diff options
Diffstat (limited to 'lib/gitlab/auth/saml/config.rb')
| -rw-r--r-- | lib/gitlab/auth/saml/config.rb | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/lib/gitlab/auth/saml/config.rb b/lib/gitlab/auth/saml/config.rb index 7524d8b9f85..235c472d292 100644 --- a/lib/gitlab/auth/saml/config.rb +++ b/lib/gitlab/auth/saml/config.rb @@ -4,10 +4,39 @@ module Gitlab module Auth module Saml class Config + DEFAULT_NICKNAME_ATTRS = %w[username nickname].freeze + DEFAULT_NAME_ATTRS = %w[ + http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name + http://schemas.microsoft.com/ws/2008/06/identity/claims/name + ].freeze + DEFAULT_EMAIL_ATTRS = %w[ + http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress + http://schemas.microsoft.com/ws/2008/06/identity/claims/emailaddress + ].freeze + DEFAULT_FIRST_NAME_ATTRS = %w[ + http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname + http://schemas.microsoft.com/ws/2008/06/identity/claims/givenname + ].freeze + DEFAULT_LAST_NAME_ATTRS = %w[ + http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname + http://schemas.microsoft.com/ws/2008/06/identity/claims/surname + ].freeze + class << self def enabled? ::AuthHelper.saml_providers.any? end + + def default_attribute_statements + defaults = OmniAuth::Strategies::SAML.default_options[:attribute_statements].to_hash.deep_symbolize_keys + defaults[:nickname] = DEFAULT_NICKNAME_ATTRS.dup + defaults[:name].concat(DEFAULT_NAME_ATTRS) + defaults[:email].concat(DEFAULT_EMAIL_ATTRS) + defaults[:first_name].concat(DEFAULT_FIRST_NAME_ATTRS) + defaults[:last_name].concat(DEFAULT_LAST_NAME_ATTRS) + + defaults + end end DEFAULT_PROVIDER_NAME = 'saml' |