AttributeQuery test/example.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1651 44740490-163a-0410-bde0-09ae8108e29a

modules/exampleattributeserver/www/attributeserver.php

+<?php
+
+$metadata = SimpleSAML_Metadata_MetaDataStorageHandler::getMetadataHandler();
+
+$binding = SAML2_Binding::getCurrentBinding();
+$query = $binding->receive();
+if (!($query instanceof SAML2_AttributeQuery)) {
+	throw new SimpleSAML_Error_BadRequest('Invalid message received to AttributeQuery endpoint.');
+}
+
+$idpEntityId = $metadata->getMetaDataCurrentEntityID('saml20-idp-hosted');
+
+
+$spEntityId = $query->getIssuer();
+if ($spEntityId === NULL) {
+	throw new SimpleSAML_Errro_BadRequest('Missing <saml:Issuer> in <samlp:AttributeQuery>.');
+}
+
+$idpMetadata = $metadata->getMetadataConfig($idpEntityId, 'saml20-idp-hosted');
+$spMetadata = $metadata->getMetaDataConfig($spEntityId, 'saml20-sp-remote');
+
+/* The endpoint we should deliver the message to. */
+$endpoint = $spMetadata->getString('testAttributeEndpoint');
+
+/* The attributes we will return. */
+$attributes = array(
+	'name' => array('value1', 'value2', 'value3'),
+	'test' => array('test'),
+);
+
+/* The name format of the attributes. */
+$attributeNameFormat = SAML2_Const::NAMEFORMAT_UNSPECIFIED;
+
+
+/* Determine which attributes we will return. */
+$returnAttributes = array_keys($query->getAttributes());
+if (count($returnAttributes) === 0) {
+	SimpleSAML_Logger::debug('No attributes requested - return all attributes.');
+	$returnAttributes = $attributes;
+
+} elseif ($query->getAttributeNameFormat() !== $attributeNameFormat) {
+	SimpleSAML_Logger::debug('Requested attributes with wrong NameFormat - no attributes returned.');
+	$returnAttributes = array();
+} else {
+	foreach ($returnAttributes as $name => $values) {
+		if (!array_key_exists($name, $attributes)) {
+			/* We don't have this attribute. */
+			unset($returnAttributes[$name]);
+			continue;
+		}
+
+		if (count($values) === 0) {
+			/* Return all attributes. */
+			$returnAttributes[$name] = $attributes[$name];
+			continue;
+		}
+
+		/* Filter which attribute values we should return. */
+		$returnAttributes[$name] = array_intersect($values, $attributes[$name]);
+	}
+}
+
+
+/* $returnAttributes contains the attributes we should return. Send them. */
+$assertion = new SAML2_Assertion();
+$assertion->setDestination($endpoint);
+$assertion->setIssuer($idpEntityId);
+$assertion->setNameId($query->getNameId());
+$assertion->setNotBefore(time());
+$assertion->setNotOnOrAfter(time() + 5*60);
+$assertion->setInResponseTo($query->getId());
+$assertion->setValidAudiences(array($spEntityId));
+$assertion->setAttributes($returnAttributes);
+$assertion->setAttributeNameFormat($attributeNameFormat);
+sspmod_saml2_Message::addSign($idpMetadata, $spMetadata, $assertion);
+
+$response = new SAML2_Response();
+$response->setRelayState($query->getRelayState());
+$response->setDestination($endpoint);
+$response->setIssuer($idpEntityId);
+$response->setInResponseTo($query->getId());
+$response->setAssertions(array($assertion));
+sspmod_saml2_Message::addSign($idpMetadata, $spMetadata, $response);
+
+$binding = new SAML2_HTTPPost();
+$binding->setDestination(sspmod_saml2_Message::getDebugDestination());
+$binding->send($response);

www/example-simple/attributequery.php

+<?php
+
+require_once('../_include.php');
+
+$session = SimpleSAML_Session::getInstance();
+$metadata = SimpleSAML_Metadata_MetaDataStorageHandler::getMetadataHandler();
+
+$spEntityId = $metadata->getMetaDataCurrentEntityID('saml20-sp-hosted');
+
+function sendQuery($dataId, $url, $nameId) {
+	assert('is_string($dataId)');
+	assert('is_string($url)');
+	assert('is_array($nameId)');
+
+	SimpleSAML_Logger::debug('attributequery - sending request');
+
+	$query = new SAML2_AttributeQuery();
+	$query->setRelayState($dataId);
+	$query->setDestination($url);
+	$query->setIssuer($GLOBALS['spEntityId']);
+	$query->setNameId($nameId);
+
+	$xml = $query->toUnsignedXML();
+	SimpleSAML_Utilities::formatDOMElement($xml);
+	$xml = $xml->ownerDocument->saveXML($xml);
+	error_log($xml);
+
+	$binding = new SAML2_HTTPRedirect();
+	$binding->send($query);
+}
+
+function handleResponse() {
+	try {
+		$binding = SAML2_Binding::getCurrentBinding();
+		$response = $binding->receive();
+	} catch (Exception $e) {
+		return;
+	}
+
+	SimpleSAML_Logger::debug('attributequery - received message.');
+
+	if (!($response instanceof SAML2_Response)) {
+		throw new SimpleSAML_Error_Exception('Unexpected message received to attribute query example.');
+	}
+
+	$idpEntityId = $response->getIssuer();
+	if ($idpEntityId === NULL) {
+		throw new SimpleSAML_Error_Exception('Missing issuer in response.');
+	}
+
+	$idpMetadata = $GLOBALS['metadata']->getMetaDataConfig($idpEntityId, 'saml20-idp-remote');
+	$spMetadata =  $GLOBALS['metadata']->getMetaDataConfig($GLOBALS['spEntityId'], 'saml20-sp-hosted');
+
+	$assertion = sspmod_saml2_Message::processResponse($spMetadata, $idpMetadata, $response);
+
+	$dataId = $response->getRelayState();
+	if ($dataId === NULL) {
+		throw new SimpleSAML_Error_Exception('RelayState was lost during request.');
+	}
+
+	$data = $GLOBALS['session']->getData('attributequeryexample:data', $dataId);
+	$data['attributes'] = $assertion->getAttributes();
+	$GLOBALS['session']->setData('attributequeryexample:data', $dataId, $data, 3600);
+
+	SimpleSAML_Utilities::redirect(SimpleSAML_Utilities::selfURLNoQuery(),
+		array('dataId' => $dataId));
+}
+
+handleResponse();
+
+$defNameId = $session->getNameId();
+if (empty($defNameId)) {
+	$defNameId = array();
+}
+if (!array_key_exists('Value', $defNameId)) {
+	if (array_key_exists('value', $defNameId)) {
+		/* For backwards compatibility. */
+		$defNameId['Value'] = $defNameId['value'];
+	} else {
+		$defNameId['Value'] = SimpleSAML_Utilities::generateID();
+	}
+}
+if (!array_key_exists('Format', $defNameId)) {
+	$defNameId['Format'] = SAML2_Const::NAMEID_TRANSIENT;
+}
+if (!array_key_exists('NameQualifier', $defNameId) || $defNameId['NameQualifier'] === NULL) {
+	$defNameId['NameQualifier'] = '';
+}
+if (!array_key_exists('SPNameQualifier', $defNameId) || $defNameId['SPNameQualifier'] === NULL) {
+	$defNameId['SPNameQualifier'] = '';
+}
+
+
+if (array_key_exists('dataId', $_REQUEST)) {
+	$dataId = (string)$_REQUEST['dataId'];
+	$data = $session->getData('attributequeryexample:data', $dataId);
+	if ($data == NULL) {
+		$data = array();
+	}
+} else {
+	$dataId = SimpleSAML_Utilities::generateID();
+	$data = array();
+}
+
+if (array_key_exists('nameIdFormat', $_REQUEST)) {
+	$data['nameIdFormat'] = (string)$_REQUEST['nameIdFormat'];
+} elseif (!array_key_exists('nameIdFormat', $data)) {
+	$data['nameIdFormat'] = $defNameId['Format'];
+}
+
+if (array_key_exists('nameIdValue', $_REQUEST)) {
+	$data['nameIdValue'] = (string)$_REQUEST['nameIdValue'];
+} elseif (!array_key_exists('nameIdValue', $data)) {
+	$data['nameIdValue'] = $defNameId['Value'];
+}
+
+if (array_key_exists('nameIdQualifier', $_REQUEST)) {
+	$data['nameIdQualifier'] = (string)$_REQUEST['nameIdQualifier'];
+} elseif (!array_key_exists('nameIdQualifier', $data)) {
+	$data['nameIdQualifier'] = $defNameId['NameQualifier'];
+}
+
+if (array_key_exists('nameIdSPQualifier', $_REQUEST)) {
+	$data['nameIdSPQualifier'] = (string)$_REQUEST['nameIdSPQualifier'];
+} elseif (!array_key_exists('nameIdSPQualifier', $data)) {
+	$data['nameIdSPQualifier'] = $defNameId['SPNameQualifier'];
+}
+
+
+if (array_key_exists('url', $_REQUEST)) {
+	$data['url'] = (string)$_REQUEST['url'];
+} elseif (!array_key_exists('url', $data)) {
+	$data['url'] = SimpleSAML_Module::getModuleURL('exampleattributeserver/attributeserver.php');
+}
+
+if (!array_key_exists('attributes', $data)) {
+	$data['attributes'] = NULL;
+}
+
+$session->setData('attributequeryexample:data', $dataId, $data, 3600);
+
+if (array_key_exists('send', $_REQUEST)) {
+
+	$nameId = array(
+		'Format' => $data['nameIdFormat'],
+		'Value' => $data['nameIdValue'],
+		'NameQualifier' => $data['nameIdQualifier'],
+		'SPNameQualifier' => $data['nameIdSPQualifier'],
+	);
+	if (empty($nameId['NameQualifier'])) {
+		$nameId['NameQualifier'] = NULL;
+	}
+	if (empty($nameId['SPNameQualifier'])) {
+		$nameId['SPNameQualifier'] = NULL;
+	}
+
+	sendQuery($dataId, $data['url'], $nameId);
+}
+
+$t = new SimpleSAML_XHTML_Template(SimpleSAML_Configuration::getInstance(), 'attributequery.php');
+$t->data['dataId'] = $dataId;
+$t->data['url'] = $data['url'];
+$t->data['nameIdFormat'] = $data['nameIdFormat'];
+$t->data['nameIdValue'] = $data['nameIdValue'];
+$t->data['nameIdQualifier'] = $data['nameIdQualifier'];
+$t->data['nameIdSPQualifier'] = $data['nameIdSPQualifier'];
+$t->data['attributes'] = $data['attributes'];
+
+$t->show();