diff options
author | Lukas Reschke <lukas@statuscode.ch> | 2017-08-01 12:30:15 +0300 |
---|---|---|
committer | Lukas Reschke <lukas@statuscode.ch> | 2017-08-01 12:30:15 +0300 |
commit | 2a3e46dc2f53d161293313d107c7cc0ffe5d4cc1 (patch) | |
tree | e82800d25f61399d5f65d12ce471e7987fce9ad1 /lib/SAMLSettings.php | |
parent | 8c7e37b8b8f7b616eae43605b81abcd8ad98df46 (diff) |
Proper casing of file
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to 'lib/SAMLSettings.php')
-rw-r--r-- | lib/SAMLSettings.php | 105 |
1 files changed, 105 insertions, 0 deletions
diff --git a/lib/SAMLSettings.php b/lib/SAMLSettings.php new file mode 100644 index 00000000..2d30ff9e --- /dev/null +++ b/lib/SAMLSettings.php @@ -0,0 +1,105 @@ +<?php +/** + * @copyright Copyright (c) 2016 Lukas Reschke <lukas@statuscode.ch> + * + * @license GNU AGPL version 3 or any later version + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + */ + +namespace OCA\User_SAML; + +use OCP\AppFramework\Http; +use OCP\IConfig; +use OCP\IURLGenerator; + +class SAMLSettings { + /** @var IURLGenerator */ + private $urlGenerator; + /** @var IConfig */ + private $config; + + /** + * @param IURLGenerator $urlGenerator + * @param IConfig $config + */ + public function __construct(IURLGenerator $urlGenerator, + IConfig $config) { + $this->urlGenerator = $urlGenerator; + $this->config = $config; + } + + public function getOneLoginSettingsArray() { + $settings = [ + 'strict' => true, + 'debug' => $this->config->getSystemValue('debug', false), + 'baseurl' => $this->urlGenerator->getAbsoluteURL('/'), + 'security' => [ + 'nameIdEncrypted' => ($this->config->getAppValue('user_saml', 'security-nameIdEncrypted', '0') === '1') ? true : false, + 'authnRequestsSigned' => ($this->config->getAppValue('user_saml', 'security-authnRequestsSigned', '0') === '1') ? true : false, + 'logoutRequestSigned' => ($this->config->getAppValue('user_saml', 'security-logoutRequestSigned', '0') === '1') ? true : false, + 'logoutResponseSigned' => ($this->config->getAppValue('user_saml', 'security-logoutResponseSigned', '0') === '1') ? true : false, + 'signMetadata' => ($this->config->getAppValue('user_saml', 'security-signMetadata', '0') === '1') ? true : false, + 'wantMessagesSigned' => ($this->config->getAppValue('user_saml', 'security-wantMessagesSigned', '0') === '1') ? true : false, + 'wantAssertionsSigned' => ($this->config->getAppValue('user_saml', 'security-wantAssertionsSigned', '0') === '1') ? true : false, + 'wantAssertionsEncrypted' => ($this->config->getAppValue('user_saml', 'security-wantAssertionsEncrypted', '0') === '1') ? true : false, + 'wantNameId' => ($this->config->getAppValue('user_saml', 'security-wantNameId', '0') === '1') ? true : false, + 'wantNameIdEncrypted' => ($this->config->getAppValue('user_saml', 'security-wantNameIdEncrypted', '0') === '1') ? true : false, + 'wantXMLValidation' => ($this->config->getAppValue('user_saml', 'security-wantXMLValidation', '0') === '1') ? true : false, + 'requestedAuthnContext' => false, + 'lowercaseUrlencoding' => ($this->config->getAppValue('user_saml', 'security-lowercaseUrlencoding', '0') === '1') ? true : false, + ], + 'sp' => [ + 'entityId' => $this->urlGenerator->linkToRouteAbsolute('user_saml.SAML.getMetadata'), + 'assertionConsumerService' => [ + 'url' => $this->urlGenerator->linkToRouteAbsolute('user_saml.SAML.assertionConsumerService'), + ], + ], + 'idp' => [ + 'entityId' => $this->config->getAppValue('user_saml', 'idp-entityId', ''), + 'singleSignOnService' => [ + 'url' => $this->config->getAppValue('user_saml', 'idp-singleSignOnService.url', ''), + ], + ], + ]; + + $spx509cert = $this->config->getAppValue('user_saml', 'sp-x509cert', ''); + $spxprivateKey = $this->config->getAppValue('user_saml', 'sp-privateKey', ''); + if($spx509cert !== '') { + $settings['sp']['x509cert'] = $spx509cert; + } + if($spxprivateKey !== '') { + $settings['sp']['privateKey'] = $spxprivateKey; + } + + $idpx509cert = $this->config->getAppValue('user_saml', 'idp-x509cert', ''); + if($idpx509cert !== '') { + $settings['idp']['x509cert'] = $idpx509cert; + } + + $slo = $this->config->getAppValue('user_saml', 'idp-singleLogoutService.url', ''); + if($slo !== '') { + $settings['idp']['singleLogoutService'] = [ + 'url' => $this->config->getAppValue('user_saml', 'idp-singleLogoutService.url', ''), + ]; + $settings['sp']['singleLogoutService'] = [ + 'url' => $this->urlGenerator->linkToRouteAbsolute('user_saml.SAML.singleLogoutService'), + ]; + } + + return $settings; + } +} + |