ruby-saml-idp 0.1

data/Gemfile

@@ -0,0 +1,2 @@
+source "http://rubygems.org"
+gemspec

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2012 Lawrence Pit (http://lawrencepit.com)
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,83 @@
+# Ruby SAML IdP [![Build Status](https://secure.travis-ci.org/lawrencepit/ruby-saml-idp.png)](http://travis-ci.org/lawrencepit/ruby-saml-idp?branch=master) [![Dependency Status](https://gemnasium.com/lawrencepit/ruby-saml-idp.png)](https://gemnasium.com/lawrencepit/ruby-saml-idp)
+
+The Ruby SAML IdP library is for implementing the server side of SAML authentication. It allows your application to act as an IdP (Identity Provider) using the [SAML v2.0](http://en.wikipedia.org/wiki/Security_Assertion_Markup_Language) protocol. It provides a means for managing authentication requests and confirmation responses for SPs (Service Providers).
+
+Setting up a "real" IdP is such an undertaking I didn't care for such an achievement. I wanted something very simple that just works without having to install extra components. In it's current form it's very basic. This is because currently I use it for manual and end-to-end testing purposes only. It is reversed engineered from real-world SAML Responses send by ADFS systems.
+
+
+Installation and Usage
+----------------------
+
+Add this to your Gemfile:
+
+    gem 'ruby-saml-idp'
+
+### Not using rails?
+
+Include `SamlIdp::Controller` and see the examples that use rails. It should be straightforward for you. Basically you call `decode_SAMLRequest(params[:SAMLRequest])` and then use the value `saml_acs_url` to determine the source for which you need to authenticate a user. Once a user has successfully authenticated on your system send the Service Provider a SAMLReponse by posting to `saml_acs_url` the parameter `SAMLResponse` with the return value from a call to `create_SAMLResponse(user_email, audience_uri, issuer_uri)`
+
+### Using rails?
+
+Add to your `routes.rb` file, for example:
+
+``` ruby
+get '/saml/auth' => 'saml_idp#new'
+post '/saml/auth' => 'saml_idp#create'
+```
+
+Create a controller that looks like this, customize to your own situation:
+
+``` ruby
+class SamlIdpController < SamlIdp::IdpController
+  before_filter :find_account
+  # layout 'saml_idp'
+
+  def idp_authenticate(email, password)
+    user = @account.users.where(:email => params[:email]).first
+    user && user.valid_password?(params[:password]) ? user : nil
+  end
+
+  def idp_make_saml_response(user)
+    create_SAMLResponse(user.email, "https://example.com")
+  end
+
+  private
+
+    def find_account
+      @subdomain = saml_acs_url[/http:\/\/(.+?)\.example.com/, 1]
+      @account = Account.find_by_subdomain(@subdomain)
+      render :status => :forbidden unless @account.saml_enabled?
+    end
+
+end
+```
+
+
+Keys and Secrets
+----------------
+
+To generate the SAML Response it uses a default X.509 certificate and secret key... which isn't so secret. You can find them in `SamlIdp::Default`. The X.509 certificate is valid until year 2032. Obviously you shouldn't use these if you intend to use this in production environments. In that case, within the controller set the properties `x509_certificate` and `secret_key` using a `prepend_before_filter` callback.
+
+The fingerprint to use, if you use the default X.509 certificate of this gem, is:
+
+```
+9E:65:2E:03:06:8D:80:F2:86:C7:6C:77:A1:D9:14:97:0A:4D:F4:4D
+```
+
+
+Service Providers
+-----------------
+
+To act as a Service Provider which generates SAML Requests use the excellent [ruby-saml](https://github.com/onelogin/ruby-saml) gem.
+
+
+Author
+----------
+
+Lawrence Pit, lawrence.pit@gmail.com, [lawrencepit.com](http://lawrencepit.com), [@lawrencepit](http://twitter.com/lawrencepit)
+
+
+Copyright
+-----------
+
+Copyright (c) 2012 Lawrence Pit. See MIT-LICENSE for details.

data/app/controllers/saml_idp/idp_controller.rb

@@ -0,0 +1,40 @@
+module SamlIdp
+  class IdpController < ActionController::Base
+    include SamlIdp::Controller
+
+    unloadable
+
+    protect_from_forgery
+
+    before_filter :validate_saml_request
+
+    def new
+      render :template => "saml_idp/idp/new"
+    end
+
+    def create
+      unless params[:email].blank? && params[:password].blank?
+        person = idp_authenticate(params[:email], params[:password])
+        if person.nil?
+          @saml_idp_fail_msg = "Incorrect email or password."
+        else
+          @saml_response = idp_make_saml_response(person)
+          render :template => "saml_idp/idp/saml_post", :layout => false
+          return
+        end
+      end
+      render :template => "saml_idp/idp/new"
+    end
+
+    protected
+
+      def idp_authenticate(email, password)
+        raise "Not implemented"
+      end
+
+      def idp_make_saml_response(person)
+        raise "Not implemented"
+      end
+
+  end
+end

data/app/views/saml_idp/idp/new.html.erb

@@ -0,0 +1,21 @@
+<% if @saml_idp_fail_msg %>
+  <div id="saml_idp_fail_msg" class="flash error"><%= @saml_idp_fail_msg %></div>
+<% end %>
+
+<%= form_tag do %>
+  <%= hidden_field_tag("SAMLRequest", params[:SAMLRequest]) %>
+
+  <p>
+    <%= label_tag :email %>
+    <%= email_field_tag :email, params[:email], :autocapitalize => "off", :autocorrect => "off", :autofocus => "autofocus", :spellcheck => "false", :size => 30, :class => "email_pwd txt" %>
+  </p>
+
+  <p>
+    <%= label_tag :password %>
+    <%= password_field_tag :password, params[:password], :autocapitalize => "off", :autocorrect => "off", :spellcheck => "false", :size => 30, :class => "email_pwd txt" %>
+  </p>
+
+  <p>
+    <%= submit_tag "Sign in", :class => "button big blueish" %>
+  </p>
+<% end %>

data/app/views/saml_idp/idp/saml_post.html.erb

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+</head>
+<body onload="document.forms[0].submit();">
+<%= form_tag(@saml_acs_url) { hidden_field_tag("SAMLResponse", @saml_response) } %>
+</body>
+</html>

data/lib/ruby-saml-idp.rb

@@ -0,0 +1,3 @@
+require 'saml-idp/controller'
+require 'saml-idp/default'
+require 'saml-idp/version'

data/lib/saml-idp/controller.rb

@@ -0,0 +1,68 @@
+require 'openssl'
+require 'base64'
+require 'time'
+
+module SamlIdp
+  module Controller
+
+    attr_accessor :x509_certificate, :secret_key
+
+    def saml_acs_url
+      @saml_acs_url
+    end
+
+    def x509_certificate
+      return @x509_certificate if defined?(@x509_certificate)
+      @x509_certificate = SamlIdp::Default::X509_CERTIFICATE
+    end
+
+    def secret_key
+      return @secret_key if defined?(@secret_key)
+      @secret_key = SamlIdp::Default::SECRET_KEY
+    end
+
+    protected
+
+      def validate_saml_request(saml_request = params[:SAMLRequest])
+        decode_SAMLRequest(saml_request)
+      end
+
+      def decode_SAMLRequest(saml_request)
+        zstream  = Zlib::Inflate.new(-Zlib::MAX_WBITS)
+        text = zstream.inflate(Base64.decode64(saml_request))
+        zstream.finish
+        zstream.close
+        @saml_request_id = text[/ID='(.+?)'/, 1]
+        @saml_acs_url = text[/AssertionConsumerServiceURL='(.+?)'/, 1]
+      end
+
+      def create_SAMLResponse(nameID, audience_uri, issuer_uri = "#{request.scheme}://#{request.host_with_port}#{request.fullpath}")
+        now = Time.now.utc
+        response_id, reference_id = UUID.generate, UUID.generate
+
+        assertion = %[<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" ID="_#{reference_id}" IssueInstant="#{now.iso8601}" Version="2.0"><Issuer>#{issuer_uri}</Issuer><Subject><NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">#{nameID}</NameID><SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><SubjectConfirmationData InResponseTo="#{@saml_request_id}" NotOnOrAfter="#{(now+3*60).iso8601}" Recipient="#{@saml_acs_url}"></SubjectConfirmationData></SubjectConfirmation></Subject><Conditions NotBefore="#{(now-5).iso8601}" NotOnOrAfter="#{(now+60*60).iso8601}"><AudienceRestriction><Audience>#{audience_uri}</Audience></AudienceRestriction></Conditions><AttributeStatement><Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"><AttributeValue>#{nameID}</AttributeValue></Attribute></AttributeStatement><AuthnStatement AuthnInstant="#{now.iso8601}" SessionIndex="_#{reference_id}"><AuthnContext><AuthnContextClassRef>urn:federation:authentication:windows</AuthnContextClassRef></AuthnContext></AuthnStatement></Assertion>]
+
+        digest_value = Base64.encode64(OpenSSL::Digest::SHA1.digest(assertion)).chomp
+
+        signed_info = %[<ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod><ds:Reference URI="#_#{reference_id}"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod><ds:DigestValue>#{digest_value}</ds:DigestValue></ds:Reference></ds:SignedInfo>]
+
+        signature_value = sign(signed_info)
+
+        signature = %[<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">#{signed_info}<ds:SignatureValue>#{signature_value}</ds:SignatureValue><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>#{self.x509_certificate}</ds:X509Certificate></ds:X509Data></KeyInfo></ds:Signature>]
+
+        assertion_and_signature = assertion.sub(/Issuer\>\<Subject/, "Issuer>#{signature}<Subject")
+
+        xml = %[<samlp:Response ID="_#{response_id}" Version="2.0" IssueInstant="#{now.iso8601}" Destination="#{@saml_acs_url}" Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified" InResponseTo="#{@saml_request_id}" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">#{issuer_uri}</Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status>#{assertion_and_signature}</samlp:Response>]
+
+        Base64.encode64(xml)
+      end
+
+    private
+
+      def sign(data)
+        key = OpenSSL::PKey::RSA.new(self.secret_key)
+        Base64.encode64(key.sign(OpenSSL::Digest::SHA1.new, data))
+      end
+
+  end
+end

data/lib/saml-idp/default.rb

@@ -0,0 +1,29 @@
+module SamlIdp
+  module Default
+
+    NAME_ID_FORMAT = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
+
+    X509_CERTIFICATE = "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"
+
+    FINGERPRINT = "9E:65:2E:03:06:8D:80:F2:86:C7:6C:77:A1:D9:14:97:0A:4D:F4:4D"
+
+    SECRET_KEY = <<EOS
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+EOS
+
+  end
+end

data/lib/saml-idp/version.rb

@@ -0,0 +1,3 @@
+module SamlIdp
+  VERSION = '0.1'
+end

data/ruby-saml-idp.gemspec

@@ -0,0 +1,31 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "saml-idp/version"
+
+Gem::Specification.new do |s|
+  s.name = %q{ruby-saml-idp}
+  s.version = SamlIdp::VERSION
+  s.platform = Gem::Platform::RUBY
+  s.authors = ["Lawrence Pit"]
+  s.email = %q{lawrence.pit@gmail.com}
+  s.homepage = %q{http://github.com/lawrencepit/ruby-saml-idp}
+  s.summary = %q{SAML IdP in ruby}
+  s.description = %q{SAML Identity Provider library in ruby}
+  s.date = Time.now.utc.strftime("%Y-%m-%d")
+  s.files = Dir.glob("app/**/*") + Dir.glob("lib/**/*") + [
+     "MIT-LICENSE",
+     "README.md",
+     "Gemfile",
+     "ruby-saml-idp.gemspec"
+  ]
+  s.test_files = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+  s.rdoc_options = ["--charset=UTF-8"]
+  s.add_dependency('uuid')
+  s.add_development_dependency "rake"
+  # s.add_development_dependency "rcov"
+  s.add_development_dependency "rspec"
+  s.add_development_dependency "ruby-saml"
+end
+

data/spec/controller_spec.rb

@@ -0,0 +1,49 @@
+# encoding: utf-8
+require 'spec_helper'
+
+describe SamlIdp::Controller do
+  include SamlIdp::Controller
+
+  def params
+    @params ||= {}
+  end
+
+  it "should find the SAML ACS URL" do
+    requested_saml_acs_url = "https://foo.example.com/saml/consume"
+    auth_request = Onelogin::Saml::Authrequest.new
+    auth_url = auth_request.create(saml_settings(requested_saml_acs_url))
+    params[:SAMLRequest] = CGI.unescape(auth_url.split("=").last)
+
+    validate_saml_request
+    saml_acs_url.should == requested_saml_acs_url
+  end
+
+  it "should create a SAML Response" do
+    requested_saml_acs_url = "https://foo.example.com/saml/consume"
+    saml_config = saml_settings(requested_saml_acs_url)
+    auth_request = Onelogin::Saml::Authrequest.new
+    auth_url = auth_request.create(saml_config)
+    params[:SAMLRequest] = CGI.unescape(auth_url.split("=").last)
+    validate_saml_request
+    saml_response = create_SAMLResponse("foo@example.com", "https://idp.com/saml/idp", "https://idp.com")
+
+    response = Onelogin::Saml::Response.new(saml_response)
+    response.name_id.should == "foo@example.com"
+    response.issuer.should == "https://idp.com"
+    response.settings = saml_config
+    response.is_valid?.should be_true
+  end
+
+  private
+
+    def saml_settings(saml_acs_url)
+      settings = Onelogin::Saml::Settings.new
+      settings.assertion_consumer_service_url = saml_acs_url
+      settings.issuer = "http://example.com"
+      settings.idp_sso_target_url = "http://idp.com/saml/idp"
+      settings.idp_cert_fingerprint = SamlIdp::Default::FINGERPRINT
+      settings.name_identifier_format = SamlIdp::Default::NAME_ID_FORMAT
+      settings
+    end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,14 @@
+# encoding: utf-8
+$LOAD_PATH.unshift File.dirname(__FILE__) + '/../lib'
+$LOAD_PATH.unshift File.dirname(__FILE__)
+
+STDERR.puts("Running Specs under Ruby Version #{RUBY_VERSION}")
+
+require 'rspec'
+require 'ruby-saml'
+require 'ruby-saml-idp'
+
+RSpec.configure do |c|
+  c.mock_with :rspec
+end
+

metadata

@@ -0,0 +1,132 @@
+--- !ruby/object:Gem::Specification 
+name: ruby-saml-idp
+version: !ruby/object:Gem::Version 
+  hash: 9
+  prerelease: 
+  segments: 
+  - 0
+  - 1
+  version: "0.1"
+platform: ruby
+authors: 
+- Lawrence Pit
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2012-04-28 00:00:00 Z
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: uuid
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: rake
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: rspec
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: ruby-saml
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id004
+description: SAML Identity Provider library in ruby
+email: lawrence.pit@gmail.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- app/controllers/saml_idp/idp_controller.rb
+- app/views/saml_idp/idp/new.html.erb
+- app/views/saml_idp/idp/saml_post.html.erb
+- lib/ruby-saml-idp.rb
+- lib/saml-idp/controller.rb
+- lib/saml-idp/default.rb
+- lib/saml-idp/version.rb
+- MIT-LICENSE
+- README.md
+- Gemfile
+- ruby-saml-idp.gemspec
+- spec/controller_spec.rb
+- spec/spec_helper.rb
+homepage: http://github.com/lawrencepit/ruby-saml-idp
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: SAML IdP in ruby
+test_files: 
+- spec/controller_spec.rb
+- spec/spec_helper.rb