WarnShortSSOInterval.php

Go to the documentation of this file.

<?php

class sspmod_core_Auth_Process_WarnShortSSOInterval extends SimpleSAML_Auth_ProcessingFilter {

        public function process(&$state) {
                assert(is_array($state));

                if (!array_key_exists('PreviousSSOTimestamp', $state)) {
                        /*
                         * No timestamp from the previous SSO to this SP. This is the first
                         * time during this session.
                         */
                        return;
                }

                $timeDelta = time() - $state['PreviousSSOTimestamp'];
                if ($timeDelta >= 10) {
                        // At least 10 seconds since last attempt
                        return;
                }

                if (array_key_exists('Destination', $state)
                        && array_key_exists('entityid', $state['Destination'])) {
                        $entityId = $state['Destination']['entityid'];
                } else {
                        $entityId = 'UNKNOWN';
                }

                SimpleSAML\Logger::warning('WarnShortSSOInterval: Only ' . $timeDelta .
                        ' seconds since last SSO for this user from the SP ' .
                        var_export($entityId, TRUE));

                // Save state and redirect
                $id = SimpleSAML_Auth_State::saveState($state, 'core:short_sso_interval');
                $url = SimpleSAML\Module::getModuleURL('core/short_sso_interval.php');
                \SimpleSAML\Utils\HTTP::redirectTrustedURL($url, array('StateId' => $id));
        }

}