Contents

module EstEID
  class Authentication
    attr_reader :eid_cert

    def initialize(request)
      @eid_cert = request.headers[EstEID.config.certificate_header]
    end

    def valid?
      eid_cert_present?
    end

    def identity_code
      return unless valid?
      data_hash["serialNumber"].gsub('PNOEE-', '')
    end

    def first_name
      return unless valid?
      normalize(data_hash["GN"])
    end

    def last_name
      return unless valid?
      normalize(data_hash["SN"])
    end

    private

    def normalize(str)
      result = str.gsub(/\\x([\da-fA-F]{2})/) { |m| [$1].pack("H*") }

      if str =~ /\\x00/
        # UCS-2 encoding
        result.force_encoding('utf-16be').encode!('utf-8')
      else
        result.force_encoding('UTF-8')
      end

      result
    end

    def data_hash
      @data_hash ||= parse_header
    end

    def eid_cert_present?
      !@eid_cert.nil? && !@eid_cert.empty?
    end

    def parse_header
      return unless valid?

      case
      when /\//.match(@eid_cert)
        parse_legacy
      else
        parse_rfc2253
      end
    end

    def parse_legacy
      ary = @eid_cert.split("/").reject(&:empty?)
      Hash[ary.collect { |k| k.split "=" }]
    end

    def parse_rfc2253
      ary = @eid_cert.gsub("\\,", "/").split(",")
      Hash[ary.collect { |k| k.split "=" }]
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
esteid-1.1.0	lib/esteid/authentication.rb