spid 0.7.0 → 0.8.0

data/lib/spid/slo.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+require "spid/slo/request"
+require "spid/slo/response"
+require "spid/slo/settings"
+
+module Spid
+  module Slo # :nodoc:
+  end
+end

data/lib/spid/slo/request.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+require "spid/logout_request"
+require "onelogin/ruby-saml/settings"
+
+module Spid
+  module Slo
+    class Request # :nodoc:
+      attr_reader :idp_name
+      attr_reader :session_index
+
+      def initialize(idp_name:, session_index:)
+        @idp_name = idp_name
+        @session_index = session_index
+      end
+
+      def to_saml
+        logout_request.create(saml_settings)
+      end
+
+      def saml_settings
+        slo_settings.saml_settings
+      end
+
+      def slo_settings
+        Settings.new(
+          service_provider: service_provider,
+          identity_provider: identity_provider,
+          session_index: session_index
+        )
+      end
+
+      def identity_provider
+        @identity_provider ||=
+          IdentityProviderManager.find_by_name(idp_name)
+      end
+
+      def service_provider
+        @service_provider ||=
+          Spid.configuration.service_provider
+      end
+
+      private
+
+      def logout_request
+        LogoutRequest.new
+      end
+    end
+  end
+end

data/lib/spid/slo/response.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+require "onelogin/ruby-saml/logoutresponse"
+
+module Spid
+  module Slo
+    class Response # :nodoc:
+      attr_reader :body
+      attr_reader :session_index
+      attr_reader :matches_request_id
+
+      def initialize(body:, session_index:, matches_request_id:)
+        @body = body
+        @session_index = session_index
+        @matches_request_id = matches_request_id
+      end
+
+      def valid?
+        validated_saml_response.validate
+      end
+
+      def errors
+        validated_saml_response.errors
+      end
+
+      def saml_settings
+        slo_settings.saml_settings
+      end
+
+      def slo_settings
+        Settings.new(
+          service_provider: service_provider,
+          identity_provider: identity_provider,
+          session_index: session_index
+        )
+      end
+
+      def identity_provider
+        @identity_provider ||=
+          IdentityProviderManager.find_by_entity(issuer)
+      end
+
+      def service_provider
+        @service_provider ||=
+          Spid.configuration.service_provider
+      end
+
+      def issuer
+        saml_response.issuer.strip
+      end
+
+      private
+
+      def saml_response
+        ::OneLogin::RubySaml::Logoutresponse.new(
+          body,
+          nil,
+          matches_request_id: matches_request_id
+        )
+      end
+
+      def validated_saml_response
+        @validated_saml_response ||=
+          begin
+            response = saml_response
+            response.settings = saml_settings
+            response
+          end
+      end
+    end
+  end
+end

data/lib/spid/slo/settings.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require "onelogin/ruby-saml/settings"
+
+module Spid
+  module Slo
+    class Settings # :nodoc:
+      attr_reader :service_provider,
+                  :identity_provider,
+                  :session_index
+
+      def initialize(
+            service_provider:,
+            identity_provider:,
+            session_index:
+          )
+        @service_provider = service_provider
+        @identity_provider = identity_provider
+        @session_index = session_index
+      end
+
+      def saml_settings
+        ::OneLogin::RubySaml::Settings.new(slo_attributes)
+      end
+
+      def slo_attributes
+        [
+          service_provider.slo_attributes,
+          identity_provider.slo_attributes,
+          inner_slo_attributes
+        ].inject(:merge)
+      end
+
+      def inner_slo_attributes
+        {
+          name_identifier_value: generated_name_identifier_value,
+          name_identifier_format: name_identifier_format_value,
+          sessionindex: session_index
+        }
+      end
+
+      private
+
+      def generated_name_identifier_value
+        ::OneLogin::RubySaml::Utils.uuid
+      end
+
+      def name_identifier_format_value
+        "urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
+      end
+    end
+  end
+end

data/lib/spid/sso.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+require "spid/sso/request"
+require "spid/sso/response"
+require "spid/sso/settings"
+
+module Spid
+  module Sso # :nodoc:
+  end
+end

data/lib/spid/sso/request.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require "spid/authn_request"
+require "onelogin/ruby-saml/settings"
+
+module Spid
+  module Sso
+    class Request # :nodoc:
+      attr_reader :idp_name
+      attr_reader :authn_context
+      attr_reader :authn_context_comparison
+
+      def initialize(idp_name:, authn_context:, authn_context_comparison:)
+        @idp_name = idp_name
+        @authn_context = authn_context
+        @authn_context_comparison = authn_context_comparison
+      end
+
+      def to_saml
+        authn_request.create(saml_settings)
+      end
+
+      def saml_settings
+        sso_settings.saml_settings
+      end
+
+      def sso_settings
+        Settings.new(
+          service_provider: service_provider,
+          identity_provider: identity_provider,
+          authn_context: authn_context,
+          authn_context_comparison: authn_context_comparison
+        )
+      end
+
+      def identity_provider
+        @identity_provider ||=
+          IdentityProviderManager.find_by_name(idp_name)
+      end
+
+      def service_provider
+        @service_provider ||=
+          Spid.configuration.service_provider
+      end
+
+      private
+
+      def authn_request
+        AuthnRequest.new
+      end
+    end
+  end
+end

data/lib/spid/sso/response.rb

@@ -0,0 +1,80 @@
+# frozen_string_literal: true
+
+require "onelogin/ruby-saml/response"
+require "active_support/inflector/methods"
+
+module Spid
+  module Sso
+    class Response # :nodoc:
+      attr_reader :body
+
+      def initialize(body:)
+        @body = body
+      end
+
+      def valid?
+        validated_saml_response.is_valid?
+      end
+
+      def saml_settings
+        sso_settings.saml_settings
+      end
+
+      def sso_settings
+        Settings.new(
+          service_provider: service_provider,
+          identity_provider: identity_provider
+        )
+      end
+
+      def attributes
+        raw_attributes.each_with_object({}) do |(key, value), acc|
+          acc[normalize_key(key)] = value
+        end
+      end
+
+      def issuer
+        saml_response.issuers.first
+      end
+
+      def session_index
+        saml_response.sessionindex
+      end
+
+      def raw_attributes
+        saml_response.attributes.attributes
+      end
+
+      def identity_provider
+        @identity_provider ||=
+          IdentityProviderManager.find_by_entity(issuer)
+      end
+
+      def service_provider
+        @service_provider ||=
+          Spid.configuration.service_provider
+      end
+
+      private
+
+      def normalize_key(key)
+        ActiveSupport::Inflector.underscore(
+          key.to_s
+        ).to_sym
+      end
+
+      def saml_response
+        ::OneLogin::RubySaml::Response.new(body)
+      end
+
+      def validated_saml_response
+        @validated_saml_response ||=
+          begin
+            response = saml_response
+            response.settings = saml_settings
+            response
+          end
+      end
+    end
+  end
+end

data/lib/spid/sso/settings.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+module Spid
+  module Sso
+    class Settings # :nodoc:
+      attr_reader :service_provider,
+                  :identity_provider,
+                  :authn_context,
+                  :authn_context_comparison
+
+      # rubocop:disable Metrics/MethodLength
+      def initialize(
+            service_provider:,
+            identity_provider:,
+            authn_context: Spid::L1,
+            authn_context_comparison: Spid::EXACT_COMPARISON
+          )
+
+        unless AUTHN_CONTEXTS.include?(authn_context)
+          raise Spid::UnknownAuthnContextError,
+                "Provided authn_context is not valid:" \
+                " use one of #{AUTHN_CONTEXTS.join(', ')}"
+        end
+
+        unless COMPARISON_METHODS.include?(authn_context_comparison)
+          raise Spid::UnknownAuthnComparisonMethodError,
+                "Provided authn_context_comparison_method is not valid:" \
+                " use one of #{COMPARISON_METHODS.join(', ')}"
+        end
+
+        @service_provider = service_provider
+        @identity_provider = identity_provider
+        @authn_context = authn_context
+        @authn_context_comparison = authn_context_comparison
+      end
+      # rubocop:enable Metrics/MethodLength
+
+      def saml_settings
+        ::OneLogin::RubySaml::Settings.new(sso_attributes)
+      end
+
+      def sso_attributes
+        [
+          service_provider.sso_attributes,
+          identity_provider.sso_attributes,
+          inner_sso_attributes,
+          force_authn_attributes
+        ].inject(:merge)
+      end
+
+      def inner_sso_attributes
+        {
+          protocol_binding: protocol_binding_value,
+          name_identifier_format: name_identifier_format_value,
+          authn_context: authn_context,
+          authn_context_comparison: authn_context_comparison
+        }
+      end
+
+      def force_authn_attributes
+        return {} if authn_context <= Spid::L1
+        {
+          force_authn: true
+        }
+      end
+
+      private
+
+      def protocol_binding_value
+        "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
+      end
+
+      def name_identifier_format_value
+        "urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
+      end
+    end
+  end
+end

data/lib/spid/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Spid
-  VERSION = "0.7.0"
+  VERSION = "0.8.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spid
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - David Librera
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-07-18 00:00:00.000000000 Z
+date: 2018-07-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ruby-saml
@@ -278,18 +278,20 @@ files:
 - idp_metadata/.gitkeep
 - lib/spid.rb
 - lib/spid/authn_request.rb
-- lib/spid/identity_provider_configuration.rb
-- lib/spid/identity_providers.rb
-- lib/spid/idp_metadata.rb
+- lib/spid/configuration.rb
+- lib/spid/identity_provider.rb
+- lib/spid/identity_provider_manager.rb
 - lib/spid/logout_request.rb
 - lib/spid/metadata.rb
-- lib/spid/service_provider_configuration.rb
-- lib/spid/slo_request.rb
-- lib/spid/slo_response.rb
-- lib/spid/slo_settings.rb
-- lib/spid/sso_request.rb
-- lib/spid/sso_response.rb
-- lib/spid/sso_settings.rb
+- lib/spid/service_provider.rb
+- lib/spid/slo.rb
+- lib/spid/slo/request.rb
+- lib/spid/slo/response.rb
+- lib/spid/slo/settings.rb
+- lib/spid/sso.rb
+- lib/spid/sso/request.rb
+- lib/spid/sso/response.rb
+- lib/spid/sso/settings.rb
 - lib/spid/version.rb
 - spid.gemspec
 homepage: https://github.com/italia/spid-ruby