Class: FeideSP

Inherits:
Object
  • Object
show all
Defined in:
lib/feide_sp.rb

Instance Method Summary collapse

Constructor Details

#initialize(app, opts) ⇒ FeideSP

Returns a new instance of FeideSP.



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
 
# File 'lib/feide_sp.rb', line 5

def initialize(app, opts)
  @meta = SAML::Metadata::EntitiesDescriptor.from_xml(opts[:meta])
  @app  = app

  @assertion_consumer_service = @meta.sp.sp_sso_descriptors.first.assertion_consumer_services.first
  @single_logout_service      = @meta.sp.sp_sso_descriptors.first.single_logout_services.first

  @dispatch = {
    'GET' => {
      '/feide/signon' => method(:signon),
      '/feide/logout' => method(:logout),
      @single_logout_service.location.path => method(:consume_logout),
    },
    'POST' => {
      @assertion_consumer_service.location.path => method(:consume),
    },
  }
end

Instance Method Details

#call(env) ⇒ Object 



24
25
26
27
28
 
# File 'lib/feide_sp.rb', line 24

def call(env)
  response = dispatch(env)
  return response unless response.nil?
  @app.call(env)
end

#consume(request) ⇒ Object 



48
49
50
51
52
53
54
55
56
57
58
 
# File 'lib/feide_sp.rb', line 48

def consume(request)
  response = Rack::Response.new
  saml_resp = SAML::Bindings.from_endpoint(@assertion_consumer_service).build_response(request)
  saml_resp.valid?(@meta.idp.idp_sso_descriptors.first.signing_key_descriptor.x509_certificate)
  str = "<pre>Status success?: #{saml_resp.success?}\n"
  saml_resp.assertions.first.attribute_statement.attributes.each do |a|
    str << "  #{a.name} #{a.attribute_values}\n"
  end
  response.write(str)
  response
end

#consume_logout(request) ⇒ Object 



70
71
72
73
74
75
76
 
# File 'lib/feide_sp.rb', line 70

def consume_logout(request)
  response = Rack::Response.new
  saml_resp = SAML::Bindings.from_endpoint(@single_logout_service).build_response(request)
  str = "<pre>Status success?: #{saml_resp.success?}\n</pre>"
  response.write(str)
  response
end

#dispatch(env) ⇒ Object 



30
31
32
33
34
35
36
 
# File 'lib/feide_sp.rb', line 30

def dispatch(env)
  request = Rack::Request.new(env)
  return unless %w(GET POST).find(request.request_method)
  handler = @dispatch[request.request_method][request.path_info]
  return if handler.nil?
  handler.call(request)
end

#logout(request) ⇒ Object 



60
61
62
63
64
65
66
67
68
 
# File 'lib/feide_sp.rb', line 60

def logout(request)
  response = Rack::Response.new
  saml_req = SAML::Core::LogoutRequest.new
  saml_req.name_id = "[email protected]"
  saml_req.issuer = @meta.sp.entity_id
  endpoint = @meta.idp.idp_sso_descriptors.first.single_logout_services.first
  SAML::Bindings.from_endpoint(endpoint).build_request(response, endpoint, saml_req)
  response
end

#signon(request) ⇒ Object 



38
39
40
41
42
43
44
45
46
 
# File 'lib/feide_sp.rb', line 38

def signon(request)
  response = Rack::Response.new
  saml_req = SAML::Core::AuthnRequest.new
  saml_req.issuer = @meta.sp.entity_id
  puts saml_req.to_xml
  endpoint = @meta.idp.idp_sso_descriptors.first.single_signon_services.first
  SAML::Bindings.from_endpoint(endpoint).build_request(response, endpoint, saml_req)
  response
end