16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
# File 'lib/devise_saml_authenticatable/model.rb', line 16
def authenticate_with_saml(saml_response, relay_state)
key = Devise.saml_default_user_key
decorated_response = ::SamlAuthenticatable::SamlResponse.new(
saml_response,
attribute_map(saml_response),
)
if Devise.saml_use_subject
auth_value = saml_response.name_id
else
auth_value = decorated_response.attribute_value_by_resource_key(key)
end
auth_value.try(:downcase!) if Devise.case_insensitive_keys.include?(key)
resource = Devise.saml_resource_locator.call(self, decorated_response, auth_value)
raise "Only one validator configuration can be used at a time" if Devise.saml_resource_validator && Devise.saml_resource_validator_hook
if Devise.saml_resource_validator || Devise.saml_resource_validator_hook
valid = if Devise.saml_resource_validator then Devise.saml_resource_validator.new.validate(resource, saml_response)
else Devise.saml_resource_validator_hook.call(resource, decorated_response, auth_value)
end
if !valid
logger.info("#{self.name}(#{auth_value}) did not pass custom validation.")
return nil
end
end
create_user = if Devise.saml_create_user.respond_to?(:call) then Devise.saml_create_user.call(self, decorated_response, auth_value)
else Devise.saml_create_user
end
if resource.nil?
if create_user
logger.info("Creating #{self.name.downcase}(#{auth_value}).")
resource = new
else
logger.info("#{self.name}(#{auth_value}) not found. Not configured to create the #{self.name.downcase}.")
return nil
end
end
update_user = if Devise.saml_update_user.respond_to?(:call) then Devise.saml_update_user.call(self, decorated_response, auth_value)
else Devise.saml_update_user
end
if update_user || (resource.new_record? && create_user)
Devise.saml_update_resource_hook.call(resource, decorated_response, auth_value)
end
resource
end
|