onelogin 1.5.0 → 1.6.0

data/examples/rails-custom-login-page/app/views/home/index.html.erb

@@ -11,6 +11,15 @@
       <div class="alert alert-danger message" role="alert">
       </div>
 
+      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
+      <% url_create_session = "https://" + url_base + "/session_via_api_token" %>
+
+      <form action="<%= url_create_session %>" method="post" class="cookie-session-post-form">
+        <input type="hidden" id="cookie_session_token" name="session_token" value="">
+        <input id="auth_token" type="hidden">
+        <button type="submit">Creating Session ...</button>
+      </form>
+
       <%= form_tag("/login", method: "post", class: 'login-form') do %>
         <div class="form-group">
           <label for="username">Username</label>
@@ -61,6 +70,8 @@
         <button type="submit" class="btn btn-primary">Save Password</button>
       <% end %>
 
+      <form method="POST" action="" id="sp"></form>
+
     </div>
     <div class="col-sm">
     </div>
@@ -72,19 +83,42 @@
 
 <script type="text/javascript">
 
-  var ONELOGIN_SUBDOMAIN = "<%= ONELOGIN_SUBDOMAIN %>"
+  var ONELOGIN_SUBDOMAIN = "<%= ONELOGIN_SUBDOMAIN %>";
+  var CUSTOM_DOMAIN = "<%= CUSTOM_DOMAIN %>";
+  var COOKIE_VIA_POST_FORM = <%= COOKIE_VIA_POST_FORM || false %>;
 
   function makeCors(session_token) {
     var xhr = new XMLHttpRequest();
     xhr.withCredentials = true;
     method = "POST";
-    var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
+    if (CUSTOM_DOMAIN) {
+      var url = "https://" + CUSTOM_DOMAIN + "/session_via_api_token";
+    } else {
+      var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
+    }
     xhr.open(method, url, true);
     xhr.setRequestHeader("Content-Type", "application/json");
     body = {"session_token": session_token};
+    xhr.onreadystatechange = function () {
+      if(xhr.readyState === 4 && xhr.status === 200) {
+        if(getUrlParameter("origin")){
+          // If there is an origin SP then redirect to it
+          redirectToSP()
+        } else{
+          // Otherwise redirect to the main dashboard
+          window.location.href = '/dashboard';
+        }
+      }
+    };
     xhr.send(JSON.stringify(body));
   };
 
+  function sendPostForm(session_token){
+    $(".cookie-session-post-form").show();
+    $("#cookie_session_token").val(session_token);
+    $(".cookie-session-post-form").submit();
+  }
+
   function showAlert(type, message){
     $(".message").removeClass("alert-danger").removeClass("alert-success");
     $(".message").addClass("alert-" + type).text(message).show();
@@ -94,9 +128,32 @@
     $(".message").hide();
   }
 
+  function getUrlParameter(sParam) {
+      var sPageURL = window.location.search.substring(1),
+          sURLVariables = sPageURL.split('&'),
+          sParameterName,
+          i;
+
+      for (i = 0; i < sURLVariables.length; i++) {
+          sParameterName = sURLVariables[i].split('=');
+
+          if (sParameterName[0] === sParam) {
+              return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
+          }
+      }
+  };
+
+  function redirectToSP() {
+    var origin = getUrlParameter("origin");
+    var samlRequest = getUrlParameter("SAMLRequest");
+    var url = origin + "&SAMLRequest=" + samlRequest;
+    $("#sp").attr("action", url).submit();
+  }
+
   $(function(){
     hideAlert();
     $(".login-form").show();
+    $(".cookie-session-post-form").hide();
     $(".mfa-form").hide();
     $(".forgot-password-form").hide();
     $(".reset-password-form").hide();
@@ -124,9 +181,12 @@
             $(".login-form").hide();
             $(".mfa-form").show();
 
-          }else{
-            makeCors(res.session_token);
-            window.location.href = '/dashboard';
+          } else {
+            if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
+              sendPostForm(res.session_token);
+            } else {
+              makeCors(res.session_token);
+            }
           }
         },
         error: function(xhr, status, err) {
@@ -147,8 +207,11 @@
         success: function(res, status, xhr) {
           console.log(res);
 
-          makeCors(res.session_token);
-          window.location.href = '/dashboard';
+          if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
+            sendPostForm(res.session_token);
+          } else {
+            makeCors(res.session_token);
+          }
         },
         error: function(xhr, status, err) {
           console.log(err);
@@ -206,4 +269,4 @@
       event.preventDefault();
     });
   })
-</script>
+</script>

data/examples/rails-custom-login-page/config/initializers/onelogin.rb

@@ -1,4 +1,6 @@
 ONELOGIN_CLIENT_ID = Rails.application.secrets.ONELOGIN_CLIENT_ID
 ONELOGIN_CLIENT_SECRET = Rails.application.secrets.ONELOGIN_CLIENT_SECRET
 ONELOGIN_REGION = Rails.application.secrets.ONELOGIN_REGION
-ONELOGIN_SUBDOMAIN = Rails.application.secrets.ONELOGIN_SUBDOMAIN
+ONELOGIN_SUBDOMAIN = Rails.application.secrets.ONELOGIN_SUBDOMAIN
+CUSTOM_DOMAIN = Rails.application.secrets.CUSTOM_DOMAIN
+COOKIE_VIA_POST_FORM = Rails.application.secrets.COOKIE_VIA_POST_FORM

data/examples/rails-custom-login-page/config/secrets.yml.sample

@@ -23,6 +23,8 @@ development:
   ONELOGIN_CLIENT_SECRET:
   ONELOGIN_REGION: us
   ONELOGIN_SUBDOMAIN:
+  CUSTOM_DOMAIN:
+  COOKIE_VIA_POST_FORM:
 
 test:
   secret_key_base: 4560f08eba120b9601635410e1ceb958d9e119733b1ed614dee82dfb8cd6d121ed756463ae53dd9876bea1995505f85f8c86cc6848397fd2b3f63ae4f8980d30