OpenConext / Stepup-SelfService

     * @param AssertionAdapter $translatedAssertion

     * @return string

     */

    private function getEmail(AssertionAdapter $translatedAssertion)

    {

        $emails = $translatedAssertion->getAttributeValue('mail');

        if (empty($emails)) {

            throw new BadCredentialsException(

                'No schacHomeOrganization provided'

            );

        }

        if (count($emails) > 1) {

            $this->logger->notice('Multiple emails provided, picking first one', ['emailsCount' => count($emails)]);

        }

        $email = $emails[0];

        if (!is_string($email)) {

            $this->logger->notice('Received invalid email');

            throw new BadCredentialsException(

                'email is not a string'

            );

        }

        return $email;

    }

    /**

     * @param AssertionAdapter $translatedAssertion

     * @param AssertionAdapter $translatedAssertion

     * @return string

     */

    private function getInstitution(AssertionAdapter $translatedAssertion)

    {

        $institutions = $translatedAssertion->getAttributeValue('schacHomeOrganization');

        if (empty($institutions)) {

            throw new BadCredentialsException(

                'No schacHomeOrganization provided'

            );

        }

        if (count($institutions) > 1) {

            throw new BadCredentialsException(

                'Multiple schacHomeOrganizations provided'

            );

        }

        $institution = $institutions[0];

        if (!is_string($institution)) {

            $this->logger->notice('Received invalid schacHomeOrganization', ['schacHomeOrganization' => $institution]);

            throw new BadCredentialsException(

                'schacHomeOrganization is not a string'

            );

        }

        return $institution;

    }

}