First commit

library.js

@@ -0,0 +1,160 @@
+(function(module) {
+	"use strict";
+
+	var user = module.parent.require('./user'),
+		meta = module.parent.require('./meta'),
+		db = module.parent.require('../src/database'),
+		passport = module.parent.require('passport'),
+		passportSAML = require('passport-saml').Strategy,
+		fs = module.parent.require('fs'),
+		path = module.parent.require('path'),
+		nconf = module.parent.require('nconf'),
+		async = module.parent.require('async');
+
+	var constants = Object.freeze({
+		'name': "SAML",
+		'admin': {
+			'route': '/plugins/sso-saml',
+			'icon': 'fa-twitter-square'
+		}
+	});
+
+	var SAML = {};
+
+	if (!meta.config['sso:saml:idpentrypoint'] || meta.config['sso:saml:callbackpath']) {
+		var err = new Error('Missing config variables');
+    	throw err;
+    }
+
+
+	var samlObj = new passportSAML({
+		    path: meta.config['sso:saml:callbackpath'],
+		    entryPoint: meta.config['sso:saml:idpentrypoint'],
+		    issuer: 'passport-saml',
+		    callbackUrl: nconf.get('url') + ':' + nconf.get('port') + meta.config['sso:saml:callbackpath']
+	  	},
+	  	function(profile, done) {
+	  		
+	    	var user = {
+		        nameID: profile.nameID,
+		        nameIDFormat: profile.nameIDFormat,
+		        sn: profile.sn,
+		        cn: profile.cn,
+		        mail: profile.mail,
+		        eduPersonAffiliation: profile.eduPersonAffiliation,
+		        email: profile.email
+		    };
+
+		    SAML.login(user.nameID,user.nameID,function(err, user) {
+				if (err) {
+					return done(err);
+				}
+				done(null, user);
+			});
+	  	}
+	);
+
+
+	SAML.init = function(app, middleware, controllers, callback) {
+		function render(req, res, next) {
+			res.render('admin/plugins/sso-saml', {});
+		}
+
+		app.get('/admin/plugins/sso-saml', middleware.admin.buildHeader, render);
+		app.get('/api/admin/plugins/sso-saml', render);
+
+		app.get(meta.config["sso:saml:metadata"], function(req, res) {
+		  var cert = fs.readFileSync('/Users/alasarr/dev/nodebb/node_modules/nodebb-plugin-sso-saml/server.crt', 'utf-8');
+		  res.header("Content-Type", "application/xml");
+		  res.send(samlObj.generateServiceProviderMetadata(cert))
+		  
+		});
+
+		app.post(meta.config['sso:saml:callbackpath'],
+			passport.authenticate('saml', { successRedirect: '/',failureRedirect: '/', failureFlash: true })
+		);
+	
+		callback();
+	};
+
+	SAML.getStrategy = function(strategies, callback) {
+		
+		passport.use(samlObj);
+
+		strategies.push({
+			name: 'saml',
+			url: '/auth/saml',
+			callbackURL: meta.config['sso:saml:callbackpath'],
+			icon: constants.admin.icon,
+			scope: ''
+		});
+
+		callback(null, strategies);
+	};
+
+	SAML.login = function(samlid,email, callback) {
+
+		SAML.getUidBySAMLId(samlid, function(err, uid) {
+			if(err) {
+				return callback(err);
+			}
+
+			if (uid !== null) {
+				// Existing User
+				callback(null, {
+					uid: uid
+				});
+			} else {
+				// New User
+				user.create({username: email}, function(err, uid) {
+					if(err) {
+						return callback(err);
+					}
+					// Save twitter-specific information to the user
+					user.setUserField(uid, 'samlid', samlid);
+					db.setObjectField('samlid:uid', samlid, uid);
+
+					callback(null, {
+						uid: uid
+					});
+				});
+			}
+		});
+	};
+
+	SAML.getUidBySAMLId = function(samlid, callback) {
+		db.getObjectField('samlid:uid', samlid, function(err, uid) {
+			if (err) {
+				return callback(err);
+			}
+			callback(null, uid);
+		});
+	};
+
+	SAML.addMenuItem = function(custom_header, callback) {
+		custom_header.authentication.push({
+			"route": constants.admin.route,
+			"icon": constants.admin.icon,
+			"name": constants.name
+		});
+
+		callback(null, custom_header);
+	};
+
+	SAML.deleteUserData = function(uid, callback) {
+		// async.waterfall([
+		// 	async.apply(user.getUserField, uid, 'samlid'),
+		// 	function(oAuthIdToDelete, next) {
+		// 		db.deleteObjectField('twid:uid', oAuthIdToDelete, next);
+		// 	}
+		// ], function(err) {
+		// 	if (err) {
+		// 		winston.error('[sso-twitter] Could not remove OAuthId data for uid ' + uid + '. Error: ' + err);
+		// 		return callback(err);
+		// 	}
+		// 	callback(null, uid);
+		// });
+	};
+
+	module.exports = SAML;
+}(module));