Contents

##
# Authenticate User and Create Session
class CasAuthentication
  def initialize(session)
    @session = session
  end

  USER_CAS_MAP = {
    biola_id: :employeeId,
    first_name: :eduPersonNickname,
    last_name: :sn,
    email: :mail,
    photo_url: :url,
    entitlements: :eduPersonEntitlement,
    affiliations: :eduPersonAffiliation
  }.freeze

  def user
    return unless username.present?
    @user ||= User.find_or_initialize_by(username: username)
  end

  def perform
    return true if authenticated?
    return unless session['cas'].present?

    if new_user?
      authenticate! if create_user!
    elsif unauthenticated?
      authenticate!
      update_extra_attributes!
    end
  end

  private

  attr_reader :session

  def present?
    session['cas'].present?
  end

  def new_user?
    user.try(:new_record?)
  end

  def authenticated?
    session[:username].present?
  end

  def unauthenticated?
    !authenticated?
  end

  def authenticate!
    session[:username] = username
  end

  def update_extra_attributes!
    USER_CAS_MAP.each do |k, v|
      value = extra_attrs.fetch(v, nil)
      user[k] = value unless value.blank?
    end

    user.save
  end
  alias create_user! update_extra_attributes!

  def username
    (session[:username] || attrs['user']).downcase
  end

  def attrs
    @attrs ||= (session['cas'] || {}).with_indifferent_access
  end

  def extra_attrs
    @extra_attrs ||= (attrs[:extra_attributes] || {}).with_indifferent_access
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
biola_wcms_components-0.25.0	lib/components/cas_authentication.rb