160 lines
4 KiB
JavaScript
160 lines
4 KiB
JavaScript
(function(module) {
|
|
"use strict";
|
|
|
|
var user = module.parent.require('./user'),
|
|
meta = module.parent.require('./meta'),
|
|
db = module.parent.require('../src/database'),
|
|
passport = module.parent.require('passport'),
|
|
passportSAML = require('passport-saml').Strategy,
|
|
fs = module.parent.require('fs'),
|
|
path = module.parent.require('path'),
|
|
nconf = module.parent.require('nconf'),
|
|
async = module.parent.require('async');
|
|
|
|
var constants = Object.freeze({
|
|
'name': "SAML",
|
|
'admin': {
|
|
'route': '/plugins/sso-saml',
|
|
'icon': 'fa-twitter-square'
|
|
}
|
|
});
|
|
|
|
var SAML = {};
|
|
|
|
if (!meta.config['sso:saml:idpentrypoint'] || meta.config['sso:saml:callbackpath']) {
|
|
var err = new Error('Missing config variables');
|
|
throw err;
|
|
}
|
|
|
|
|
|
var samlObj = new passportSAML({
|
|
path: meta.config['sso:saml:callbackpath'],
|
|
entryPoint: meta.config['sso:saml:idpentrypoint'],
|
|
issuer: 'passport-saml',
|
|
callbackUrl: nconf.get('url') + ':' + nconf.get('port') + meta.config['sso:saml:callbackpath']
|
|
},
|
|
function(profile, done) {
|
|
|
|
var user = {
|
|
nameID: profile.nameID,
|
|
nameIDFormat: profile.nameIDFormat,
|
|
sn: profile.sn,
|
|
cn: profile.cn,
|
|
mail: profile.mail,
|
|
eduPersonAffiliation: profile.eduPersonAffiliation,
|
|
email: profile.email
|
|
};
|
|
|
|
SAML.login(user.nameID,user.nameID,function(err, user) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
done(null, user);
|
|
});
|
|
}
|
|
);
|
|
|
|
|
|
SAML.init = function(app, middleware, controllers, callback) {
|
|
function render(req, res, next) {
|
|
res.render('admin/plugins/sso-saml', {});
|
|
}
|
|
|
|
app.get('/admin/plugins/sso-saml', middleware.admin.buildHeader, render);
|
|
app.get('/api/admin/plugins/sso-saml', render);
|
|
|
|
app.get(meta.config["sso:saml:metadata"], function(req, res) {
|
|
var cert = fs.readFileSync('/Users/alasarr/dev/nodebb/node_modules/nodebb-plugin-sso-saml/server.crt', 'utf-8');
|
|
res.header("Content-Type", "application/xml");
|
|
res.send(samlObj.generateServiceProviderMetadata(cert))
|
|
|
|
});
|
|
|
|
app.post(meta.config['sso:saml:callbackpath'],
|
|
passport.authenticate('saml', { successRedirect: '/',failureRedirect: '/', failureFlash: true })
|
|
);
|
|
|
|
callback();
|
|
};
|
|
|
|
SAML.getStrategy = function(strategies, callback) {
|
|
|
|
passport.use(samlObj);
|
|
|
|
strategies.push({
|
|
name: 'saml',
|
|
url: '/auth/saml',
|
|
callbackURL: meta.config['sso:saml:callbackpath'],
|
|
icon: constants.admin.icon,
|
|
scope: ''
|
|
});
|
|
|
|
callback(null, strategies);
|
|
};
|
|
|
|
SAML.login = function(samlid,email, callback) {
|
|
|
|
SAML.getUidBySAMLId(samlid, function(err, uid) {
|
|
if(err) {
|
|
return callback(err);
|
|
}
|
|
|
|
if (uid !== null) {
|
|
// Existing User
|
|
callback(null, {
|
|
uid: uid
|
|
});
|
|
} else {
|
|
// New User
|
|
user.create({username: email}, function(err, uid) {
|
|
if(err) {
|
|
return callback(err);
|
|
}
|
|
// Save twitter-specific information to the user
|
|
user.setUserField(uid, 'samlid', samlid);
|
|
db.setObjectField('samlid:uid', samlid, uid);
|
|
|
|
callback(null, {
|
|
uid: uid
|
|
});
|
|
});
|
|
}
|
|
});
|
|
};
|
|
|
|
SAML.getUidBySAMLId = function(samlid, callback) {
|
|
db.getObjectField('samlid:uid', samlid, function(err, uid) {
|
|
if (err) {
|
|
return callback(err);
|
|
}
|
|
callback(null, uid);
|
|
});
|
|
};
|
|
|
|
SAML.addMenuItem = function(custom_header, callback) {
|
|
custom_header.authentication.push({
|
|
"route": constants.admin.route,
|
|
"icon": constants.admin.icon,
|
|
"name": constants.name
|
|
});
|
|
|
|
callback(null, custom_header);
|
|
};
|
|
|
|
SAML.deleteUserData = function(uid, callback) {
|
|
// async.waterfall([
|
|
// async.apply(user.getUserField, uid, 'samlid'),
|
|
// function(oAuthIdToDelete, next) {
|
|
// db.deleteObjectField('twid:uid', oAuthIdToDelete, next);
|
|
// }
|
|
// ], function(err) {
|
|
// if (err) {
|
|
// winston.error('[sso-twitter] Could not remove OAuthId data for uid ' + uid + '. Error: ' + err);
|
|
// return callback(err);
|
|
// }
|
|
// callback(null, uid);
|
|
// });
|
|
};
|
|
|
|
module.exports = SAML;
|
|
}(module));
|