NameIDAttribute.php

Go to the documentation of this file.

<?php
 
 
class sspmod_saml_Auth_Process_NameIDAttribute extends SimpleSAML_Auth_ProcessingFilter
{
 
    private $attribute;
 
 
    private $format;
 
 
    public function __construct($config, $reserved)
    {
        parent::__construct($config, $reserved);
        assert(is_array($config));
 
        if (isset($config['attribute'])) {
            $this->attribute = (string) $config['attribute'];
        } else {
            $this->attribute = 'nameid';
        }
 
        if (isset($config['format'])) {
            $format = (string) $config['format'];
        } else {
            $format = '%I!%S!%V';
        }
 
        $this->format = self::parseFormat($format);
    }
 
 
    private static function parseFormat($format)
    {
        assert(is_string($format));
 
        $ret = array();
        $pos = 0;
        while (($next = strpos($format, '%', $pos)) !== false) {
            $ret[] = substr($format, $pos, $next - $pos);
 
            $replacement = $format[$next + 1];
            switch ($replacement) {
                case 'F':
                    $ret[] = 'Format';
                    break;
                case 'I':
                    $ret[] = 'NameQualifier';
                    break;
                case 'S':
                    $ret[] = 'SPNameQualifier';
                    break;
                case 'V':
                    $ret[] = 'value';
                    break;
                case '%':
                    $ret[] = '%';
                    break;
                default:
                    throw new SimpleSAML_Error_Exception('NameIDAttribute: Invalid replacement: "%'.$replacement.'"');
            }
 
            $pos = $next + 2;
        }
        $ret[] = substr($format, $pos);
 
        return $ret;
    }
 
 
    public function process(&$state)
    {
        assert(is_array($state));
        assert(isset($state['Source']['entityid']));
        assert(isset($state['Destination']['entityid']));
 
        if (!isset($state['saml:sp:NameID'])) {
            return;
        }
 
        $rep = $state['saml:sp:NameID'];
        assert(isset($rep->value));
 
        $rep->{'%'} = '%';
        if (!isset($rep->Format)) {
            $rep->Format = \SAML2\Constants::NAMEID_UNSPECIFIED;
        }
        if (!isset($rep->NameQualifier)) {
            $rep->NameQualifier = $state['Source']['entityid'];
        }
        if (!isset($rep->SPNameQualifier)) {
            $rep->SPNameQualifier = $state['Destination']['entityid'];
        }
 
        $value = '';
        $isString = true;
        foreach ($this->format as $element) {
            if ($isString) {
                $value .= $element;
            } else {
                $value .= $rep->$element;
            }
            $isString = !$isString;
        }
 
        $state['Attributes'][$this->attribute] = array($value);
    }
}