Revision 8ffa0b9a
Added by Jan Pazdziora over 10 years ago
| app/services/sso/apache.rb | ||
|---|---|---|
|
require 'iconv' if RUBY_VERSION.start_with?('1.8.')
|
||
|
|
||
|
module SSO
|
||
|
class Apache < Base
|
||
|
delegate :session, :to => :controller
|
||
|
|
||
|
CAS_USERNAME = 'REMOTE_USER'
|
||
|
ENV_TO_ATTR_MAPPING = {
|
||
|
'REMOTE_USER_EMAIL' => :mail,
|
||
|
'REMOTE_USER_FIRSTNAME' => :firstname,
|
||
|
'REMOTE_USER_LASTNAME' => :lastname,
|
||
|
}
|
||
|
|
||
|
def available?
|
||
|
return false unless Setting['authorize_login_delegation']
|
||
|
return false if controller.api_request? and not Setting['authorize_login_delegation_api']
|
||
| ... | ... | |
|
# authenticate the user without using password.
|
||
|
def authenticated?
|
||
|
return false unless (self.user = request.env[CAS_USERNAME])
|
||
|
return false unless User.find_or_create_external_user(self.user, Setting['authorize_login_delegation_auth_source_user_autocreate'])
|
||
|
attrs = { :login => self.user }.merge(additional_attributes)
|
||
|
return false unless User.find_or_create_external_user(attrs, Setting['authorize_login_delegation_auth_source_user_autocreate'])
|
||
|
store
|
||
|
true
|
||
|
end
|
||
| ... | ... | |
|
|
||
|
private
|
||
|
|
||
|
def additional_attributes
|
||
|
attrs = {}
|
||
|
ENV_TO_ATTR_MAPPING.each do |header, attribute|
|
||
|
if request.env.has_key?(header)
|
||
|
attrs[attribute] = convert_encoding(request.env[header].dup)
|
||
|
end
|
||
|
end
|
||
|
attrs
|
||
|
end
|
||
|
|
||
|
def convert_encoding(value)
|
||
|
if value.respond_to?(:force_encoding)
|
||
|
value.force_encoding(Encoding::UTF_8)
|
||
|
if not value.valid_encoding?
|
||
|
value.encode(Encoding::UTF_8, Encoding::ISO_8859_1, { :invalid => :replace, :replace => '-' }).force_encoding(Encoding::UTF_8)
|
||
|
end
|
||
|
else
|
||
|
Iconv.new('UTF-8//IGNORE', 'UTF-8').iconv(value) rescue value
|
||
|
end
|
||
|
value
|
||
|
end
|
||
|
|
||
|
def store
|
||
|
session[:sso_method] = self.class.to_s
|
||
|
end
|
||
Also available in: Unified diff
fixes #3528 - Populate first name, last name, and email, if available.