class Samlr::Condition

Attributes

audience[R]
not_before[R]
not_on_or_after[R]
options[R]

Public Class Methods

new(condition, options) click to toggle source
# File lib/samlr/condition.rb, line 5
def initialize(condition, options)
  @options         = options
  @not_before      = (condition || {})["NotBefore"]
  @not_on_or_after = (condition || {})["NotOnOrAfter"]
  @audience        = extract_audience(condition)
end

Public Instance Methods

audience_satisfied?() click to toggle source
# File lib/samlr/condition.rb, line 36
def audience_satisfied?
  options[:audience].nil? ||
  audience.nil?           ||
  audience.empty?         ||
  audience.any? { |a| options[:audience] === a }
end
not_before_satisfied?() click to toggle source
# File lib/samlr/condition.rb, line 28
def not_before_satisfied?
  not_before.nil? || Samlr::Tools::Timestamp.not_before?(Samlr::Tools::Timestamp.parse(not_before))
end
not_on_or_after_satisfied?() click to toggle source
# File lib/samlr/condition.rb, line 32
def not_on_or_after_satisfied?
  not_on_or_after.nil? || Samlr::Tools::Timestamp.not_on_or_after?(Samlr::Tools::Timestamp.parse(not_on_or_after))
end
verify!() click to toggle source
# File lib/samlr/condition.rb, line 12
def verify!
  unless not_before_satisfied?
    raise Samlr::ConditionsError.new("Not before violation, now #{Samlr::Tools::Timestamp.stamp} vs. earliest #{not_before}")
  end

  unless not_on_or_after_satisfied?
    raise Samlr::ConditionsError.new("Not on or after violation, now #{Samlr::Tools::Timestamp.stamp} vs. at latest #{not_on_or_after}")
  end

  unless audience_satisfied?
    raise Samlr::ConditionsError.new("Audience violation, expected #{options[:audience]} vs. #{audience}")
  end

  true
end

Private Instance Methods

extract_audience(condition) click to toggle source
# File lib/samlr/condition.rb, line 45
def extract_audience(condition)
  return unless condition

  audience_restriction_node = condition.at('./saml:AudienceRestriction', NS_MAP)
  return unless audience_restriction_node

  audience_nodes = audience_restriction_node.search('./saml:Audience', NS_MAP)
  return unless audience_nodes.any?

  audience_nodes.map(&:text)
end