Module.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

namespace ILIAS\Saml;

use SimpleSAML\Utils\Auth;
use SimpleSAML\Configuration;
use ilSamlAuthFactory;
use SimpleSAML\Module as SimpleSamlModule;
use ILIAS\Filesystem\Stream\Streams;
use ilSession;

class Module
{
    public static function run(): void
    {
        (new ilSamlAuthFactory())->auth();
        if (preg_match('@^/saml/sp/saml2-logout.php/@', $_SERVER['PATH_INFO'])) {
            global $DIC;
            ilSession::setClosingContext(ilSession::SESSION_CLOSE_USER);
            $DIC['ilAuthSession']->logout();
            $DIC['ilAppEventHandler']->raise('components/ILIAS/Authentication', 'afterLogout', [
                'username' => $DIC->user()->getLogin(),
            ]);
        }
        SimpleSamlModule::process()->send();
    }

    public static function metadata(): void
    {
        $auth = (new ilSamlAuthFactory())->auth();
        $config = Configuration::getInstance();
        if ($config->getOptionalBoolean('admin.protectmetadata', false)) {
            $admin = new Auth();
            $admin->requireAdmin();
        }

        $xml = (new Metadata(new DefaultSimpleSamlFactory()))->buildXML($auth);
        self::sendXMLString($xml);
    }

    private static function sendXMLString(string $xml_string): void
    {
        global $DIC;
        $http = $DIC->http();

        $response = $http->response()
                         ->withHeader('Content-Type', 'application/xml')
                         ->withBody(Streams::ofString($xml_string));

        $http->saveResponse($response);
        $http->sendResponse();
        $http->close();
    }
}