TraditionalLogoutHandler.php

Go to the documentation of this file.

<?php
 
namespace SimpleSAML\IdP;
 
use SimpleSAML\Logger;
use SimpleSAML\Utils\HTTP;
 
 
class TraditionalLogoutHandler implements LogoutHandlerInterface
{
 
    private $idp;
 
 
    public function __construct(\SimpleSAML_IdP $idp)
    {
        $this->idp = $idp;
    }
 
 
    private function logoutNextSP(array &$state)
    {
        $association = array_pop($state['core:LogoutTraditional:Remaining']);
        if ($association === null) {
            $this->idp->finishLogout($state);
        }
 
        $relayState = \SimpleSAML_Auth_State::saveState($state, 'core:LogoutTraditional', true);
 
        $id = $association['id'];
        Logger::info('Logging out of '.var_export($id, true).'.');
 
        try {
            $idp = \SimpleSAML_IdP::getByState($association);
            $url = call_user_func(array($association['Handler'], 'getLogoutURL'), $idp, $association, $relayState);
            HTTP::redirectTrustedURL($url);
        } catch (\Exception $e) {
            Logger::warning('Unable to initialize logout to '.var_export($id, true).'.');
            $this->idp->terminateAssociation($id);
            $state['core:Failed'] = true;
 
            // Try the next SP
            $this->logoutNextSP($state);
            assert('FALSE');
        }
    }
 
 
    public function startLogout(array &$state, $assocId)
    {
        $state['core:LogoutTraditional:Remaining'] = $this->idp->getAssociations();
 
        self::logoutNextSP($state);
    }
 
 
    public function onResponse($assocId, $relayState, \SimpleSAML_Error_Exception $error = null)
    {
        assert('is_string($assocId)');
        assert('is_string($relayState) || is_null($relayState)');
 
        if ($relayState === null) {
            throw new \SimpleSAML_Error_Exception('RelayState lost during logout.');
        }
 
        $state = \SimpleSAML_Auth_State::loadState($relayState, 'core:LogoutTraditional');
 
        if ($error === null) {
            Logger::info('Logged out of '.var_export($assocId, true).'.');
            $this->idp->terminateAssociation($assocId);
        } else {
            Logger::warning('Error received from '.var_export($assocId, true).' during logout:');
            $error->logWarning();
            $state['core:Failed'] = true;
        }
 
        self::logoutNextSP($state);
    }
}