Class: Rack::CAS
- Inherits:
-
Object
- Object
- Rack::CAS
- Defined in:
- lib/rack/cas.rb
Instance Attribute Summary collapse
-
#server_url ⇒ Object
Returns the value of attribute server_url.
Instance Method Summary collapse
- #call(env) ⇒ Object
-
#initialize(app, config = {}) ⇒ CAS
constructor
A new instance of CAS.
Constructor Details
#initialize(app, config = {}) ⇒ CAS
Returns a new instance of CAS.
9 10 11 12 13 14 15 16 17 18 19 |
# File 'lib/rack/cas.rb', line 9 def initialize(app, config={}) @app = app @server_url = config.delete(:server_url) @session_store = config.delete(:session_store) @config = config raise ArgumentError, 'server_url is required' if @server_url.nil? if @session_store && !@session_store.respond_to?(:destroy_session_by_cas_ticket) raise ArgumentError, 'session_store does not support single-sign-out' end end |
Instance Attribute Details
#server_url ⇒ Object
Returns the value of attribute server_url.
7 8 9 |
# File 'lib/rack/cas.rb', line 7 def server_url @server_url end |
Instance Method Details
#call(env) ⇒ Object
21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 |
# File 'lib/rack/cas.rb', line 21 def call(env) request = Rack::Request.new(env) cas_request = CASRequest.new(request) if cas_request.ticket_validation? log env, 'rack-cas: Intercepting ticket validation request.' user, extra_attrs = get_user(request.url, cas_request.ticket) store_session request, user, cas_request.ticket, extra_attrs return redirect_to cas_request.service_url end if cas_request.logout? log env, 'rack-cas: Intercepting logout request.' request.session.clear return redirect_to server.logout_url.to_s end if cas_request.single_sign_out? && @session_store log env, 'rack-cas: Intercepting single-sign-out request.' @session_store.destroy_session_by_cas_ticket(cas_request.ticket) return [200, {'Content-Type' => 'text/plain'}, ['CAS Single-Sign-Out request intercepted.']] end response = @app.call(env) if response[0] == 401 # access denied log env, 'rack-cas: Intercepting 401 access denied response. Redirecting to CAS login.' redirect_to server.login_url(request.url).to_s else response end end |