MultiAuth.php

Go to the documentation of this file.

<?php

class sspmod_multiauth_Auth_Source_MultiAuth extends SimpleSAML_Auth_Source {

        const AUTHID = 'sspmod_multiauth_Auth_Source_MultiAuth.AuthId';

        const STAGEID = 'sspmod_multiauth_Auth_Source_MultiAuth.StageId';

        const SOURCESID = 'sspmod_multiauth_Auth_Source_MultiAuth.SourceId';

        const SESSION_SOURCE = 'multiauth:selectedSource';

        private $sources;

        public function __construct($info, $config) {
                assert('is_array($info)');
                assert('is_array($config)');

                // Call the parent constructor first, as required by the interface
                parent::__construct($info, $config);

                if (!array_key_exists('sources', $config)) {
                        throw new Exception('The required "sources" config option was not found');
                }

                $globalConfiguration = SimpleSAML_Configuration::getInstance();
                $defaultLanguage = $globalConfiguration->getString('language.default', 'en');
                $authsources = SimpleSAML_Configuration::getConfig('authsources.php');
                $this->sources = array();
                foreach($config['sources'] as $source => $info) {

                        if (is_int($source)) { // Backwards compatibility 
                                $source = $info;
                                $info = array();
                        }

                        if (array_key_exists('text', $info)) {
                                $text = $info['text'];
                        } else {
                                $text = array($defaultLanguage => $source);
                        }

                        if (array_key_exists('css-class', $info)) {
                                $css_class = $info['css-class'];
                        } else {
                                // Use the authtype as the css class
                                $authconfig = $authsources->getArray($source, NULL);
                                if (!array_key_exists(0, $authconfig) || !is_string($authconfig[0])) {
                                        $css_class = "";
                                } else {
                                        $css_class = str_replace(":", "-", $authconfig[0]);
                                }
                        }

                        $this->sources[] = array(
                                'source' => $source,
                                'text' => $text,
                                'css_class' => $css_class,
                        );
                }
        }

        public function authenticate(&$state) {
                assert('is_array($state)');

                $state[self::AUTHID] = $this->authId;
                $state[self::SOURCESID] = $this->sources;

                /* Save the $state array, so that we can restore if after a redirect */
                $id = SimpleSAML_Auth_State::saveState($state, self::STAGEID);

                /* Redirect to the select source page. We include the identifier of the
                saved state array as a parameter to the login form */
                $url = SimpleSAML\Module::getModuleURL('multiauth/selectsource.php');
                $params = array('AuthState' => $id);

                // Allowes the user to specify the auth souce to be used
                if(isset($_GET['source'])) {
                        $params['source'] = $_GET['source'];
                }

                \SimpleSAML\Utils\HTTP::redirectTrustedURL($url, $params);

                /* The previous function never returns, so this code is never
                executed */
                assert('FALSE');
        }

        public static function delegateAuthentication($authId, $state) {
                assert('is_string($authId)');
                assert('is_array($state)');

                $as = SimpleSAML_Auth_Source::getById($authId);
                $valid_sources = array_map(
                        function($src) {
                                return $src['source'];
                        },
                        $state[self::SOURCESID]
        );
                if ($as === NULL || !in_array($authId, $valid_sources, true)) {
                        throw new Exception('Invalid authentication source: ' . $authId);
                }

                /* Save the selected authentication source for the logout process. */
                $session = SimpleSAML_Session::getSessionFromRequest();
                $session->setData(self::SESSION_SOURCE, $state[self::AUTHID], $authId, SimpleSAML_Session::DATA_TIMEOUT_SESSION_END);

                try {
                        $as->authenticate($state);
                } catch (SimpleSAML_Error_Exception $e) {
                        SimpleSAML_Auth_State::throwException($state, $e);
                } catch (Exception $e) {
                        $e = new SimpleSAML_Error_UnserializableException($e);
                        SimpleSAML_Auth_State::throwException($state, $e);
                }
                SimpleSAML_Auth_Source::completeAuth($state);
        }

        public function logout(&$state) {
                assert('is_array($state)');

                /* Get the source that was used to authenticate */
                $session = SimpleSAML_Session::getSessionFromRequest();
                $authId = $session->getData(self::SESSION_SOURCE, $this->authId);

                $source = SimpleSAML_Auth_Source::getById($authId);
                if ($source === NULL) {
                        throw new Exception('Invalid authentication source during logout: ' . $source);
                }
                /* Then, do the logout on it */
                $source->logout($state);
        }

        public function setPreviousSource($source) {
                assert('is_string($source)');

                $cookieName = 'multiauth_source_' . $this->authId;

                $config = SimpleSAML_Configuration::getInstance();
                $params = array(
                        /* We save the cookies for 90 days. */
                        'lifetime' => (60*60*24*90),
                        /* The base path for cookies.
                        This should be the installation directory for SimpleSAMLphp. */
                        'path' => $config->getBasePath(),
                        'httponly' => FALSE,
                );

        \SimpleSAML\Utils\HTTP::setCookie($cookieName, $source, $params, FALSE);
        }

        public function getPreviousSource() {
                $cookieName = 'multiauth_source_' . $this->authId;
                if(array_key_exists($cookieName, $_COOKIE)) {
                        return $_COOKIE[$cookieName];
                } else {
                        return NULL;
                }
        }
}