sspmod_authYubiKey_Auth_Process_OTP2YubiPrefix Class Reference

A processing filter to replace the 'otp' attribute with an attribute 'yubiPrefix' that contains the static YubiKey prefix. More...

Inheritance diagram for sspmod_authYubiKey_Auth_Process_OTP2YubiPrefix:

Collaboration diagram for sspmod_authYubiKey_Auth_Process_OTP2YubiPrefix:

Public Member Functions
	process (&$state)
	Filter out YubiKey 'otp' attribute and replace it with a 'yubiPrefix' attribute that leaves out the dynamic part. More...
Public Member Functions inherited from SimpleSAML_Auth_ProcessingFilter
	__construct (&$config, $reserved)
	Constructor for a processing filter. More...
	process (&$request)
	Process a request. More...

Additional Inherited Members
Data Fields inherited from SimpleSAML_Auth_ProcessingFilter
	$priority = 50
	Priority of this filter. More...

Detailed Description

A processing filter to replace the 'otp' attribute with an attribute 'yubiPrefix' that contains the static YubiKey prefix.

Before: otp=ekhgjhbctrgnubeeklijcibbgjnbtjlffdnjbhjluvur

After: otp undefined yubiPrefix=ekhgjhbctrgn

You use it by adding it as an authentication filter in config.php:

    'authproc.idp' => array(

... 90 => 'authYubiKey:OTP2YubiPrefix', ... );

Definition at line 45 of file OTP2YubiPrefix.php.

Member Function Documentation

process()

sspmod_authYubiKey_Auth_Process_OTP2YubiPrefix::process

(

&

$state

)

Filter out YubiKey 'otp' attribute and replace it with a 'yubiPrefix' attribute that leaves out the dynamic part.

Parameters

array

&$state

The state we should update.

Definition at line 54 of file OTP2YubiPrefix.php.

References $attributes, $state, SimpleSAML\Logger\debug(), and SimpleSAML\Logger\info().

                                         {
                assert(is_array($state));
                assert(array_key_exists('Attributes', $state));
                $attributes = $state['Attributes'];

                SimpleSAML\Logger::debug('OTP2YubiPrefix: enter with attributes: ' . implode(',', array_keys($attributes)));

                $otps = $attributes['otp'];
                $otp = $otps['0'];

                $token_size = 32;
                $identity = substr ($otp, 0, strlen ($otp) - $token_size);

                $attributes['yubiPrefix'] = array($identity);

                SimpleSAML\Logger::info('OTP2YubiPrefix: otp: ' . $otp . ' identity: ' . $identity . ' (otp keys: ' . implode(',', array_keys($otps)) . ')');

                unset($attributes['otp']);

                SimpleSAML\Logger::debug('OTP2YubiPrefix: leaving with attributes: ' . implode(',', array_keys($attributes)));
        }

Here is the call graph for this function:

---

The documentation for this class was generated from the following file:

• libs/composer/vendor/simplesamlphp/simplesamlphp/modules/authYubiKey/lib/Auth/Process/OTP2YubiPrefix.php