SQLNameID.php

Go to the documentation of this file.

<?php

class sspmod_saml_IdP_SQLNameID
{
    private static function createTable(\SimpleSAML\Store\SQL $store)
    {
        if ($store->getTableVersion('saml_PersistentNameID') === 1) {
            return;
        }

        $query = 'CREATE TABLE ' . $store->prefix . '_saml_PersistentNameID (
            _idp VARCHAR(256) NOT NULL,
            _sp VARCHAR(256) NOT NULL,
            _user VARCHAR(256) NOT NULL,
            _value VARCHAR(40) NOT NULL,
            UNIQUE (_idp, _sp, _user)
        )';
        $store->pdo->exec($query);

        $query = 'CREATE INDEX ' . $store->prefix . '_saml_PersistentNameID_idp_sp ON '  . $store->prefix . '_saml_PersistentNameID (_idp, _sp)';
        $store->pdo->exec($query);

        $store->setTableVersion('saml_PersistentNameID', 1);
    }


    private static function getStore()
    {
        $store = \SimpleSAML\Store::getInstance();
        if (!($store instanceof \SimpleSAML\Store\SQL)) {
            throw new SimpleSAML_Error_Exception('SQL NameID store requires SimpleSAMLphp to be configured with a SQL datastore.');
        }

        self::createTable($store);

        return $store;
    }


    public static function add($idpEntityId, $spEntityId, $user, $value)
    {
        assert(is_string($idpEntityId));
        assert(is_string($spEntityId));
        assert(is_string($user));
        assert(is_string($value));

        $store = self::getStore();

        $params = array(
            '_idp' => $idpEntityId,
            '_sp' => $spEntityId,
            '_user' => $user,
            '_value' => $value,
        );

        $query = 'INSERT INTO ' . $store->prefix . '_saml_PersistentNameID (_idp, _sp, _user, _value) VALUES(:_idp, :_sp, :_user, :_value)';
        $query = $store->pdo->prepare($query);
        $query->execute($params);
    }


    public static function get($idpEntityId, $spEntityId, $user)
    {
        assert(is_string($idpEntityId));
        assert(is_string($spEntityId));
        assert(is_string($user));

        $store = self::getStore();

        $params = array(
            '_idp' => $idpEntityId,
            '_sp' => $spEntityId,
            '_user' => $user,
        );

        $query = 'SELECT _value FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp AND _user = :_user';
        $query = $store->pdo->prepare($query);
        $query->execute($params);

        $row = $query->fetch(PDO::FETCH_ASSOC);
        if ($row === false) {
            // No NameID found
            return null;
        }

        return $row['_value'];
    }


    public static function delete($idpEntityId, $spEntityId, $user)
    {
        assert(is_string($idpEntityId));
        assert(is_string($spEntityId));
        assert(is_string($user));

        $store = self::getStore();

        $params = array(
            '_idp' => $idpEntityId,
            '_sp' => $spEntityId,
            '_user' => $user,
        );

        $query = 'DELETE FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp AND _user = :_user';
        $query = $store->pdo->prepare($query);
        $query->execute($params);
    }


    public static function getIdentities($idpEntityId, $spEntityId)
    {
        assert(is_string($idpEntityId));
        assert(is_string($spEntityId));

        $store = self::getStore();

        $params = array(
            '_idp' => $idpEntityId,
            '_sp' => $spEntityId,
        );

        $query = 'SELECT _user, _value FROM ' . $store->prefix . '_saml_PersistentNameID WHERE _idp = :_idp AND _sp = :_sp';
        $query = $store->pdo->prepare($query);
        $query->execute($params);

        $res = array();
        while (($row = $query->fetch(PDO::FETCH_ASSOC)) !== false) {
            $res[$row['_user']] = $row['_value'];
        }

        return $res;
    }
}