flipbox\saml\idp\controllers\LoginController

Complexity

Total Complexity

12

Size/Duplication

Total Lines	186
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	11

Test Coverage

Coverage

3.7%

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	beforeAction()	0	4	1
B	actionIndex()	0	64	4
A	actionAfterLogin()	0	36	3
A	actionRequest()	0	51	3
A	getRelayState()	0	4	1

<?php
/**
 * Created by PhpStorm.
 * User: dsmrt
 * Date: 1/10/18
 * Time: 11:52 AM
 */

namespace flipbox\saml\idp\controllers;

use Craft;
use craft\helpers\UrlHelper;
use flipbox\saml\core\controllers\messages\AbstractController;
use flipbox\saml\core\exceptions\InvalidMessage;
use flipbox\saml\core\helpers\MessageHelper;
use flipbox\saml\core\helpers\SerializeHelper;
use flipbox\saml\core\services\bindings\Factory;
use flipbox\saml\idp\records\ProviderRecord;
use flipbox\saml\idp\Saml;
use flipbox\saml\idp\traits\SamlPluginEnsured;
use SAML2\AuthnRequest;
use flipbox\saml\core\exceptions\InvalidMetadata;
use yii\web\HttpException;

class LoginController extends AbstractController
{
    use SamlPluginEnsured;

    protected $allowAnonymous = [
        'actionIndex',
        'actionRequest',
    ];

    public $enableCsrfValidation = false;

    /**
     * @param \yii\base\Action $action
     * @return bool
     */
    public function beforeAction($action)
    {
        return true;
    }

    /**
     * @throws \flipbox\saml\core\exceptions\InvalidMessage
     * @throws \flipbox\saml\core\exceptions\InvalidMetadata
     */
    public function actionIndex()
    {

        /** @var AuthnRequest $authnRequest */
        $authnRequest = Factory::receive();

        /** @var ProviderRecord $serviceProvider */
        $serviceProvider = Saml::getInstance()->getProvider()->findByEntityId(
            MessageHelper::getIssuer($authnRequest->getIssuer())
        )->one();

        if (is_null($serviceProvider)) {
            throw new InvalidMessage("Invalid Issuer.");
        }

        Saml::getInstance()->getAuthnRequest()->isValid($authnRequest, $serviceProvider);

        /**
         * Check relay state
         */

        if ($relayState = $this->getRelayState()) {
            $authnRequest->setRelayState($relayState);
        }

        if ($user = Craft::$app->getUser()->getIdentity()) {

The method getUser does only exist in yii\web\Application, but not in yii\console\Application.

            $identityProvider = Saml::getInstance()->getProvider()->findOwn();

            //create response and send back to the sp
            $response = Saml::getInstance()->getResponse()->create(
                $user,
                $identityProvider,
                $serviceProvider,
                Saml::getInstance()->getSettings(),
                $authnRequest
            );

            Saml::getInstance()->getResponse()->finalizeWithAuthnRequest($response, $authnRequest);

            $identity = Saml::getInstance()->getProviderIdentity()->findByUserAndProviderOrCreate(
                $user,
                $serviceProvider
            );

            Saml::getInstance()->getProviderIdentity()->save($identity);

            Factory::send($response, $serviceProvider);
            return;
        }

        //save to session and redirect to login
        Saml::getInstance()->getSession()->setAuthnRequest($authnRequest);

        \Craft::$app->user->setReturnUrl(
            UrlHelper::actionUrl(
                Saml::getInstance()->getHandle() . '/login/after-login'
            )
        );

        $this->redirect(
            Craft::$app->config->general->getLoginPath()
        );
        return;
    }

    public function actionAfterLogin()
    {

        if (! $authnRequest = Saml::getInstance()->getSession()->getAuthnRequest()) {
            return;
        }

        // Clear the session
        Saml::getInstance()->getSession()->remove();

        if (! $user = \Craft::$app->getUser()->getIdentity()) {

The method getUser does only exist in yii\web\Application, but not in yii\console\Application.

            throw new HttpException('Unknown Identity.');
        }

        // load our container
        Saml::getInstance()->loadSaml2Container();

        /** @var ProviderRecord $serviceProvider */
        $serviceProvider = Saml::getInstance()->getProvider()->findByEntityId(
            MessageHelper::getIssuer($authnRequest->getIssuer())
        )->one();

        $identityProvider = Saml::getInstance()->getProvider()->findOwn();

        $response = Saml::getInstance()->getResponse()->create(
            $user,
            $identityProvider,
            $serviceProvider,
            Saml::getInstance()->getSettings(),
            $authnRequest
        );

        Saml::getInstance()->getResponse()->finalizeWithAuthnRequest($response, $authnRequest);

        Factory::send($response, $serviceProvider);
    }

    public function actionRequest($uid)
    {
        //build uid condition
        $uidCondition = [
            'uid' => $uid,
        ];

        /**
         * @var ProviderRecord $sp
         */
        if (! $serviceProvider = Saml::getInstance()->getProvider()->findBySp(
            $uidCondition
        )->one()
        ) {
            throw new InvalidMetadata('IDP Metadata Not found!');
        }

        if ($user = Craft::$app->getUser()->getIdentity()) {

The method getUser does only exist in yii\web\Application, but not in yii\console\Application.

            $identityProvider = Saml::getInstance()->getProvider()->findOwn();

            //create response and send back to the sp
            $response = Saml::getInstance()->getResponse()->create(
                $user,
                $identityProvider,
                $serviceProvider,
                Saml::getInstance()->getSettings()
            );

            $response->setRelayState($this->getRelayState());

            $identity = Saml::getInstance()->getProviderIdentity()->findByUserAndProviderOrCreate(
                $user,
                $serviceProvider
            );

            Saml::getInstance()->getProviderIdentity()->save($identity);

            Factory::send($response, $serviceProvider);
            return;
        }

        //save to session and redirect to login
        \Craft::$app->user->setReturnUrl(
            \Craft::$app->request->getAbsoluteUrl()
        );

        $this->redirect(
            Craft::$app->config->general->getLoginPath()
        );
        return;
    }

    /**
     * @return string
     */
    protected function getRelayState(): string
    {
        return \Craft::$app->request->getParam('RelayState') ?? '';
    }
}