2C,aAAaP,EAAKpC,cAEpBoC,EAAKpC,aAAe1K,WAAW,SAACgE,GAAD,OAAW8I,EAAKlB,MAAM5H,IAtS9B,IAsS+D8I,EAAKjC,QAAQ/B,YAIvGjJ,EAAEF,KAAK0F,SAASmD,iBAAiBvB,KAAoBJ,GAAG9B,EAAMiF,WAAY,SAACsD,GAAD,OAAOA,EAAE1G,mBAC/EjH,KAAKwL,eACPtL,EAAEF,KAAK0F,UAAUwB,GAAG9B,EAAM+E,YAAa,SAAC9F,GAAD,OAAW+I,EAAM/I,KACxDnE,EAAEF,KAAK0F,UAAUwB,GAAG9B,EAAMgF,UAAW,SAAC/F,GAAD,OAAWoJ,EAAIpJ,KAEpDrE,KAAK0F,SAASsC,UAAUiB,IAAIzD,MAE5BtF,EAAEF,KAAK0F,UAAUwB,GAAG9B,EAAM4E,WAAY,SAAC3F,GAAD,OAAW+I,EAAM/I,KACvDnE,EAAEF,KAAK0F,UAAUwB,GAAG9B,E...

ACjBpD,EAAO+d,eAAgB3a,KAGlBpG,MAGRgD,EAAOmC,OAAQ,CAGdgB,SAAS,EAITgb,UAAW,EAGXpG,MAAO,SAAUqG,KAGF,IAATA,IAAkBpe,EAAOme,UAAYne,EAAOmD,WAKjDnD,EAAOmD,SAAU,KAGZib,GAAsC,IAAnBpe,EAAOme,WAK/BH,EAAUrB,YAAa/f,EAAU,CAAEoD,OAIrCA,EAAO+X,MAAMkC,KAAO+D,EAAU/D,KAaD,aAAxBrd,EAASyhB,YACa,YAAxBzhB,EAASyhB,aAA6BzhB,EAASkQ,gBAAgBwR,SAGjEvhB,EAAOkgB,WAAYjd,EAAO+X,QAK1Bnb,EAASuQ,iBAAkB,mBAAoB8Q,GAG/ClhB,EAAOoQ,iBAAkB,OAAQ8Q,IAQlC,IAAIM,EAAS,SAAUzd,EAAOX,EAAImL,EAAKnH,EAAOqa,EAAWC,EAAUC,GAClE,IAAIvf,EAAI,EACP2C,EAAM...

mBU7E,KACN,+EApBJ,IA0BMkF,GAAa,cACfC,EAAkB,CAAC,CAAbH,KASN,GATMA,CACN,CACEH,EACG/E,KADH+E,CACS,CADTA,IAEGL,MAFHK,CAEU,CAACA,KAAmB5G,KAAnB4G,IAAqC,CAArCA,CAAD,CAFVA,CADF,CAIE,CAACA,KAAmB5G,KAAnB4G,IAAqC,CAArCA,CAAD,EAA0CL,MAA1C,CACEK,EAAU/E,KAAV+E,CAAgBG,EAAU,CAA1BH,CADF,CAJF,WAWEM,EAAI9H,GAAJ8H,CAAQ,aAAe,IAErBpG,GAAc,CAAW,CAAVuF,KAAc,EAAdA,EAAD,EAChB,QADgB,CAEhB,QACAc,WAEFC,GAGGC,MAHHD,CAGU,aAAU,OACQ,EAApB3H,KAAEA,EAAEI,MAAFJ,CAAW,CAAbA,GAAoD,CAAC,CAA3B,aAAWvG,OAAX,GADd,IAEZuG,EAAEI,MAAFJ,CAAW,I...

    protected static final String AZUREAD_STATE_TTL = "aad.state.ttl";

    protected static final String AZUREAD_AUTHORITY = "aad.authority";

    protected static final String AZUREAD_TENANT = "aad.tenant";

    protected static final String AZUREAD_CLIENT_SECRET = "aad.client.secret";

    protected static final String AZUREAD_CLIENT_ID = "aad.client.id";

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE components PUBLIC "-//DBFLUTE//DTD LastaDi 1.0//EN"
	"http://dbflute.org/meta/lastadi10.dtd">
<components>
	<component name="aadAuthenticator" class="org.codelibs.fess.sso.aad.AzureAdAuthenticator">
	</component>
	<component name="oicAuthenticator" class="org.codelibs.fess.sso.oic.OpenIdConnectAuthenticator">
	</component>
	<component name="samlAuthenticator" class="org.codelibs.fess.sso.saml.SamlAuthenticator">

ACjBpD,EAAO+d,eAAgB3a,KAGlBpG,MAGRgD,EAAOmC,OAAQ,CAGdgB,SAAS,EAITgb,UAAW,EAGXpG,MAAO,SAAUqG,KAGF,IAATA,IAAkBpe,EAAOme,UAAYne,EAAOmD,WAKjDnD,EAAOmD,SAAU,KAGZib,GAAsC,IAAnBpe,EAAOme,WAK/BH,EAAUrB,YAAa/f,EAAU,CAAEoD,OAIrCA,EAAO+X,MAAMkC,KAAO+D,EAAU/D,KAaD,aAAxBrd,EAASyhB,YACa,YAAxBzhB,EAASyhB,aAA6BzhB,EAASkQ,gBAAgBwR,SAGjEvhB,EAAOkgB,WAAYjd,EAAO+X,QAK1Bnb,EAASuQ,iBAAkB,mBAAoB8Q,GAG/ClhB,EAAOoQ,iBAAkB,OAAQ8Q,IAQlC,IAAIM,EAAS,SAAUzd,EAAOX,EAAImL,EAAKnH,EAAOqa,EAAWC,EAAUC,GAClE,IAAIvf,EAAI,EACP2C,EAAM...

import org.codelibs.fess.entity.FessUser;
import org.codelibs.fess.helper.SystemHelper;
import org.codelibs.fess.sso.aad.AzureAdAuthenticator;
import org.codelibs.fess.util.ComponentUtil;
import org.lastaflute.web.login.credential.LoginCredential;

import com.microsoft.aad.adal4j.AuthenticationResult;
import com.microsoft.aad.adal4j.UserInfo;

public class AzureAdCredential implements LoginCredential, FessCredential {

6C,aAAaP,EAAKtC,cAEpBsC,EAAKtC,aAAe5J,WAAW,SAAC4D,GAAD,OAAWsI,EAAKnB,MAAMnH,IApS9B,IAoS+DsI,EAAKnC,QAAQhC,YAIvGlI,EAAEF,KAAKsF,SAASyH,iBAAiB7F,KAAoBJ,GAAG9B,EAAMsE,WAAY,SAAC0D,GAAD,OAAOA,EAAEnG,mBAC/E7G,KAAK0K,eACPxK,EAAEF,KAAKsF,UAAUwB,GAAG9B,EAAMoE,YAAa,SAACnF,GAAD,OAAWuI,EAAMvI,KACxD/D,EAAEF,KAAKsF,UAAUwB,GAAG9B,EAAMqE,UAAW,SAACpF,GAAD,OAAW4I,EAAI5I,KAEpDjE,KAAKsF,SAASqC,UAAUsF,IAAI7H,KAE5BlF,EAAEF,KAAKsF,UAAUwB,GAAG9B,EAAMiE,WAAY,SAAChF,GAAD,OAAWuI,EAAMvI,KACvD/D,EAAEF,KAAKsF,UAAUwB,GAAG9B,E...

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.sso.aad;

import java.util.ArrayList;
import java.util.List;

import org.codelibs.fess.unit.UnitFessTestCase;

public class AzureAdAuthenticatorTest extends UnitFessTestCase {
    public void test_addGroupOrRoleName() {

        return split(getSystemProperty("aad.permission.fields", "mail"), ",")
                .get(stream -> stream.filter(StringUtil::isNotBlank).map(String::trim).toArray(n -> new String[n]));
    }

    default boolean isAzureAdUseDomainServices() {
        return Constants.TRUE.equalsIgnoreCase(getSystemProperty("aad.use.ds", "true"));
    }

    default String getSsoType() {