Contents

# frozen_string_literal: true

require 'cgi'
require 'omniauth'
require 'omniauth-multi-provider'
require 'omniauth-saml'

module Osso
  class Auth < Sinatra::Base
    include AppConfig

    UUID_REGEXP =
      /[0-9a-f]{8}-[0-9a-f]{3,4}-[0-9a-f]{4}-[0-9a-f]{3,4}-[0-9a-f]{12}/.
        freeze

    def self.internal_redirect?(env)
      env['HTTP_REFERER']&.match(env['SERVER_NAME'])
    end

    use OmniAuth::Builder do
      OmniAuth::MultiProvider.register(
        self,
        provider_name: 'saml',
        identity_provider_id_regex: UUID_REGEXP,
        path_prefix: '/saml',
        callback_suffix: 'callback',
      ) do |saml_provider_id, _env|
        provider = Models::SamlProvider.find(saml_provider_id)
        provider.saml_options
      end
    end

    # Enterprise users are sent here after authenticating against
    # their Identity Provider. We find or create a user record,
    # and then create an authorization code for that user. The user
    # is redirected back to your application with this code
    # as a URL query param, which you then exhange for an access token
    post '/saml/:id/callback' do
      provider = Models::SamlProvider.find(params[:id])
      oauth_client = provider.oauth_client
      redirect_uri = env['redirect_uri'] || oauth_client.default_redirect_uri.uri

      attributes = env['omniauth.auth']&.
        extra&.
        response_object&.
        attributes

      user = Models::User.where(
        email: attributes[:email],
        idp_id: attributes[:id],
      ).first_or_create! do |new_user|
        new_user.enterprise_account_id = provider.enterprise_account_id
        new_user.saml_provider_id = provider.id
      end

      authorization_code = user.authorization_codes.create!(
        oauth_client: oauth_client,
        redirect_uri: redirect_uri,
      )

      redirect(redirect_uri + "?code=#{CGI.escape(authorization_code.token)}&state=#{session[:oauth_state]}")
    end
  end
end

Version data entries

8 entries across 8 versions & 1 rubygems

Version	Path
osso-0.0.3.4	lib/osso/routes/auth.rb
osso-0.0.3.3	lib/osso/routes/auth.rb
osso-0.0.3.2	lib/osso/routes/auth.rb
osso-0.0.3.1	lib/osso/routes/auth.rb
osso-0.0.3	lib/osso/routes/auth.rb
osso-0.0.2.10	lib/osso/routes/auth.rb
osso-0.0.2.9	lib/osso/routes/auth.rb
osso-0.0.2.8	lib/osso/routes/auth.rb