Contents

require "xml_security"
require "time"

module Onelogin::Saml
  class Response
    attr_accessor :response, :document, :logger, :settings

    def initialize(response)
      raise ArgumentError.new("Response cannot be nil") if response.nil?
      self.response = response
      self.document = XMLSecurity::SignedDocument.new(Base64.decode64(response))
    end

    def is_valid?
      return false if response.empty?
      return false if settings.nil?
      return true if document.validate_doc(settings.idp_public_cert, nil)
      return false
    end

    def decode
      body = document.decode(settings.private_key)
      self.document = body
    end

    # The value of the user identifier as designated by the initialization request response
    def name_id
      @name_id ||= document.elements['saml2:Assertion/saml2:Subject/saml2:NameID'].text
    end

    def session_index
      @session_index ||= document.elements['saml2:Assertion/saml2:AuthnStatement'].attributes['SessionIndex']
    end

    # A hash of attributes and values
    def attributes
      result = {}
      document.elements.each('saml2:Assertion/saml2:AttributeStatement/saml2:Attribute') do |element|
        name  = element.attributes['FriendlyName']
        value = parser(element.elements.first)
        result.merge!(name => value)
     end

      result.merge!('name_id' => name_id)
      result.merge!('session_index' => session_index)
      result
    end

    def parser(element)
      if  element.elements.first.nil?
        return (element.name == 'AttributeValue') ? element.text : { element.name => element.text }
      end

      value = {}

      element.elements.each do |e|
        v = e.elements.first.nil? ? e.text : parser(e)

        if value.has_key?(e.name)
          value[e.name] = [value[e.name], v].flatten
        else
          value[e.name] = v
        end
      end

      value
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
ruby-saml-for-portal-0.4.2	lib/onelogin/saml/response.rb