cie-es 0.0.3 → 0.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d2c40e83aa5c6b25057c733c768e02971b5884af29bc2bb3d105c2a73599be1
-  data.tar.gz: 4a1c0f2942362ee2e05a4b0268d7bdbaa3393d8aa569ec638b3dc6d67c1ab8bc
+  metadata.gz: e9b45df15ab2a270e39bababdbfe65400e2b71579f595f9f1ea984d4eea22f9a
+  data.tar.gz: 33d10e6d3434f710053ca31696498318e7cb8422e95a052ae0e067406581dbef
 SHA512:
-  metadata.gz: 9dcfd02eec55b68958e400a7899bb53f2513828be8002e7cf721539f31075898617504224d7e31596f14303fc3a39e02264c0137ef14de3350439c2a06b0b14b
-  data.tar.gz: 3e305a5094ab9491586ad76632f23120aa73183771d6b35ced047e107ae6478cbed3ae13a72766a53b6c1fd20a7894c27205c02edf9ecaf95589667b84a0ce23
+  metadata.gz: f108fb0af0e6bbe2ba8277763d88399e94f6b3d7b1c3cb3cef629b59c7bff06f5033fb708e2b273ec9296c8aeff5404d62af9bba0da16742c26f80f20a7b2aa4
+  data.tar.gz: ea5a8cd9060333536452a6e95608cea296d225be6fe2251c3aecf175e190649b53da7f519fe5ff7ee34edbf1984ecb54171bca3a79aa994366bda08b65b45e88

data/cie-es.gemspec

@@ -2,7 +2,7 @@ $LOAD_PATH.push File.expand_path('../lib', __FILE__)
 
 Gem::Specification.new do |s|
   s.name = 'cie-es'
-  s.version = '0.0.3'
+  s.version = '0.0.8'
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Fabiano Pavan"]

data/lib/cie/ruby-saml/authrequest.rb

@@ -35,7 +35,7 @@ module Cie::Saml
       root.attributes['ID'] = uuid
       root.attributes['IssueInstant'] = time
       root.attributes['Version'] = "2.0"
-      root.attributes['ProtocolBinding'] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
+      root.attributes['ProtocolBinding'] = HTTP_POST
       root.attributes['AttributeConsumingServiceIndex'] = @settings.assertion_consumer_service_index
       root.attributes['ForceAuthn'] = "true"
       root.attributes["AssertionConsumerServiceURL"] = @settings.assertion_consumer_service_url
@@ -132,23 +132,25 @@ module Cie::Saml
       metadata = Metadata::new
       meta_doc = metadata.get_idp_metadata(@settings)
       
-      # first try POST
+      # first try GET
       sso_element = REXML::XPath.first(meta_doc,
-        "/EntityDescriptor/IDPSSODescriptor/SingleSignOnService[@Binding='#{HTTP_POST}']")
+        "/EntityDescriptor/IDPSSODescriptor/SingleSignOnService[@Binding='#{HTTP_GET}']")
       if sso_element 
         @URL = sso_element.attributes["Location"]
-        #Logging.debug "binding_select: POST to #{@URL}"
-        return "POST", content_post
+        Logging.debug "binding_select: GET from #{@URL}"
+        return "GET", content_get
       end
-      
-      # next try GET
+
+      # then try POST
       sso_element = REXML::XPath.first(meta_doc,
-        "/EntityDescriptor/IDPSSODescriptor/SingleSignOnService[@Binding='#{HTTP_GET}']")
+        "/EntityDescriptor/IDPSSODescriptor/SingleSignOnService[@Binding='#{HTTP_POST}']")
       if sso_element 
         @URL = sso_element.attributes["Location"]
-        Logging.debug "binding_select: GET from #{@URL}"
-        return "GET", content_get
+        #Logging.debug "binding_select: POST to #{@URL}"
+        return "POST", content_post
       end
+      
+      
       # other types we might want to add in the future:  SOAP, Artifact
     end
     

data/lib/cie/ruby-saml/metadata.rb

@@ -33,14 +33,17 @@ module Cie
         meta_doc = Cie::XMLSecurityNew::Document.new
         root = meta_doc.add_element "md:EntityDescriptor", { 
             "xmlns:md"        => "urn:oasis:names:tc:SAML:2.0:metadata",
-            "xmlns:xml"       => "http://www.w3.org/XML/1998/namespace"
+            "xmlns:xml"       => "http://www.w3.org/XML/1998/namespace",
+            "xmlns:cie"       => "https://www.cartaidentita.interno.gov.it/saml-extensions"
         }
         if settings.issuer != nil
           root.attributes["entityID"] = settings.issuer
         end
-        uuid = "_" + UUID.new.generate
-        self.uuid = uuid
-        root.attributes["ID"] = uuid
+        
+        #Tolgo attributo ID per avere il metadata uguale e non farlo cambiare continuamente
+        # uuid = "_" + UUID.new.generate
+        # self.uuid = uuid
+        # root.attributes["ID"] = uuid
 
         sp_sso = root.add_element "md:SPSSODescriptor", { 
             "protocolSupportEnumeration" => "urn:oasis:names:tc:SAML:2.0:protocol",
@@ -200,40 +203,6 @@ module Cie
               end
             }
 
-
-
-
-            #Per EIDAS
-            # #AttributeConsumingService
-            # attr_cons_service = sp_sso.add_element "md:AttributeConsumingService", {
-            #     "index" => "99",
-            # }
-            # service_name 
-            # = attr_cons_service.add_element "md:ServiceName", {
-            #       "xml:lang" => "it"
-            # }
-            # service_name.text = "eIDAS Natural Person Minimum Attribute Set"
-            # settings.requested_attribute.each_with_index{ |attribute, index|
-            #   attr_cons_service.add_element "md:RequestedAttribute", {
-            #       "Name" => attribute
-            #   }
-            # }
-
-            # #AttributeConsumingService
-            # attr_cons_service = sp_sso.add_element "md:AttributeConsumingService", {
-            #   "index" => "100",
-            # }
-            # service_name = attr_cons_service.add_element "md:ServiceName", {
-            #       "xml:lang" => "it"
-            # }
-            # service_name.text = "eIDAS Natural Person Full Attribute Set"
-            # settings.requested_attribute.each_with_index{ |attribute, index|
-            #   attr_cons_service.add_element "md:RequestedAttribute", {
-            #       "Name" => attribute
-            #   }
-            # }
-
-
         end
         #organization
         organization = root.add_element "md:Organization"
@@ -250,6 +219,98 @@ module Cie
         }
         org_url.text = settings.organization['org_url']
 
+        #Nuovi tag contactperson
+
+        contact_person_administrative = root.add_element "md:ContactPerson", {
+          "contactType" => "administrative"
+        }
+
+        extensions_administrative = contact_person_administrative.add_element "md:Extensions"
+
+        public_extension = extensions_administrative.add_element "cie:Public"
+        public_extension.text = ""
+
+        unless settings.hash_ente['ipa_code'].blank?
+          ipa_code_ente = extensions_administrative.add_element "cie:IPACode"
+          ipa_code_ente.text = settings.hash_ente['ipa_code']
+        end
+
+        ipa_code_catente = extensions_administrative.add_element "cie:IPACategory"
+        
+        unless settings.hash_ente['belfiore'].blank?
+          belfiore_ente = extensions_administrative.add_element "cie:Municipality"
+          belfiore_ente.text = ( settings.hash_ente['belfiore'].blank? ? '' : settings.hash_ente['belfiore'].upcase )
+        end
+      
+        unless settings.hash_ente['organization_name'].blank?
+          company_ente = contact_person_administrative.add_element "md:Company"
+          company_ente.text = settings.hash_ente['organization_name']
+        end
+
+        unless settings.hash_ente['organization_email'].blank?
+          email_address_ente = contact_person_administrative.add_element "md:EmailAddress"
+          email_address_ente.text = settings.hash_ente['organization_email']
+        end
+
+        unless settings.hash_ente['organization_tel'].blank?
+          telephone_number_ente = contact_person_administrative.add_element "md:TelephoneNumber"
+          telephone_number_ente.text = settings.hash_ente['organization_tel']
+        end
+
+
+        contact_person_technical = root.add_element "md:ContactPerson", {
+          "contactType" => "technical"
+        }
+
+        extensions_private = contact_person_technical.add_element "md:Extensions"
+
+        private_extension = extensions_private.add_element "cie:Private"
+        private_extension.text = ""
+
+        unless settings.hash_fornitore_servizi['p_iva'].blank?
+          vat_number_fornitore = extensions_private.add_element "cie:VATNumber"
+          vat_number_fornitore.text = settings.hash_fornitore_servizi['p_iva']
+        end
+
+        unless settings.hash_fornitore_servizi['cf'].blank?
+          cf_fornitore = extensions_private.add_element "cie:FiscalCode"
+          cf_fornitore.text = settings.hash_fornitore_servizi['cf']
+        end
+        
+        unless settings.hash_fornitore_servizi['cod_ateco'].blank?
+          cod_ateco_fornitore = extensions_private.add_element "cie:NACE2Code"
+          cod_ateco_fornitore.text = settings.hash_fornitore_servizi['cod_ateco']
+        end
+
+        unless settings.hash_fornitore_servizi['cod_istat'].blank?
+          cod_istat_fornitore = extensions_private.add_element "cie:Municipality"
+          cod_istat_fornitore.text = settings.hash_fornitore_servizi['cod_istat']
+        end
+
+        unless settings.hash_fornitore_servizi['prov'].blank?
+          prov_fornitore = extensions_private.add_element "cie:Province"
+          prov_fornitore.text = settings.hash_fornitore_servizi['prov']
+        end
+
+        stato_fornitore = extensions_private.add_element "cie:Country"
+        stato_fornitore.text = 'IT'
+        
+        unless settings.hash_fornitore_servizi['nome_fornitore'].blank?
+          company_aggregatore = contact_person_technical.add_element "md:Company"
+          company_aggregatore.text = settings.hash_fornitore_servizi['nome_fornitore']
+        end
+
+        unless settings.hash_fornitore_servizi['email_fornitore'].blank?
+          email_address_aggregatore = contact_person_technical.add_element "md:EmailAddress"
+          email_address_aggregatore.text = settings.hash_fornitore_servizi['email_fornitore']
+        end
+
+        unless settings.hash_fornitore_servizi['tel_fornitore'].blank?
+          telephone_number_aggregatore = contact_person_technical.add_element "md:TelephoneNumber"
+          telephone_number_aggregatore.text = settings.hash_fornitore_servizi['tel_fornitore']
+        end
+
+
         #meta_doc << REXML::XMLDecl.new(version='1.0', encoding='UTF-8')
         meta_doc << REXML::XMLDecl.new("1.0", "UTF-8")
 

data/lib/cie/ruby-saml/response.rb

@@ -160,17 +160,17 @@ module Cie
               return (soft ? false : validation_error("Issuer of the Assertion not found or multiple."))
             end
 
-            issuer_response_nodes.each{ |iss|
-              #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
-              return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if !iss.attributes['Format'].nil? && iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
+            # issuer_response_nodes.each{ |iss|
+            #   #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
+            #   return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if !iss.attributes['Format'].nil? && iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
 
-            }
+            # }
 
-            issuer_assertion_nodes.each{ |iss|
-              #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
-              return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
+            # issuer_assertion_nodes.each{ |iss|
+            #   #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
+            #   return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
 
-            }
+            # }
 
             nodes = issuer_response_nodes + issuer_assertion_nodes
 

data/lib/cie/ruby-saml/settings.rb

@@ -10,7 +10,7 @@ module Cie
       attr_accessor :name_identifier_value, :name_identifier_format
       attr_accessor :sessionindex, :issuer, :destination_service_url, :authn_context, :requester_identificator
       attr_accessor :single_logout_service_url, :single_logout_service_binding, :single_logout_destination
-      attr_accessor :skip_validation
+      attr_accessor :skip_validation, :hash_ente, :hash_fornitore_servizi
     
       def initialize(config = {})
         config.each do |k,v|
@@ -19,7 +19,7 @@ module Cie
         end
 
         # Set some sane default values on a few options
-        self.assertion_consumer_service_binding = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
+        self.assertion_consumer_service_binding = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
         self.single_logout_service_binding = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
         # Default cache TTL for metadata is 1 day
         self.idp_metadata_ttl = 86400

data/lib/cie/xml_security_new.rb

@@ -126,7 +126,7 @@ module Cie
         signed_info_element.add_element("ds:SignatureMethod", {"Algorithm"=>signature_method})
 
         # Add Reference
-        reference_element = signed_info_element.add_element("ds:Reference", {"URI" => "##{uuid}"})
+        reference_element = signed_info_element.add_element("ds:Reference")
 
         # Add Transforms
         transforms_element = reference_element.add_element("ds:Transforms")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cie-es
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.8
 platform: ruby
 authors:
 - Fabiano Pavan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-11 00:00:00.000000000 Z
+date: 2021-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: canonix
@@ -112,7 +112,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.6
+rubygems_version: 3.0.8
 signing_key: 
 specification_version: 4
 summary: SAML Ruby Toolkit Cie