Creating policy "permitted locations"

[darxsky]

Good morning everyone,
I would like to add an extension to check if the consumer's location is included in a specific location or in a list of allowed locations. It's possible to do it? Could you kindly tell me how to integrate this functionality into the connector via extension?
Thank you.

[jimmarino]

I'm not sure how one can reliably check if a client is in a particular location. The only way I can think of is via third-party attestation in a credential (ClaimToken) or a lookup of the participantId. Take a look at the IdentityService implementations for details.

Authoring extensions is extensively documented, including in the samples. Please review those. The discussion board is intended for specific questions regarding the codebase.

[darxsky]

Good morning, sorry if I reopen the discussion. I have a doubt. I am using the DAPS extension which generates its own claim once the token is obtained from the DAPS server containing the token information. I wanted to know if there was a way to add a claim, key-value pair, "region": "EU", to the claim returned by DAPS, without modifying the DAPS server code since the getClaims() method, implemented in the connector, returns an immutable collection.
Also, can a participant's location be attached to the client/participant id? For example, 8C:A7:DG:85:E1:keyid:8C:A7:DG:85:E1:region:EU? Or does such a solution not meet connector standards?
Thank you.

[jimmarino]

You can implement a ParticipantAgentServiceExtension.

[darxsky]

Thank you very much. So, I need to add an extension(in the /extensions folder) to my project that overrides the attributesFor() method of ParticipantAgentServiceExtension and then register the created extension via the register method of the ParticipantAgentService class, right?

[jimmarino]

You need to create an extension that is loaded via the Java ServiceLoader and registers an implementation of ParticipantAgentServiceExtension with the ParticipantAgentService (which can be injected on the extension class).

[darxsky]

Perfect, thank you.