NameIDAttribute.php

Go to the documentation of this file.

<?php


class sspmod_saml_Auth_Process_NameIDAttribute extends SimpleSAML_Auth_ProcessingFilter
{

    private $attribute;


    private $format;


    public function __construct($config, $reserved)
    {
        parent::__construct($config, $reserved);
        assert('is_array($config)');

        if (isset($config['attribute'])) {
            $this->attribute = (string) $config['attribute'];
        } else {
            $this->attribute = 'nameid';
        }

        if (isset($config['format'])) {
            $format = (string) $config['format'];
        } else {
            $format = '%I!%S!%V';
        }

        $this->format = self::parseFormat($format);
    }


    private static function parseFormat($format)
    {
        assert('is_string($format)');

        $ret = array();
        $pos = 0;
        while (($next = strpos($format, '%', $pos)) !== false) {
            $ret[] = substr($format, $pos, $next - $pos);

            $replacement = $format[$next + 1];
            switch ($replacement) {
                case 'F':
                    $ret[] = 'Format';
                    break;
                case 'I':
                    $ret[] = 'NameQualifier';
                    break;
                case 'S':
                    $ret[] = 'SPNameQualifier';
                    break;
                case 'V':
                    $ret[] = 'value';
                    break;
                case '%':
                    $ret[] = '%';
                    break;
                default:
                    throw new SimpleSAML_Error_Exception('NameIDAttribute: Invalid replacement: "%'.$replacement.'"');
            }

            $pos = $next + 2;
        }
        $ret[] = substr($format, $pos);

        return $ret;
    }


    public function process(&$state)
    {
        assert('is_array($state)');
        assert('isset($state["Source"]["entityid"])');
        assert('isset($state["Destination"]["entityid"])');

        if (!isset($state['saml:sp:NameID'])) {
            return;
        }

        $rep = $state['saml:sp:NameID'];
        assert(isset($rep->value));

        $rep->{'%'} = '%';
        if (!isset($rep->Format)) {
            $rep->Format = \SAML2\Constants::NAMEID_UNSPECIFIED;
        }
        if (!isset($rep->NameQualifier)) {
            $rep->NameQualifier = $state['Source']['entityid'];
        }
        if (!isset($rep->SPNameQualifier)) {
            $rep->SPNameQualifier = $state['Destination']['entityid'];
        }

        $value = '';
        $isString = true;
        foreach ($this->format as $element) {
            if ($isString) {
                $value .= $element;
            } else {
                $value .= $rep->$element;
            }
            $isString = !$isString;
        }

        $state['Attributes'][$this->attribute] = array($value);
    }
}