion: ALL_CLASS_REFS
      validates :comparison, inclusion: ComparisonTypes::ALL

      def authn_context_class_ref
        authn_context_class_refs.first if authn_context_class_refs
      end

      def authn_context_class_ref=(ref)
        self.authn_context_class_refs = [ref]
      end
    end
  end
end