omniauth-saml-rmunify 1.0.0

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    ZGYyZTEwMzliMWZiZTNlMmRhYzE5M2Q5Y2VjOWMxNjEyZWNlMDA5OA==
+  data.tar.gz: !binary |-
+    ZTE2Zjk5MzE2OTY0ZTY5OWY1YjIwOWI3MTllY2JmMDQ4NGQ4YjUyNw==
+SHA512:
+  metadata.gz: !binary |-
+    MjJiMzk2Y2VhNjVlMDIyYjRkMTM4MmI5Zjc5OWUwMjAwNDkwNjc4ZWNhOTMz
+    MWVmZGE2ZTk5MWQxMWUyMmI2MzNmOGE1NjIwMzI5MzFiZDFhMTQwM2IyZjQw
+    ZDllODA0YWI2OTE4NjI0MDgyZjExMmVhMTA3MjEzMmQ1NDhiNDI=
+  data.tar.gz: !binary |-
+    OTZmMTkzYjY0ODkxZTFiMzNmZGZhY2UwNjI3ZjUzYjJjOGE2NjQ2OTczNTg3
+    NTJmYmRhZTA3NGUyNjdlZWNmZWJhY2FjMjhmNzEzMGQxNjVlYjI2NjFhOWZm
+    ZjkzZWY5MzYyN2Q1Nzc4OTNkYWI5ZDFjNjE1YzI0MTYzOTUzYTA=

data/CHANGELOG.md

@@ -0,0 +1,12 @@
+# OmniAuth SAML RM Unify Version History
+
+An RM Unify SAML strategy for OmniAuth.
+
+https://github.com/hampei/omniauth-saml-rmunify
+
+## master
+
+
+## 1.0.0 (2014-02-15)
+
+* initial release

data/README.md

@@ -0,0 +1,67 @@
+# OmniAuth SAML RM Unify
+
+An RM Unify SAML strategy for OmniAuth.
+
+https://github.com/hampei/omniauth-saml-rmunify
+
+* It's a simple subclass of omniauth-saml with a rm unify specific info hash.
+* Take a look at [rm attributes](http://dev.rmunify.com/reference/understanding-rm-unify/user-attributes.aspx) for descriptions.
+* The attribute names have been taken from the manage-app/single-sign-on/saml-p page, underscored for you convenience.
+* Read the [list of info attributes](https://github.com/hampei/omniauth-saml-rmunify/blob/master/lib/omniauth/strategies/saml-rmunify.rb) for what is available.
+
+## Requirements
+
+* [omniauth-saml](https://github.com/PracticallyGreen/omniauth-saml) '~> 1.1.0'
+
+## Usage
+
+See omniauth-saml for more options.
+
+In your Rails application:
+
+in `Gemfile`:
+
+```ruby
+gem 'omniauth-saml-rmunify'
+```
+
+and in `config/initializers/omniauth.rb`:
+
+```ruby
+Rails.application.config.middleware.use OmniAuth::Builder do
+  provider :saml_rmunify,
+    assertion_consumer_service_url: "https://#{app_host}/users/auth/saml_rmunify/callback",
+    issuer:                         "https://#{app_host}/rmunify",
+    idp_sso_target_url:             "https://sts.platform.rmunify.com/issue/saml/?binding=redirect",
+    idp_cert_fingerprint:           "66:cb:2d:02:cd:81:f1:b1:03:22:6b:a0:21:cd:8e:69:0c:5e:f4:25",
+end
+```
+
+## Authors
+
+Authored by Henk van der Veen.
+
+Maintained by [Henk van der Veen](http://hampei.github.io/).
+
+## License
+
+Copyright (c) 2014 [Henk van der Veen IT.](http://hampei.github.io/).
+All rights reserved. Released under the MIT license.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/lib/omniauth-saml-rmunify.rb

@@ -0,0 +1 @@
+require 'omniauth/strategies/saml-rmunify'

data/lib/omniauth-saml-rmunify/version.rb

@@ -0,0 +1,5 @@
+module OmniAuth
+  module SAMLRMUnify
+    VERSION = '1.0.0'
+  end
+end

data/lib/omniauth/strategies/saml-rmunify.rb

@@ -0,0 +1,46 @@
+require 'omniauth-saml'
+
+module OmniAuth
+  module Strategies
+    class SAMLRMUnify < SAML
+
+      option :name, "saml_rmunify"
+
+      info do
+        {
+          :email             => @attributes['urn:oid:0.9.2342.19200300.100.1.3'],
+          :name              => @attributes['urn:oid:2.16.840.1.113730.3.1.241'] ||
+                                @attributes['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'] ||
+                                @attributes['urn:oid:2.5.4.42'] + ' ' + @attributes['urn:oid:2.5.4.4'],
+          :nickname          => @attributes['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],
+          :first_name        => @attributes['urn:oid:2.5.4.42'],
+          :last_name         => @attributes['urn:oid:2.5.4.4'],
+          # underscore version of rm unify attribute names.
+          :display_name      => @attributes['urn:oid:2.16.840.1.113730.3.1.241'],
+          :user_name         => @attributes['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],
+          :persistent_id     => @attributes['urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'],
+          :identity_guid     => @attributes['http://schemas.rm.com/identity/claims/identityguid'],
+          :scope_targeted_id => @attributes['urn:mace:dir:attribute-def:eduPersonTargetedID'],
+          :organization_guid => @attributes['http://schemas.rm.com/identity/claims/organisationid'],
+          :organization_name => @attributes['urn:oid:2.5.4.10'],
+          :organization_code => @attributes['http://schemas.rm.com/identity/claims/organisationCode'],
+          :display_name      => @attributes['urn:oid:2.16.840.1.113730.3.1.241'],
+          :role              => @attributes['http://schemas.microsoft.com/ws/2008/06/identity/claims/role'],
+          :scope_affiliation => @attributes['urn:oid:1.3.6.1.4.1.5923.1.1.1.9'],
+          :is_unify_admin    => @attributes['http://schemas.rm.com/identity/claims/isunifyadmin'],
+          :year_of_entry     => @attributes['http://schemas.rm.com/identity/claims/yearofentry'],
+          :app_licence       => licence,
+          :app_user_id       => @attributes['http://schemas.rm.com/identity/claims/appuserid'],
+          :app_establishment_key => @attributes['http://schemas.rm.com/identity/claims/appestablishmentkey']
+        }
+      end
+
+      private def licence
+        licence_str =  @attributes['http://schemas.rm.com/identity/claims/applicence']
+        licence = Hash[licence_str[1..-2].split('|').map{|kv| kv.split(':')}]
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization 'saml_rmunify', 'SAMLRMUnify'

metadata

@@ -0,0 +1,63 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-saml-rmunify
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Henk van der Veen
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-02-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: omniauth-saml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+description: An RMUnify SAML strategy for OmniAuth.
+email: henk.van.der.veen@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- CHANGELOG.md
+- lib/omniauth/strategies/saml-rmunify.rb
+- lib/omniauth-saml-rmunify/version.rb
+- lib/omniauth-saml-rmunify.rb
+homepage: https://github.com/hampei/omniauth-saml-rmunify
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.1.10
+signing_key: 
+specification_version: 4
+summary: A custom info auth hash translating the rm unify attributes. Subclass of
+  omniauth-saml.
+test_files: []