Added #542: add saml authentication

2020-05-06 00:06:19 +10:00
parent 8ecb7969df
commit b2930d6069
15 changed files with 1276 additions and 5 deletions
@@ -0,0 +1,114 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use OneLogin\Saml2\IdPMetadataParser as OneLogin_Saml2_IdPMetadataParser;
+use OneLogin\Saml2\Utils as OneLogin_Saml2_Utils;
+
+/**
+ * This handles validating and cleaning SAML settings provided by the user.
+ *
+ * @author Johnson Yi <jyi.dev@outlook.com>
+ *
+ * @since 5.0.0
+ */
+class SettingsSamlRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array
+     */
+    public function rules()
+    {
+        return [
+            "saml_idp_metadata" => 'sometimes|required_if:saml_enabled,1',
+        ];
+    }
+
+    public function withValidator($validator)
+    {
+        $validator->after(function ($validator) {
+            if ($this->input('saml_enabled') == '1') {
+                if ($this->has('saml_idp_metadata')) {
+                    $idpMetadata = $this->input('saml_idp_metadata');
+                    try {
+                        if (filter_var($idpMetadata, FILTER_VALIDATE_URL)) {
+                            $url = $idpMetadata;
+                            $metadataInfo = OneLogin_Saml2_IdPMetadataParser::parseRemoteXML($idpMetadata);
+                        } else {
+                            $metadataInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($idpMetadata);
+                        }
+                    } catch (\Exception $e) {
+                        $validator->errors()->add('saml_idp_metadata', trans('validation.url', ['attribute' => 'Metadata']));
+                    }
+                }
+            }
+
+            if ($this->input('saml_sp_regenerate_keypair') == '1' || !$this->has('saml_sp_x509cert')) {
+                $dn = [
+                    "countryName" => "US",
+                    "stateOrProvinceName" => "N/A",
+                    "localityName" => "N/A",
+                    "organizationName" => "Snipe-IT",
+                    "commonName" => "Snipe-IT",
+                ];
+
+                $pkey = openssl_pkey_new([
+                    "private_key_bits" => 2048,
+                    "private_key_type" => OPENSSL_KEYTYPE_RSA,
+                ]);
+                
+                $csr = openssl_csr_new($dn, $pkey, ['digest_alg' => 'sha256']);
+                
+                $x509 = openssl_csr_sign($csr, null, $pkey, 3650, ['digest_alg' => 'sha256']);
+
+                openssl_x509_export($x509, $x509cert);
+                openssl_pkey_export($pkey, $privateKey);
+
+                $errors = [];
+                while (($error = openssl_error_string() !== false)) {
+                    $errors[] = $error;
+                }
+    
+                if (!(empty($x509cert) && empty($privateKey))) {
+                    $this->merge([
+                        'saml_sp_x509cert' => $x509cert,
+                        'saml_sp_privatekey' => $privateKey,
+                    ]);
+                }
+            }
+
+            if (!empty($this->input('saml_custom_settings'))) {
+                $req_custom_settings = preg_split('/\r\n|\r|\n/', $this->input('saml_custom_settings'));
+                $custom_settings = [];
+    
+                foreach ($req_custom_settings as $custom_setting) {
+                    $split = explode('=', $custom_setting, 2);
+    
+                    if (count($split) == 2) {
+                        $split[0] = trim($split[0]);
+                        $split[1] = trim($split[1]);
+    
+                        if (!empty($split[0])) {
+                            $custom_settings[] = implode('=', $split);
+                        }
+                    }
+                }
+    
+                $this->merge(['saml_custom_settings' => implode(PHP_EOL, $custom_settings) . PHP_EOL]);
+            }
+        });
+    }
+}