SQLNameID.php

Go to the documentation of this file.

<?php

class sspmod_saml_IdP_SQLNameID  {

        private static function createTable(\SimpleSAML\Store\SQL $store) {

                if ($store->getTableVersion('saml_PersistentNameID') === 1) {
                        return;
                }

                $query = 'CREATE TABLE ' . $store->prefix . '_saml_PersistentNameID (
                        _idp VARCHAR(256) NOT NULL,
                        _sp VARCHAR(256) NOT NULL,
                        _user VARCHAR(256) NOT NULL,
                        _value VARCHAR(40) NOT NULL,
                        UNIQUE (_idp, _sp, _user)
                )';
                $store->pdo->exec($query);

                $query = 'CREATE INDEX ' . $store->prefix . '_saml_PersistentNameID_idp_sp ON '  . $store->prefix . '_saml_PersistentNameID (_idp, _sp)';
                $store->pdo->exec($query);

                $store->setTableVersion('saml_PersistentNameID', 1);
        }


        private static function getStore() {

                $store = \SimpleSAML\Store::getInstance();
                if (!($store instanceof \SimpleSAML\Store\SQL)) {
                        throw new SimpleSAML_Error_Exception('SQL NameID store requires SimpleSAMLphp to be configured with a SQL datastore.');
                }

                self::createTable($store);

                return $store;
        }


        public static function add($idpEntityId, $spEntityId, $user, $value) {
                assert('is_string($idpEntityId)');
                assert('is_string($spEntityId)');
                assert('is_string($user)');
                assert('is_string($value)');

                $store = self::getStore();

                $params = array(
                        '_idp' => $idpEntityId,
                        '_sp' => $spEntityId,
                        '_user' => $user,
                        '_value' => $value,
                );

                $query = 'INSERT INTO ' . $store->prefix . '_saml_PersistentNameID (_idp, _sp, _user, _value) VALUES(:_idp, :_sp, :_user, :_value)';
                $query = $store->pdo->prepare($query);
                $query->execute($params);
        }


        public static function get($idpEntityId, $spEntityId, $user) {
                assert('is_string($idpEntityId)');
                assert('is_string($spEntityId)');
                assert('is_string($user)');

                $store = self::getStore();

                $params = array(
                        '_idp' => $idpEntityId,
                        '_sp' => $spEntityId,
                        '_user' => $user,
                );

                $query = 'SELECT _value FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp AND _user = :_user';
                $query = $store->pdo->prepare($query);
                $query->execute($params);

                $row = $query->fetch(PDO::FETCH_ASSOC);
                if ($row === FALSE) {
                        // No NameID found
                        return NULL;
                }

                return $row['_value'];
        }


        public static function delete($idpEntityId, $spEntityId, $user) {
                assert('is_string($idpEntityId)');
                assert('is_string($spEntityId)');
                assert('is_string($user)');

                $store = self::getStore();

                $params = array(
                        '_idp' => $idpEntityId,
                        '_sp' => $spEntityId,
                        '_user' => $user,
                );

                $query = 'DELETE FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp AND _user = :_user';
                $query = $store->pdo->prepare($query);
                $query->execute($params);
        }


        public static function getIdentities($idpEntityId, $spEntityId) {
                assert('is_string($idpEntityId)');
                assert('is_string($spEntityId)');

                $store = self::getStore();

                $params = array(
                        '_idp' => $idpEntityId,
                        '_sp' => $spEntityId,
                );

                $query = 'SELECT _user, _value FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp';
                $query = $store->pdo->prepare($query);
                $query->execute($params);

                $res = array();
                while ( ($row = $query->fetch(PDO::FETCH_ASSOC)) !== FALSE) {
                        $res[$row['_user']] = $row['_value'];
                }

                return $res;
        }

}