spid-rails 0.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8aecb3b0eb7abdba6750c9bb4df29868dfa5f64b
-  data.tar.gz: 2ac156310a32d15632dffcfb48e8c88519357515
+  metadata.gz: f108d0b31001c264c51796b9df4aa5454700f688
+  data.tar.gz: a019ec7b7ca6e8b987130833b9e3d523675efe02
 SHA512:
-  metadata.gz: 9a57490aa21db27b99b68ed58f4fc6985fca5d25ff7326ce532334eb10be361d82ebf876f0f2bf4204f56b1287fecbe47b41078c6744aba91f91c09db2a7125b
-  data.tar.gz: 672ffaccb4f92ebfab71a8fd1c04de0f526a54365935b860096d3b1e88ffa6f6097e983035b0c03afaa3ce3d3f6f867b56f99bc2445b1235a7ea40ce05535b03
+  metadata.gz: bfc44ee3993d4b12ba11f05963c249a44a0b63d0ddaf4fcfe7aacc78cb366d35c488f4554c38352cb023ccacbb788a93399dcf4b9722e99bab53df1a0098f76c
+  data.tar.gz: 9d40620088768d93ffba95d18d501a54f9dc70622cbadf88525805c23342476d41e6127c552459b3ae1aa1bb18b7c845a4f55274c7089cd363ffed1d6af5643d

data/README.md

@@ -1,4 +1,4 @@
-# spid-rails 0.1.1
+# spid-rails 0.1.2
 Autenticazione SPID per Ruby on Rails.  
 Questa gemma si appoggia alla gemma [ruby-saml](https://github.com/onelogin/ruby-saml).
 
@@ -18,7 +18,7 @@ repository: https://github.com/rubynetti/rubynetti-rails
 All'interno del Gemfile indicare questa gemma:
 
 ```ruby
-gem 'spid-rails', require: 'spid_rails'
+gem 'spid-rails'
 ```
 
 Eseguire
@@ -38,7 +38,7 @@ Il metadata generato può essere utilizzato per farsi accreditare e in seguito d
 Per creare il file di configurazione:
 
 ```bash
-$ rails g spid_rails:config
+$ rails g spid:rails:config
 ```
 
 Il file viene aggiunto agli initializer dell'applicazione e permette il settaggio personalizzato del mount-point dell'engine e i relativi end-point per le procedure Spid di login, logout e visualizzazione del metadata del Service Provider.
@@ -46,11 +46,11 @@ Il file viene aggiunto agli initializer dell'applicazione e permette il settaggi
 Le restanti impostazioni permettono di configurare il percorso di sistema dove reperire la coppia chiave privata/certificato e il livello di crittografia per l'eventuale signature.
 
 ```ruby
-# config/initializers/spid_rails.rb
+# config/initializers/spid-rails.rb
 
 # Impostazioni di default dello Spid Engine
 
-SpidRails.tap do |config|
+Spid::Rails.tap do |config|
 
   # Mount point di Spid sull'applicazione
   # default: 'spid'

data/Rakefile

@@ -8,7 +8,7 @@ require 'rdoc/task'
 
 RDoc::Task.new(:rdoc) do |rdoc|
   rdoc.rdoc_dir = 'rdoc'
-  rdoc.title    = 'SpidRails'
+  rdoc.title    = 'Spid::Rails'
   rdoc.options << '--line-numbers'
   rdoc.rdoc_files.include('README.md')
   rdoc.rdoc_files.include('lib/**/*.rb')

data/app/assets/config/spid-rails_manifest.js

@@ -0,0 +1,2 @@
+//= link_directory ../javascripts/spid-rails .js
+//= link_directory ../stylesheets/spid-rails .css

data/app/controllers/spid/rails/application_controller.rb

@@ -0,0 +1,9 @@
+module Spid
+  module Rails
+
+    class ApplicationController < ActionController::Base
+      protect_from_forgery with: :exception
+    end
+    
+  end
+end

data/app/controllers/spid/rails/metadata_controller.rb

@@ -0,0 +1,17 @@
+require_dependency "spid/rails/application_controller"
+
+# Metadata del Service Provider
+module Spid
+  module Rails
+
+    class MetadataController < ApplicationController
+
+      def show
+        metadata = Metadata.create(host: main_app.root_url)
+        render xml: metadata.to_xml
+      end
+
+    end
+
+  end
+end

data/app/controllers/spid/rails/single_logout_operations_controller.rb

@@ -0,0 +1,45 @@
+require_dependency "spid/rails/application_controller"
+
+module Spid
+  module Rails
+
+    class SingleLogoutOperationsController < ApplicationController
+      skip_before_action :verify_authenticity_token, only: :create
+
+      def new
+        logout_request = SloRequest.new(slo_params)
+        redirect_to logout_request.to_saml
+        session[:spid_slo_id] = logout_request.uuid
+      end
+
+      def create
+        logout_response = SloResponse.new(params[:SAMLResponse],
+                                                    session[:spid_slo_id],
+                                                    slo_params)
+        # TODO: approfondire validazione logout
+        destroy_spid_session
+        redirect_to main_app.root_path, notice: 'Logout utente eseguito con successo'
+      end
+
+      private
+
+      def slo_params
+        {
+          host: main_app.root_url,
+          idp: session[:sso_params]['idp'],
+          session_index: session[:spid_index]
+        }
+      end
+
+      def destroy_spid_session
+        session[:sso_params] = nil
+        session[:spid_index] = nil
+        session[:spid_slo_id] = nil
+        session[:spid_relay_state] = nil
+        session[:spid_login_time] = nil
+      end
+
+    end
+
+  end
+end

data/app/controllers/spid/rails/single_sign_ons_controller.rb

@@ -0,0 +1,38 @@
+require_dependency "spid/rails/application_controller"
+
+module Spid
+  module Rails
+
+    class SingleSignOnsController < ApplicationController
+      skip_before_action :verify_authenticity_token, only: :create
+
+      def new
+        request = SsoRequest.new(sso_params)
+        redirect_to request.to_saml
+        session[:sso_params] = sso_params
+      end
+
+      def create
+        response = SsoResponse.new(params[:SAMLResponse], session[:sso_params])
+        if response.valid?
+          session[:spid_index] = response.session_index
+          session[:spid_login_time] = Time.now
+          redirect_to session[:relay_state] || main_app.root_path, notice: 'Utente autenticato con successo'
+        else
+          redirect_to main_app.root_path, notice: 'Autenticazione fallita'
+        end
+      end
+
+      private
+
+      def sso_params
+        sso_params = params.require(:sso).permit(:idp, :spid_level, bindings: [])
+        sso_params[:host] = main_app.root_url
+        sso_params[:relay_state] = session[:spid_relay_state] || main_app.root_url
+        sso_params
+      end
+
+    end
+
+  end
+end

data/app/helpers/spid/rails/application_helper.rb

@@ -0,0 +1,8 @@
+module Spid
+  module Rails
+    
+    module ApplicationHelper
+    end
+
+  end
+end

data/app/jobs/spid/rails/application_job.rb

@@ -0,0 +1,8 @@
+module Spid
+  module Rails
+    
+    class ApplicationJob < ActiveJob::Base
+    end
+
+  end
+end

data/app/mailers/spid/rails/application_mailer.rb

@@ -0,0 +1,10 @@
+module Spid
+  module Rails
+    
+    class ApplicationMailer < ActionMailer::Base
+      default from: 'from@example.com'
+      layout 'mailer'
+    end
+
+  end
+end

data/app/models/{spid_rails → spid}/certificate.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Certificate
 

data/app/models/{spid_rails → spid}/idp.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Idp
 
@@ -8,7 +8,7 @@ module SpidRails
         'aruba'      => 'https://loginspid.aruba.it/metadata',
         'infocert'   => 'https://identity.infocert.it/metadata/metadata.xml',
         'namirial'   => 'https://idp.namirialtsp.com/idp/metadata',
-        'poste'      => 'http://posteid.poste.it/jod-fs/metadata/metadata.xml',
+        'poste'      => 'https://posteid.poste.it/jod-fs/metadata/metadata.xml',
         'poste_test' => 'http://spidposte.test.poste.it/jod-fs/metadata/idp.xml',
         'spiditalia' => 'https://spid.register.it/login/metadata',
         'sielte'     => 'https://identity.sieltecloud.it/simplesaml/metadata.xml',

data/app/models/{spid_rails → spid}/metadata.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Metadata
     attr_accessor :settings
@@ -9,7 +9,7 @@ module SpidRails
     end
 
     def initialize spid_params
-      spid_settings = SpidRails::Settings::Metadata.new(spid_params)
+      spid_settings = Settings::Metadata.new(spid_params)
       @settings = spid_settings.to_hash
     end
 
@@ -25,14 +25,14 @@ module SpidRails
     end
 
     def validate_signature_encryption
-      signature_algorithms = SpidRails::Certificate.signature_algorithms
+      signature_algorithms = Certificate.signature_algorithms
       if signature_algorithms.exclude?(settings[:security][:signature_method])
         raise 'Signature deve essere presente (impostare encryption sha a 256, 384, 512)'
       end
     end
 
     def validate_digest_encryption
-      digest_algorithms = SpidRails::Certificate.digest_algorithms
+      digest_algorithms = Certificate.digest_algorithms
       if digest_algorithms.exclude?(settings[:security][:digest_method])
         raise 'Signature deve essere presente (impostare encryption sha a 256, 384, 512)'
       end

data/app/models/spid/rails/application_record.rb

@@ -0,0 +1,9 @@
+module Spid
+  module Rails
+
+    class ApplicationRecord < ActiveRecord::Base
+      self.abstract_class = true
+    end
+
+  end
+end

data/app/models/{spid_rails → spid}/settings/metadata.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Settings::Metadata < Settings
 
@@ -7,5 +7,5 @@ module SpidRails
     end
 
   end
-  
+
 end

data/app/models/{spid_rails → spid}/settings/slo.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Settings::Slo < Settings
 

data/app/models/{spid_rails → spid}/settings/sso.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Settings::Sso < Settings
 

data/app/models/{spid_rails → spid}/settings.rb

@@ -1,4 +1,4 @@
-module SpidRails
+module Spid
 
   class Settings
 
@@ -27,11 +27,11 @@ module SpidRails
 
 
     def initialize spid_params
-      @metadata_path  = SpidRails.app_metadata_path
-      @sso_path       = SpidRails.app_sso_path
-      @slo_path       = SpidRails.app_slo_path
-      @keys_path      = SpidRails.keys_path
-      @sha            = SpidRails.sha
+      @metadata_path  = Spid::Rails.app_metadata_path
+      @sso_path       = Spid::Rails.app_sso_path
+      @slo_path       = Spid::Rails.app_slo_path
+      @keys_path      = Spid::Rails.keys_path
+      @sha            = Spid::Rails.sha
       @bindings       = [:redirect]
       @spid_level     = 1
       spid_params.each do |k, v|
@@ -40,12 +40,13 @@ module SpidRails
     end
 
     def security_attributes
-      dig_alg = SpidRails::Certificate.digest_algorithm(@sha)
-      sig_alg = SpidRails::Certificate.signature_algorithm(@sha)
+      dig_alg = Certificate.digest_algorithm(@sha)
+      sig_alg = Certificate.signature_algorithm(@sha)
       {
         metadata_signed: true,
         digest_method: dig_alg,
         signature_method: sig_alg,
+        authn_requests_signed: true,
         want_assertions_signed: true
       }
     end
@@ -56,8 +57,8 @@ module SpidRails
         issuer: host + metadata_path,
         assertion_consumer_service_url: host + sso_path,
         single_logout_service_url: host + slo_path,
-        private_key: File.read("#{Rails.root}/#{keys_path}/private_key.pem"),
-        certificate: File.read("#{Rails.root}/#{keys_path}/certificate.pem"),
+        private_key: File.read("#{::Rails.root}/#{keys_path}/private_key.pem"),
+        certificate: File.read("#{::Rails.root}/#{keys_path}/certificate.pem"),
         security: security_attributes
       }
     end

data/app/models/{spid_rails → spid}/slo_request.rb

@@ -1,9 +1,9 @@
-module SpidRails
+module Spid
 
   class SloRequest
 
     def initialize slo_params
-      spid_settings = SpidRails::Settings::Slo.new(slo_params)
+      spid_settings = Settings::Slo.new(slo_params)
       @settings = spid_settings.to_hash
       @request = OneLogin::RubySaml::Logoutrequest.new
     end

data/app/models/{spid_rails → spid}/slo_response.rb

@@ -1,9 +1,9 @@
-module SpidRails
+module Spid
 
   class SloResponse
 
     def initialize saml_response, slo_id, slo_params
-      spid_settings = SpidRails::Settings::Slo.new(slo_params)
+      spid_settings = Settings::Slo.new(slo_params)
       settings = OneLogin::RubySaml::Settings.new(spid_settings.to_hash)
       @response = OneLogin::RubySaml::Logoutresponse.new(saml_response,
                                                          settings,

data/app/models/{spid_rails → spid}/sso_request.rb

@@ -1,11 +1,11 @@
-module SpidRails
+module Spid
 
   class SsoRequest
 
     attr_accessor :settings
 
     def initialize spid_params
-      spid_settings = SpidRails::Settings::Sso.new(spid_params)
+      spid_settings = Settings::Sso.new(spid_params)
       @settings = spid_settings.to_hash
     end
 
@@ -19,7 +19,7 @@ module SpidRails
       if settings[:authn_context_comparison] != 'minimum'
         raise "AuthnContextComparison deve essere settato a 'minimum' (impostare authn_context_comparison a 'minimum')"
       end
-      if settings[:protocol_binding] != SpidRails::Settings.saml_bindings[:post]
+      if settings[:protocol_binding] != Settings.saml_bindings[:post]
         raise "Issuer deve contenere l'attributo ProtocolBinding con binding POST (impostare protocl_binding a ':post')"
       end
     end

data/app/models/{spid_rails → spid}/sso_response.rb

@@ -1,10 +1,10 @@
-module SpidRails
+module Spid
 
   class SsoResponse
 
     def initialize saml_response, sso_params
       response = OneLogin::RubySaml::Response.new(saml_response)
-      settings = SpidRails::Settings::Sso.new(sso_params)
+      settings = Settings::Sso.new(sso_params)
       saml_settings = OneLogin::RubySaml::Settings.new(settings.to_hash)
       response.settings = saml_settings
       @response = response

data/app/views/layouts/{spid_rails → spid-rails}/application.html.erb

@@ -2,8 +2,8 @@
 <html>
 <head>
   <title>Spid rails</title>
-  <%= stylesheet_link_tag    "spid_rails/application", media: "all" %>
-  <%= javascript_include_tag "spid_rails/application" %>
+  <%= stylesheet_link_tag    "spid-rails/application", media: "all" %>
+  <%= javascript_include_tag "spid-rails/application" %>
   <%= csrf_meta_tags %>
 </head>
 <body>

data/config/routes.rb

@@ -1,12 +1,12 @@
 Rails.application.routes.draw do
-  mount SpidRails::Engine, at: SpidRails.mount_point
+  mount Spid::Rails::Engine, at: Spid::Rails.mount_point
 end
 
-SpidRails::Engine.routes.draw do
+Spid::Rails::Engine.routes.draw do
   resource :metadata, only: :show,
-            path: SpidRails.metadata_path
+            path: Spid::Rails.metadata_path
   resource :sso, only: [:new, :create], controller: :single_sign_ons,
-            path: SpidRails.sso_path
+            path: Spid::Rails.sso_path
   resource :slo, only: [:new, :create], controller: :single_logout_operations,
-            path: SpidRails.slo_path
+            path: Spid::Rails.slo_path
 end

data/lib/generators/spid/rails/config_generator.rb

@@ -0,0 +1,21 @@
+module Spid
+  module Rails
+
+    module Generators
+
+      class ConfigGenerator < ::Rails::Generators::Base
+
+        source_root File.expand_path("../templates", __FILE__)
+
+        desc "Crea il file di configurazione di spid (config/initializers/spid-rails.rb)."
+
+        def create_initializer_file
+          template "spid-rails.rb", "./config/initializers/spid-rails.rb"
+        end
+
+      end
+
+    end
+
+  end
+end

data/lib/generators/spid/rails/keys_generator.rb

@@ -0,0 +1,45 @@
+module Spid
+  module Rails
+
+    module Generators
+
+      class KeysGenerator < ::Rails::Generators::Base
+        class_option :cn, type: :string, default: 'spid-rails-test', desc: 'Common name for the X509 certificate'
+        class_option :size, type: :numeric, default: 1024, desc: 'RSA key bit size'
+        class_option :digest, type: :string, default: 'SHA256', desc: 'Digest algorithm for signing the certificate'
+        class_option :validity, type: :numeric, default: 1, desc: "Certificate validity expressed in months"
+
+        desc "Description:\n" +
+            "  Generate a RSA key and use it to generate a self-signed certificate in the keys path\n" +
+            "  WARNING: this generator is ment to be used only for testing purpose."
+
+        def create_key
+          @key = OpenSSL::PKey::RSA.new options[:size]
+        end
+
+        def create_certificate
+          name = OpenSSL::X509::Name.parse "CN=#{options[:cn]}"
+          sha_alg = OpenSSL::Digest.const_get(options[:digest]).new
+          @cert = OpenSSL::X509::Certificate.new
+          @cert.version = 2
+          @cert.serial = 0
+          @cert.not_before = Time.now
+          @cert.not_after = @cert.not_before + options[:validity].months
+          @cert.public_key = @key.public_key
+          @cert.subject = name
+          @cert.issuer = name
+          @cert.sign @key, sha_alg
+        end
+
+        def write_keys
+          path = './' + Spid::Rails.keys_path
+          create_file path + 'private_key.pem', @key.to_pem
+          create_file path + 'certificate.pem', @cert.to_pem
+        end
+
+      end
+
+    end
+
+  end
+end

data/lib/generators/{spid_rails/templates/spid_rails.rb → spid/rails/templates/spid-rails.rb}

@@ -1,6 +1,6 @@
 # Impostazioni di default dello Spid Engine
 
-SpidRails.tap do |config|
+Spid::Rails.tap do |config|
 
   # Mount point di Spid sull'applicazione
   # default: 'spid'

data/lib/spid-rails/engine.rb

@@ -0,0 +1,12 @@
+require 'onelogin/ruby-saml'
+require 'spid-rails/onelogin/rubysaml/authrequest'
+
+module Spid
+  module Rails
+
+    class Engine < ::Rails::Engine
+      isolate_namespace Spid::Rails
+    end
+
+  end
+end

data/lib/spid-rails/version.rb

@@ -0,0 +1,7 @@
+module Spid
+  module Rails
+
+    VERSION = '0.1.2'
+
+  end
+end

data/lib/spid-rails.rb

@@ -0,0 +1,44 @@
+require "spid-rails/engine"
+
+module Spid
+  module Rails
+
+    # Mount point di Spid sull'applicazione
+    mattr_accessor :mount_point
+    @@mount_point = 'spid'
+
+    # Url alla quale è disponibile il metadata del provider
+    mattr_accessor :metadata_path
+    @@metadata_path = 'metadata'
+
+    # Url alla quale ricevere le risposte di autenticazione Saml
+    mattr_accessor :sso_path
+    @@sso_path = 'sso'
+
+    # Url alla quale ricevere le risposte di logout Saml
+    mattr_accessor :slo_path
+    @@slo_path = 'slo'
+
+    # Percorso relativo alla root dell'app
+    # al quale reperire la coppia chiave privata - certificato
+    mattr_accessor :keys_path
+    @@keys_path = 'lib/.keys/'
+
+    # Livello di crittografia SHA per la generazione delle signature
+    mattr_accessor :sha
+    @@sha = 256
+
+    def self.app_metadata_path
+      "#{mount_point}/#{@@metadata_path}"
+    end
+
+    def self.app_sso_path
+      "#{mount_point}/#{@@sso_path}"
+    end
+
+    def self.app_slo_path
+      "#{mount_point}/#{@@slo_path}"
+    end
+
+  end
+end

data/lib/tasks/{spid_rails_tasks.rake → spid-rails_tasks.rake}

@@ -1,4 +1,4 @@
 # desc "Explaining what the task does"
-# task :spid_rails do
+# task :spid-rails do
 #   # Task goes here
 # end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spid-rails
 version: !ruby/object:Gem::Version
-  version: '0.1'
+  version: 0.1.2
 platform: ruby
 authors:
 - Alessandro Descovi, Giacomo Bertoldi
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-12-13 00:00:00.000000000 Z
+date: 2018-04-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -44,20 +44,40 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 1.5.0
+- !ruby/object:Gem::Dependency
+  name: rails-html-sanitizer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.4
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.3'
 description: Soluzione per poter effettuare il login tramite SPID
 email:
 - descovi@gmail.com, bertoldi.giacomo@gmail.com
@@ -68,39 +88,40 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
-- app/assets/config/spid_rails_manifest.js
-- app/assets/javascripts/spid_rails/application.js
-- app/assets/javascripts/spid_rails/metadata.js
-- app/assets/stylesheets/spid_rails/application.css
-- app/assets/stylesheets/spid_rails/metadata.css
-- app/controllers/spid_rails/application_controller.rb
-- app/controllers/spid_rails/metadata_controller.rb
-- app/controllers/spid_rails/single_logout_operations_controller.rb
-- app/controllers/spid_rails/single_sign_ons_controller.rb
-- app/helpers/spid_rails/application_helper.rb
-- app/jobs/spid_rails/application_job.rb
-- app/mailers/spid_rails/application_mailer.rb
-- app/models/spid_rails/application_record.rb
-- app/models/spid_rails/certificate.rb
-- app/models/spid_rails/idp.rb
-- app/models/spid_rails/metadata.rb
-- app/models/spid_rails/settings.rb
-- app/models/spid_rails/settings/metadata.rb
-- app/models/spid_rails/settings/slo.rb
-- app/models/spid_rails/settings/sso.rb
-- app/models/spid_rails/slo_request.rb
-- app/models/spid_rails/slo_response.rb
-- app/models/spid_rails/sso_request.rb
-- app/models/spid_rails/sso_response.rb
-- app/views/layouts/spid_rails/application.html.erb
+- app/assets/config/spid-rails_manifest.js
+- app/assets/javascripts/spid-rails/application.js
+- app/assets/javascripts/spid-rails/metadata.js
+- app/assets/stylesheets/spid-rails/application.css
+- app/assets/stylesheets/spid-rails/metadata.css
+- app/controllers/spid/rails/application_controller.rb
+- app/controllers/spid/rails/metadata_controller.rb
+- app/controllers/spid/rails/single_logout_operations_controller.rb
+- app/controllers/spid/rails/single_sign_ons_controller.rb
+- app/helpers/spid/rails/application_helper.rb
+- app/jobs/spid/rails/application_job.rb
+- app/mailers/spid/rails/application_mailer.rb
+- app/models/spid/certificate.rb
+- app/models/spid/idp.rb
+- app/models/spid/metadata.rb
+- app/models/spid/rails/application_record.rb
+- app/models/spid/settings.rb
+- app/models/spid/settings/metadata.rb
+- app/models/spid/settings/slo.rb
+- app/models/spid/settings/sso.rb
+- app/models/spid/slo_request.rb
+- app/models/spid/slo_response.rb
+- app/models/spid/sso_request.rb
+- app/models/spid/sso_response.rb
+- app/views/layouts/spid-rails/application.html.erb
 - config/routes.rb
-- lib/generators/spid_rails/config_generator.rb
-- lib/generators/spid_rails/templates/spid_rails.rb
-- lib/spid_rails.rb
-- lib/spid_rails/engine.rb
-- lib/spid_rails/onelogin/rubysaml/authrequest.rb
-- lib/spid_rails/version.rb
-- lib/tasks/spid_rails_tasks.rake
+- lib/generators/spid/rails/config_generator.rb
+- lib/generators/spid/rails/keys_generator.rb
+- lib/generators/spid/rails/templates/spid-rails.rb
+- lib/spid-rails.rb
+- lib/spid-rails/engine.rb
+- lib/spid-rails/onelogin/rubysaml/authrequest.rb
+- lib/spid-rails/version.rb
+- lib/tasks/spid-rails_tasks.rake
 homepage: https://github.com/italia/spid-rails
 licenses:
 - MIT
@@ -121,8 +142,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.8
+rubygems_version: 2.5.2.1
 signing_key: 
 specification_version: 4
-summary: SPID, il Sistema Pubblico di Identità Digitale
+summary: SPID, il Sistema Pubblico di Identita' Digitale
 test_files: []

data/app/assets/config/spid_rails_manifest.js

@@ -1,2 +0,0 @@
-//= link_directory ../javascripts/spid_rails .js
-//= link_directory ../stylesheets/spid_rails .css

data/app/controllers/spid_rails/application_controller.rb

@@ -1,5 +0,0 @@
-module SpidRails
-  class ApplicationController < ActionController::Base
-    protect_from_forgery with: :exception
-  end
-end

data/app/controllers/spid_rails/metadata_controller.rb

@@ -1,15 +0,0 @@
-require_dependency "spid_rails/application_controller"
-
-# Metadata del Service Provider
-module SpidRails
-
-  class MetadataController < ApplicationController
-
-    def show
-      metadata = SpidRails::Metadata.create(host: main_app.root_url)
-      render xml: metadata.to_xml
-    end
-
-  end
-
-end

data/app/controllers/spid_rails/single_logout_operations_controller.rb

@@ -1,43 +0,0 @@
-require_dependency "spid_rails/application_controller"
-
-module SpidRails
-
-  class SingleLogoutOperationsController < ApplicationController
-    skip_before_action :verify_authenticity_token, only: :create
-
-    def new
-      logout_request = SpidRails::SloRequest.new(slo_params)
-      redirect_to logout_request.to_saml
-      session[:spid_slo_id] = logout_request.uuid
-    end
-
-    def create
-      logout_response = SpidRails::SloResponse.new(params[:SAMLResponse],
-                                                  session[:spid_slo_id],
-                                                  slo_params)
-      # TODO: approfondire validazione logout
-      destroy_spid_session
-      redirect_to main_app.root_path, notice: 'Logout utente eseguito con successo'
-    end
-
-    private
-
-    def slo_params
-      {
-        host: main_app.root_url,
-        idp: session[:sso_params]['idp'],
-        session_index: session[:spid_index]
-      }
-    end
-
-    def destroy_spid_session
-      session[:sso_params] = nil
-      session[:spid_index] = nil
-      session[:spid_slo_id] = nil
-      session[:spid_relay_state] = nil
-      session[:spid_login_time] = nil
-    end
-
-  end
-
-end

data/app/controllers/spid_rails/single_sign_ons_controller.rb

@@ -1,36 +0,0 @@
-require_dependency "spid_rails/application_controller"
-
-module SpidRails
-
-  class SingleSignOnsController < ApplicationController
-    skip_before_action :verify_authenticity_token, only: :create
-
-    def new
-      request = SpidRails::SsoRequest.new(sso_params)
-      redirect_to request.to_saml
-      session[:sso_params] = sso_params
-    end
-
-    def create
-      response = SpidRails::SsoResponse.new(params[:SAMLResponse], session[:sso_params])
-      if response.valid?
-        session[:spid_index] = response.session_index
-        session[:spid_login_time] = Time.now
-        redirect_to session[:relay_state] || main_app.root_path, notice: 'Utente autenticato con successo'
-      else
-        redirect_to main_app.root_path, notice: 'Autenticazione fallita'
-      end
-    end
-
-    private
-
-    def sso_params
-      sso_params = params.require(:sso).permit(:idp, :spid_level, bindings: [])
-      sso_params[:host] = main_app.root_url
-      sso_params[:relay_state] = session[:spid_relay_state] || main_app.root_url
-      sso_params
-    end
-
-  end
-
-end

data/app/helpers/spid_rails/application_helper.rb

@@ -1,4 +0,0 @@
-module SpidRails
-  module ApplicationHelper
-  end
-end

data/app/jobs/spid_rails/application_job.rb

@@ -1,4 +0,0 @@
-module SpidRails
-  class ApplicationJob < ActiveJob::Base
-  end
-end

data/app/mailers/spid_rails/application_mailer.rb

@@ -1,6 +0,0 @@
-module SpidRails
-  class ApplicationMailer < ActionMailer::Base
-    default from: 'from@example.com'
-    layout 'mailer'
-  end
-end

data/app/models/spid_rails/application_record.rb

@@ -1,5 +0,0 @@
-module SpidRails
-  class ApplicationRecord < ActiveRecord::Base
-    self.abstract_class = true
-  end
-end

data/lib/generators/spid_rails/config_generator.rb

@@ -1,18 +0,0 @@
-module SpidRails
-  module Generators
-
-    # Chiamato tramite rails g spid_rails:config
-    class ConfigGenerator < Rails::Generators::Base
-
-      source_root File.expand_path("../templates", __FILE__)
-
-      desc "Crea il file di configurazione di spid (config/initializers/rumby_saml.rb)."
-
-      def create_initializer_file
-        template "spid_rails.rb", "./config/initializers/spid_rails.rb"
-      end
-
-    end
-
-  end
-end

data/lib/spid_rails/engine.rb

@@ -1,8 +0,0 @@
-require 'onelogin/ruby-saml'
-require 'spid_rails/onelogin/rubysaml/authrequest'
-
-module SpidRails
-  class Engine < ::Rails::Engine
-    isolate_namespace SpidRails
-  end
-end

data/lib/spid_rails/version.rb

@@ -1,3 +0,0 @@
-module SpidRails
-  VERSION = '0.1'
-end

data/lib/spid_rails.rb

@@ -1,42 +0,0 @@
-require "spid_rails/engine"
-
-module SpidRails
-
-  # Mount point di Spid sull'applicazione
-  mattr_accessor :mount_point
-  @@mount_point = 'spid'
-
-  # Url alla quale è disponibile il metadata del provider
-  mattr_accessor :metadata_path
-  @@metadata_path = 'metadata'
-
-  # Url alla quale ricevere le risposte di autenticazione Saml
-  mattr_accessor :sso_path
-  @@sso_path = 'sso'
-
-  # Url alla quale ricevere le risposte di logout Saml
-  mattr_accessor :slo_path
-  @@slo_path = 'slo'
-
-  # Percorso relativo alla root dell'app
-  # al quale reperire la coppia chiave privata - certificato
-  mattr_accessor :keys_path
-  @@keys_path = 'lib/.keys/'
-
-  # Livello di crittografia SHA per la generazione delle signature
-  mattr_accessor :sha
-  @@sha = 256
-
-  def self.app_metadata_path
-    "#{mount_point}/#{@@metadata_path}"
-  end
-
-  def self.app_sso_path
-    "#{mount_point}/#{@@sso_path}"
-  end
-
-  def self.app_slo_path
-    "#{mount_point}/#{@@slo_path}"
-  end
-
-end