module Devise::Models::SamlAuthenticatable::ClassMethods

Public Instance Methods

attribute_map(saml_response = nil) click to toggle source
# File lib/devise_saml_authenticatable/model.rb, line 84
def attribute_map(saml_response = nil)
  attribute_map_resolver.new(saml_response).attribute_map
end
attribute_map_resolver() click to toggle source
# File lib/devise_saml_authenticatable/model.rb, line 88
def attribute_map_resolver
  if Devise.saml_attribute_map_resolver.respond_to?(:new)
    Devise.saml_attribute_map_resolver
  else
    Devise.saml_attribute_map_resolver.constantize
  end
end
authenticate_with_saml(saml_response, relay_state) click to toggle source
# File lib/devise_saml_authenticatable/model.rb, line 32
def authenticate_with_saml(saml_response, relay_state)
  key = Devise.saml_default_user_key
  decorated_response = ::SamlAuthenticatable::SamlResponse.new(
    saml_response,
    attribute_map(saml_response),
  )
  if Devise.saml_use_subject
    auth_value = saml_response.name_id
  else
    auth_value = decorated_response.attribute_value_by_resource_key(key)
  end
  auth_value.try(:downcase!) if Devise.case_insensitive_keys.include?(key)

  resource = Devise.saml_resource_locator.call(self, decorated_response, auth_value)

  raise "Only one validator configuration can be used at a time" if Devise.saml_resource_validator && Devise.saml_resource_validator_hook
  if Devise.saml_resource_validator || Devise.saml_resource_validator_hook
    valid = if Devise.saml_resource_validator then Devise.saml_resource_validator.new.validate(resource, saml_response)
            else Devise.saml_resource_validator_hook.call(resource, decorated_response, auth_value)
            end
    if !valid
      logger.info("User(#{auth_value}) did not pass custom validation.")
      return nil
    end
  end

  if resource.nil?
    if Devise.saml_create_user
      logger.info("Creating user(#{auth_value}).")
      resource = new
    else
      logger.info("User(#{auth_value}) not found.  Not configured to create the user.")
      return nil
    end
  end

  if Devise.saml_update_user || (resource.new_record? && Devise.saml_create_user)
    Devise.saml_update_resource_hook.call(resource, decorated_response, auth_value)
  end

  resource
end
find_for_shibb_authentication(conditions) click to toggle source
# File lib/devise_saml_authenticatable/model.rb, line 80
def find_for_shibb_authentication(conditions)
  find_for_authentication(conditions)
end
reset_session_key_for(name_id) click to toggle source
# File lib/devise_saml_authenticatable/model.rb, line 75
def reset_session_key_for(name_id)
  resource = find_by(Devise.saml_default_user_key => name_id)
  resource.update_attribute(Devise.saml_session_index_key, nil) unless resource.nil?
end