Ignore excess entitlements
We have a new feature in HDF: Additional entitlements, that don't conform to G002.
This leads to an error when parsing the entitlements. I've tried to work around, but failed.
This is the input data (as I'm currently the only user that obtains the entitlements:
Input: {
"state_target": "deployed",
"user": {
"userinfo": {
"eduperson_assurance": [
"https://refeds.org/assurance/IAP/medium",
"https://refeds.org/assurance/IAP/local-enterprise",
"https://refeds.org/assurance/ID/eppn-unique-no-reassign",
"https://refeds.org/assurance/ATP/ePA-1m",
"https://refeds.org/assurance/ATP/ePA-1d",
"https://refeds.org/assurance/ID/unique",
"https://refeds.org/assurance/profile/cappuccino",
"https://refeds.org/assurance/IAP/low"
],
"eduperson_entitlement": [
"urn:mace:dir:entitlement:common-lib-terms",
"http://bwidm.de/entitlement/bwLSDF-SyncShare",
"urn:geant:h-df.de:group:IMK-TRO-EWCC#login.helmholtz-data-federation.de",
"urn:geant:h-df.de:group:MyExampleColab#login.helmholtz-data-federation.de",
"urn:geant:h-df.de:group:wlcg-test#login.helmholtz-data-federation.de",
"urn:geant:h-df.de:group:HDF#login.helmholtz-data-federation.de"
],
"eduperson_scoped_affiliation": "member@kit.edu",
"email": "marcus.hardt@kit.edu",
"email_verified": "true",
"family_name": "Hardt",
"given_name": "Marcus",
"groups": [
"/wlcg-test",
"/IMK-TRO-EWCC",
"/MyExampleColab",
"/HDF",
"/"
],
"iss": "https://login.helmholtz-data-federation.de/oauth2",
"name": "Marcus Hardt",
"preferred_username": "marcus",
"ssh_key": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqA5FW6m3FbFhCOsRQBxKMRki5qJxoNhZdaeLXg6ym/ marcus@nemo2019\n",
"sub": "6c611e2a-2c1c-487f-9948-c058a36c8f0e"
},
"credentials": {
"ssh_key": [
{
"id": 5,
"name": "unity_key",
"value": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqA5FW6m3FbFhCOsRQBxKMRki5qJxoNhZdaeLXg6ym/ marcus@nemo2019\n"
}
]
}
}
}