Sha256: 38410b502dfd043760f698f93f0559c8821016340a28ad51b70fa87a435f5198
Contents?: true
Size: 2 KB
Versions: 13
Compression:
Stored size: 2 KB
Contents
module Devise
module Models
# Extends your User class with support for CAS ticket authentication.
module CasAuthenticatable
def self.included(base)
base.extend ClassMethods
end
module ClassMethods
# Authenticate a CAS ticket and return the resulting user object. Behavior is as follows:
#
# * Check ticket validity using RubyCAS::Client. Return nil if the ticket is invalid.
# * Find a matching user by username (will use find_for_authentication if available).
# * If the user does not exist, but Devise.cas_create_user is set, attempt to create the
# user object in the database. If cas_extra_attributes= is defined, this will also
# pass in the ticket's extra_attributes hash.
# * Return the resulting user object.
def authenticate_with_cas_ticket(ticket)
::Devise.cas_client.validate_service_ticket(ticket) unless ticket.has_been_validated?
if ticket.is_valid?
conditions = {::Devise.cas_username_column => ticket.respond_to?(:user) ? ticket.user : ticket.response.user}
# We don't want to override Devise 1.1's find_for_authentication
resource = if respond_to?(:find_for_authentication)
find_for_authentication(conditions)
else
find(:first, :conditions => conditions)
end
resource = new(conditions) if (resource.nil? and should_create_cas_users?)
return nil unless resource
if resource.respond_to? :cas_extra_attributes=
resource.cas_extra_attributes = ticket.respond_to?(:extra_attributes) ? ticket.extra_attributes : ticket.response.extra_attributes
end
resource.save
resource
end
end
private
def should_create_cas_users?
respond_to?(:cas_create_user?) ? cas_create_user? : ::Devise.cas_create_user?
end
end
end
end
end
Version data entries
13 entries across 13 versions & 1 rubygems