nodebb v1.10.1
codeοΌ
(function(module) {
"use strict";
var user = module.parent.require('./user'),
meta = module.parent.require('./meta'),
db = module.parent.require('../src/database'),
passport = module.parent.require('passport'),
passportSAML = require('passport-saml').Strategy,
fs = module.parent.require('fs'),
path = module.parent.require('path'),
nconf = module.parent.require('nconf'),
async = module.parent.require('async'),
winston = require('winston');
var constants = Object.freeze({
'name': "SAML",
'admin': {
'route': '/plugins/sso-saml',
'icon': 'fa-university'
}
});
var SAML = {};
var samlObj;
if (meta.config['sso:saml:idpentrypoint'] && meta.config['sso:saml:callbackpath']&& meta.config["sso:saml:metadata"] && meta.config["sso:saml:issuer"]) {
console.log(nconf.get('url'));
samlObj = new passportSAML({
path: meta.config['sso:saml:callbackpath'],
entryPoint: meta.config['sso:saml:idpentrypoint'],
issuer: meta.config['sso:saml:issuer'],
callbackUrl: nconf.get('url') + meta.config['sso:saml:callbackpath'],
disableRequestedAuthnContext: true,
identifierFormat: null
},
function(profile, done) {
console.log(profile,'zheli');
var user = {
nameID: profile.nameID,
nameIDFormat: profile.nameIDFormat,
sn: profile['urn:oid:2.5.4.4'], // sn
//sn: profile.sn,
cn: profile['urn:oid:2.5.4.42'], // givenname
//cn: profile.cn,
//mail: profile.mail,
//eduPersonAffiliation: profile.eduPersonAffiliation,
email: profile.mail,
//email: profile.email,
username: profile['urn:oid:1.3.6.1.4.1.5923.1.1.1.2'], // eduPersonNickname
//username: profile.eduPersonNickname
};
SAML.login(user,function(err, user) {
if (err) {
return done(err);
}
done(null, user);
});
}
);
}
else{
console.log("No config info")
console.log(meta.config);
}
SAML.init = function(params,callback) {
// app, middleware, controllers, callback
var app = params.router;
var middleware = params.middleware;
var controllers = params.controllers;
function render(req, res, next) {
res.render('admin/plugins/sso-saml', {});
}
app.get('/admin/plugins/sso-saml', middleware.admin.buildHeader, render);
app.get('/api/admin/plugins/sso-saml', render);
console.log(456);
console.log(samlObj);
if (samlObj){
if (meta.config["sso:saml:metadata"]) {
app.get(meta.config["sso:saml:metadata"], function(req, res) {
console.log(123);
if (meta.config["sso:saml:servercrt"]){
var cert = fs.readFileSync(meta.config["sso:saml:servercrt"], 'utf-8');
res.header("Content-Type", "application/xml");
res.send(samlObj.generateServiceProviderMetadata(cert))
}
else{
res.send("No servercrt specified. Please enter it at nodebb admin panel.");
}
});
}
app.post(meta.config['sso:saml:callbackpath'],
passport.authenticate('saml'),
function(req, res, next){
if (meta.config['sso:saml:loginsuccessredirecturl']){
res.redirect(meta.config['sso:saml:loginsuccessredirecturl']);
}
else{
res.redirect("/");
}
}
);
if (meta.config['sso:saml:logouturl']) {
app.get(meta.config['sso:saml:logouturl'],function(req,res){
if (req.user && parseInt(req.user.uid, 10) > 0) {
winston.info('[Auth] Session ' + req.sessionID + ' logout (uid: ' + req.user.uid + ')');
var ws = module.parent.require('./socket.io');
ws.logoutUser(req.user.uid);
req.logout();
if (meta.config['sso:saml:logoutredirecturl']){
res.redirect(meta.config['sso:saml:logoutredirecturl']);
}
else{
res.redirect("/");
}
}
});
}
}
callback();
};
SAML.getStrategy = function(strategies, callback) {
console.log("filter:auth.init...");
console.log(strategies);
if (samlObj){
passport.use(samlObj);
strategies.push({
name: 'saml',
url: '/auth/saml',
callbackURL: meta.config['sso:saml:callbackpath'],
icon: constants.admin.icon,
scope: ''
});
}
callback(null, strategies);
};
SAML.login = function(userdata, callback) {
SAML.getUidBySAMLId(userdata.username, function(err, uid) {
if(err) {
return callback(err);
}
if (uid !== null) {
// Existing User
callback(null, {
uid: uid
});
}
else {
console.log(userdata);
// New User
user.create({
username: userdata.username,
email: userdata.email,
fullname : userdata.first_name + " " + userdata.last_name
}, function(err, uid) {
if(err) {
return callback(err);
}
user.setUserField(uid, 'samlid', userdata.username);
db.setObjectField('samlid:uid', userdata.username, uid);
callback(null, {
uid: uid
});
});
}
});
};
SAML.getUidBySAMLId = function(samlid, callback) {
db.getObjectField('samlid:uid', samlid, function(err, uid) {
if (err) {
return callback(err);
}
callback(null, uid);
});
};
SAML.addMenuItem = function(custom_header, callback) {
custom_header.authentication.push({
"route": constants.admin.route,
"icon": constants.admin.icon,
"name": constants.name
});
callback(null, custom_header);
};
SAML.deleteUserData = function(uid, callback) {
async.waterfall([
async.apply(user.getUserField, uid, 'samlid'),
function(idToDelete, next) {
db.deleteObjectField('samlid:uid', idToDelete, next);
}
], function(err) {
if (err) {
winston.error('[sso-saml] Could not remove user data for uid ' + uid + '. Error: ' + err);
return callback(err);
}
callback(null, uid);
});
};
module.exports = SAML;
}(module));
