enhancement to support overriding SAMLRequest

[ghost]

This PR is to enhance the SAMLRequest by providing support to override a few of the parameters mentioned in the issue GH-9199.

Support Added

1. isPassive
2. ForceAuth
3. AuthnContextClassRef

[jzheaux]

Thanks, @Adi-devops! I've left some feedback inline.

[jzheaux]

Thanks, @Adi-devops, for the updates! I've left a bit more feedback inline.

Also, in preparation for merging, will you please squash your commits and in the resulting commit ensure that you have the phrase Closes gh-9199 at the end?

[ghost]

@jzheaux Can you please review the PR.

[jzheaux]

Blocked by #9277. Let's revisit once that PR is closed.

[ghost]

Sure that would be great

[jzheaux]

Now that #9277 is merged, an application can do the following to set each of these properties:

First, isPassive:

@Bean 
Saml2AuthenticationRequestResolver authenticationRequests(RelyingPartyRegistrationResolver registrations) {
    Saml2AuthenticationRequestResolver resolver = new OpenSaml4AuthenticationRequestResolver(registrations);
    resolver.setAuthnRequestCustomizer((params) -> params.getAuthnRequest().setIsPassive(Boolean.TRUE));
    return resolver;
}

Second, ForceAuthn:

@Bean 
Saml2AuthenticationRequestResolver authenticationRequests(RelyingPartyRegistrationResolver registrations) {
    Saml2AuthenticationRequestResolver resolver = new OpenSaml4AuthenticationRequestResolver(registrations);
    resolver.setAuthnRequestCustomizer((params) -> params.getAuthnRequest().setForceAuthn(Boolean.TRUE));
    return resolver;
}

And third, AuthContextClassRef:

@Bean 
Saml2AuthenticationRequestResolver authenticationRequests(RelyingPartyRegistrationResolver registrations) {
    AuthnContextClassRef ref = // .. construct with OpenSAML
    Saml2AuthenticationRequestResolver resolver = new OpenSaml4AuthenticationRequestResolver(registrations);
    resolver.setAuthnRequestCustomizer((params) -> params.getAuthnRequest()
            .getRequestedAuthnContext().getAuthnContextClassRefs().add(ref));
    return resolver;
}

Because of this, I think that we don't need to introduce additional fields into Saml2AuthenticationRequestContext et al.

Thank you so much for your efforts. I'm going to close this; please feel free to reopen if you feel this doesn't address the issue.