ILIAS\Saml\Metadata Class Reference

Collaboration diagram for ILIAS\Saml\Metadata:

Public Member Functions
	__construct (private readonly SimpleSamlFactory $create)
	buildXML (ilSamlAuth $auth)

Private Member Functions
	singleLogoutService (Configuration $config, string $logout_url, string $source_id)
	assertionConsumerServices (Configuration $config, array $default)
	defaultAssertionConsumerServices (Configuration $config, string $base_url, string $source_id)
	nameIdPolicy (Configuration $config)
	nameInformation (Configuration $config)
	organizationalInformation (Configuration $config)
	certificates (Configuration $config)
	buildCertData (?array $cert_info, bool $encryption)
	extensions (Configuration $config)
	removeKey ($key)
	mergeList (array $list)
	addIfExists (Configuration $config, string $needle, string $selector='getValue', ?string $as_key=null)
	mergeListIfExists (Configuration $config, array $list)

Detailed Description

Definition at line 30 of file Metadata.php.

Constructor & Destructor Documentation

__construct()

ILIAS\Saml\Metadata::__construct

(

private readonly SimpleSamlFactory

$create

)

Definition at line 32 of file Metadata.php.

    {
    }

Member Function Documentation

addIfExists()

ILIAS\Saml\Metadata::addIfExists ( Configuration  $config, string  $needle, string  $selector = 'getValue', ?string  $as_key = null  )

private

Definition at line 263 of file Metadata.php.

Referenced by ILIAS\Saml\Metadata\mergeListIfExists(), and ILIAS\Saml\Metadata\organizationalInformation().

                                                                                                                              : array
    {
        return $config->hasValue($needle) ?
            [$as_key ?? $needle => $config->$selector($needle)] :
            [];
    }

Here is the caller graph for this function:

assertionConsumerServices()

ILIAS\Saml\Metadata::assertionConsumerServices ( Configuration  $config, array  $default  )

private

Definition at line 90 of file Metadata.php.

References $service, and ILIAS\Saml\Metadata\removeKey().

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                                                     : array
    {
        $services = $config->getOptionalArray('acs.Bindings', array_keys($default));

        $services = array_intersect($services, array_keys($default));

        $services = array_map(static fn(string $service, int $index): array => array_merge($default[$service] ?? [], [
            'index' => $index,
        ]), $services, range(0, count($services) - 1));

        return [
            'services' => array_map($this->removeKey('Protocol'), $services),
            'supported_protocols' => array_unique(array_values(array_column($services, 'Protocol'))),
        ];
    }

Here is the call graph for this function:

Here is the caller graph for this function:

buildCertData()

ILIAS\Saml\Metadata::buildCertData ( ?array  $cert_info, bool  $encryption  )

private

Definition at line 217 of file Metadata.php.

References null.

Referenced by ILIAS\Saml\Metadata\certificates().

                                                                       : ?array
    {
        if ($cert_info['certData'] ?? false) {
            return [
                'type' => 'X509Certificate',
                'signing' => true,
                'encryption' => $encryption,
                'X509Certificate' => $cert_info['certData'],
            ];
        }

        return null;
    }

Here is the caller graph for this function:

buildXML()

ILIAS\Saml\Metadata::buildXML

(

ilSamlAuth

$auth

)

Definition at line 36 of file Metadata.php.

References ILIAS\Saml\Metadata\assertionConsumerServices(), ILIAS\Saml\Metadata\certificates(), ILIAS\Saml\Metadata\defaultAssertionConsumerServices(), ILIAS\Saml\Metadata\extensions(), ilSamlAuth\getAuthId(), ILIAS\Saml\Metadata\mergeList(), ILIAS\Saml\Metadata\nameIdPolicy(), ILIAS\Saml\Metadata\nameInformation(), ILIAS\Saml\Metadata\organizationalInformation(), and ILIAS\Saml\Metadata\singleLogoutService().

                                              : string
    {
        $source = $this->create->sourceById($auth->getAuthId());
        $config = $source->getMetadata();
        $base_url = rtrim(ILIAS_HTTP_PATH, '/');

        $acs = $this->assertionConsumerServices($config, $this->defaultAssertionConsumerServices($config, $base_url, $auth->getAuthId()));

        $base = [
            'entityid' => $source->getEntityId(),
            'metadata-set' => 'saml20-sp-remote',
            'SingleLogoutService' => $this->singleLogoutService($config, $base_url, $source->getAuthId()),
            'AssertionConsumerService' => $acs['services'],
        ];

        $metadata_sp20 = $this->mergeList([
            $base,
            $this->nameIdPolicy($config),
            $this->nameInformation($config),
            $this->organizationalInformation($config),
            $this->certificates($config),
            $this->extensions($config),
        ]);

        $builder = $this->create->builder($source->getEntityId());
        $builder->addMetadataSP20($metadata_sp20, $acs['supported_protocols']);
        $builder->addOrganizationInfo($metadata_sp20);

        $xml = $builder->getEntityDescriptorText();
        $xml = $this->create->sign($xml, $config->toArray(), 'SAML 2 SP');

        return $xml;
    }

Here is the call graph for this function:

certificates()

ILIAS\Saml\Metadata::certificates ( Configuration  $config )

private

Definition at line 196 of file Metadata.php.

References ILIAS\Saml\Metadata\buildCertData(), and null.

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                        : array
    {
        $crypt = $this->create->crypt();

        $key = $this->buildCertData($crypt->loadPublicKey($config, false, 'new_'), true);
        $has_new_cert = $key !== null;

        $keys = array_values(array_filter([
            $key,
            $this->buildCertData($crypt->loadPublicKey($config), !$has_new_cert),
        ]));

        if (count($keys) === 1) {
            return ['certData' => $keys[0]['X509Certificate']];
        } elseif (count($keys) > 1) {
            return ['keys' => $keys];
        }

        return [];
    }

Here is the call graph for this function:

Here is the caller graph for this function:

defaultAssertionConsumerServices()

ILIAS\Saml\Metadata::defaultAssertionConsumerServices ( Configuration  $config, string  $base_url, string  $source_id  )

private

Definition at line 106 of file Metadata.php.

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                                                                                 : array
    {
        $default = [
            'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' => [
                'Binding' => Constants::BINDING_HTTP_POST,
                'Location' => sprintf('%s/module.php/saml/sp/saml2-acs.php/%s', $base_url, $source_id),
                'Protocol' => Constants::NS_SAMLP,
            ],
            'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact' => [
                'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
                'Location' => sprintf('%s/module.php/saml/sp/saml2-acs.php/%s', $base_url, $source_id),
                'Protocol' => Constants::NS_SAMLP,
            ],
        ];

        if ($config->getOptionalString('ProtocolBinding', '') === 'urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser') {
            $default['urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser'] = [
                'Binding' => 'urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser',
                'hoksso:ProtocolBinding' => Constants::BINDING_HTTP_REDIRECT,
                'Location' => sprintf('%s/module.php/saml2-acs/%s', $base_url, $source_id),
                'Protocol' => Constants::NS_SAMLP,
            ];
        }

        return $default;
    }

Here is the caller graph for this function:

extensions()

ILIAS\Saml\Metadata::extensions ( Configuration  $config )

private

Definition at line 231 of file Metadata.php.

References ILIAS\Saml\Metadata\mergeListIfExists().

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                      : array
    {
        return $this->mergeListIfExists($config, [
            ['EntityAttributes', 'getArray'],
            ['UIInfo', 'getArray'],
            ['RegistrationInfo', 'getArray'],
            ['WantAssertionsSigned', 'getBoolean', 'saml20.sign.assertion'],
            ['redirect.sign', 'getBoolean', 'redirect.validate'],
            ['sign.authnrequest', 'getBoolean', 'validate.authnrequest'],
        ]);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

mergeList()

ILIAS\Saml\Metadata::mergeList ( array  $list )

private

Parameters

list<array>

$list

Definition at line 258 of file Metadata.php.

Referenced by ILIAS\Saml\Metadata\buildXML(), and ILIAS\Saml\Metadata\mergeListIfExists().

                                           : array
    {
        return array_merge(...$list);
    }

Here is the caller graph for this function:

mergeListIfExists()

ILIAS\Saml\Metadata::mergeListIfExists ( Configuration  $config, array  $list  )

private

Parameters

list<string|list<string>>

$list

Definition at line 273 of file Metadata.php.

References ILIAS\Saml\Metadata\addIfExists(), and ILIAS\Saml\Metadata\mergeList().

Referenced by ILIAS\Saml\Metadata\extensions(), and ILIAS\Saml\Metadata\nameInformation().

                                                                          : array
    {
        return $this->mergeList(array_map(
            fn($pair): array => $this->addIfExists($config, ...(is_array($pair) ? $pair : [$pair])),
            $list
        ));
    }

Here is the call graph for this function:

Here is the caller graph for this function:

nameIdPolicy()

ILIAS\Saml\Metadata::nameIdPolicy ( Configuration  $config )

private

Definition at line 133 of file Metadata.php.

References null.

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                        : array
    {
        $format = $config->getOptionalValue('NameIDPolicy', null);
        return match (gettype($format)) {
            'array' => [
                'NameIDFormat' => $this->create->configFromArray($format)->getString('Format'),
            ],
            'string' => ['NameIDFormat' => $format],
            default => [],
        };
    }

Here is the caller graph for this function:

nameInformation()

ILIAS\Saml\Metadata::nameInformation ( Configuration  $config )

private

Definition at line 145 of file Metadata.php.

References ILIAS\Saml\Metadata\mergeListIfExists().

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                           : array
    {
        if (!$config->hasValue('name') || !$config->hasValue('attributes')) {
            return [];
        }

        $information = [
            'name' => $config->getLocalizedString('name'),
            'attributes' => $config->getArray('attributes'),
        ];

        return array_merge($information, $this->mergeListIfExists($config, [
            ['attributes.required', 'getArray'],
            ['description', 'getString'],
            ['attributes.NameFormat', 'getString'],
            ['attributes.index', 'getInteger'],
            ['attributes.isDefault', 'getBoolean'],
        ]));
    }

Here is the call graph for this function:

Here is the caller graph for this function:

organizationalInformation()

ILIAS\Saml\Metadata::organizationalInformation ( Configuration  $config )

private

Definition at line 165 of file Metadata.php.

References ILIAS\Saml\Metadata\addIfExists(), and null.

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                                     : array
    {
        $array = [];
        if ($config->hasValue('OrganizationName')) {
            $array['OrganizationName'] = $config->getLocalizedString('OrganizationName');

            $array = array_merge($array, $this->addIfExists($config, 'OrganizationDisplayName', 'getLocalizedString'));

            if (!$config->hasValue('OrganizationURL')) {
                throw new Exception('If OrganizationName is set, OrganizationURL must also be set.');
            }
            $array['OrganizationURL'] = $config->getLocalizedString('OrganizationURL');
        }

        foreach ($config->getOptionalArray('contacts', []) as $contact) {
            $array['contacts'][] = $this->create->contact($contact);
        }

        // add technical contact
        if ($config->hasValue('technicalcontact_email') && $config->getString('technicalcontact_email') !== 'na@example.org') {
            $techcontact = [
                'emailAddress' => $config->getString('technicalcontact_email'),
                'name' => $config->getOptionalString('technicalcontact_name', null),
                'contactType' => 'technical',
            ];
            $array['contacts'][] = $this->create->contact($techcontact);
        }

        return $array;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

removeKey()

ILIAS\Saml\Metadata::removeKey (   $key )

private

Parameters

string | int

$key

Returns

Closure(array): array

Definition at line 247 of file Metadata.php.

References Vendor\Package\$a.

Referenced by ILIAS\Saml\Metadata\assertionConsumerServices().

                                    : Closure
    {
        return static function (array $a) use ($key) {
            unset($a[$key]);
            return $a;
        };
    }

Here is the caller graph for this function:

singleLogoutService()

ILIAS\Saml\Metadata::singleLogoutService ( Configuration  $config, string  $logout_url, string  $source_id  )

private

Definition at line 70 of file Metadata.php.

References Vendor\Package\$b.

Referenced by ILIAS\Saml\Metadata\buildXML().

                                                                                                      : array
    {
        $logout_url = $logout_url . '/module.php/saml/sp/saml2-logout.php/' . $source_id;
        $store = $this->create->store();

        $bindings = $config->getOptionalArray('SingleLogoutServiceBinding', [
            Constants::BINDING_HTTP_REDIRECT,
            Constants::BINDING_SOAP,
        ]);

        $bindings = $store instanceof SQLStore ?
                  $bindings :
                  array_values(array_filter($bindings, static fn(string $b): bool => $b !== Constants::BINDING_SOAP));

        return array_map(static fn(string $b): array => [
            'Binding' => $b,
            'Location' => $config->getOptionalString('SingleLogoutServiceLocation', $logout_url),
        ], $bindings);
    }

Here is the caller graph for this function:

---

The documentation for this class was generated from the following file:

• components/ILIAS/Saml/classes/Metadata.php