omniauth-latvija 3.0.0 → 4.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 61e8e173bd8c5e154333778d5838d7c8d5d858dd
-  data.tar.gz: 698200a449f8c9047d87690e2221e36022a926c7
+  metadata.gz: '09b2671984f3e6cae04fb9c89aa8cee876a1064f'
+  data.tar.gz: 9c2a5f397af09733dc4658633d6a2c438a422ed4
 SHA512:
-  metadata.gz: 2f90ced3cba761f56ce57a2d24ecc684cb69e451008d72fa78d659b5496f995a566f368200ad1c67dd673f6efaefba196b29a29d6146231223d34c8b55fb8a2f
-  data.tar.gz: a9dafe2e3b298c9593e23918de155ebc8d6150583812744582e85c992a29b69aaa6bd21f91d66ccf3f397c0e19dc289c31eef921624392da281f8096b461911d
+  metadata.gz: e6f72751d59002fbd7d5a0b05a2a3e9024f163ac03b476359cbbeb5ac0904f333bd46ddc0e4bf55dde10f34b9489717d9fa9f8c262b5d32c49ff780091283cac
+  data.tar.gz: 806a5ffc9ef76e432a1d0e0e851cef0b5758cda40690bcdefd6647bdd3836f38575b1d18ee2c0a9369f9b6cf0b12344c04673edf9dae033ef4fb669ed792e0fb

data/README.md

@@ -59,7 +59,9 @@ Here's an example hash available in `request.env['omniauth.auth']`
       name: 'JANIS BERZINS',
       first_name: 'JANIS',
       last_name: 'BERZINS',
-      private_personal_identifier: '12345612345'
+      private_personal_identifier: '12345612345',
+      not_valid_before: '2019-05-09T07:29:41Z',
+      not_valid_on_or_after: '2019-05-09T08:29:41Z'
     },
     authentication_method: 'SWEDBANK'
   }

data/lib/omniauth-latvija/version.rb

@@ -1,5 +1,5 @@
 module OmniAuth
   module Latvija
-    VERSION = '3.0.0'
+    VERSION = '4.0.0'
   end
 end

data/lib/omniauth/strategies/latvija/response.rb

@@ -13,7 +13,7 @@ module OmniAuth::Strategies
       end
 
       def validate!
-        @document.validate!(fingerprint)
+        @document.validate!(fingerprint) && validate_conditions!
       end
 
       def xml
@@ -30,11 +30,15 @@ module OmniAuth::Strategies
       # Assuming there is only one value for each key
       def attributes
         @attributes ||= begin
+          attrs = {
+            'not_valid_before' => not_valid_before,
+            'not_valid_on_or_after' => not_valid_on_or_after
+          }
 
           stmt_elements = xml.xpath('//a:Attribute', a: ASSERTION)
-          return {} if stmt_elements.nil?
+          return attrs if stmt_elements.nil?
 
-          stmt_elements.each_with_object({}) do |element, result|
+          stmt_elements.each_with_object(attrs) do |element, result|
             name  = element.attribute('AttributeName').value
             value = element.text
 
@@ -49,6 +53,26 @@ module OmniAuth::Strategies
         cert = OpenSSL::X509::Certificate.new(options[:certificate])
         Digest::SHA1.hexdigest(cert.to_der).upcase.scan(/../).join(':')
       end
+
+      def conditions_tag
+        @conditions_tag ||= xml.xpath('//saml:Conditions', saml: ASSERTION)
+      end
+
+      def not_valid_before
+        @not_valid_before ||= conditions_tag.attribute('NotBefore').value
+      end
+
+      def not_valid_on_or_after
+        @not_valid_on_or_after ||= conditions_tag.attribute('NotOnOrAfter').value
+      end
+
+      def validate_conditions!
+        if not_valid_on_or_after.present? && Time.current < Time.parse(not_valid_on_or_after)
+          true
+        else
+          raise ValidationError, 'Current time is on or after NotOnOrAfter condition'
+        end
+      end
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-latvija
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 4.0.0
 platform: ruby
 authors:
 - Edgars Beigarts
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-02-12 00:00:00.000000000 Z
+date: 2019-05-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
@@ -122,6 +122,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: timecop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Latvija.lv authentication strategy for OmniAuth
 email:
 - edgars.beigarts@makit.lv
@@ -156,7 +170,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.6.14
 signing_key: 
 specification_version: 4
 summary: Latvija.lv authentication strategy for OmniAuth