summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authormo khan <mo@mokhan.ca>2025-02-27 13:56:52 -0700
committermo khan <mo@mokhan.ca>2025-02-27 13:56:52 -0700
commit03136747dd80e8b9ded81a61e03e72e9c4beac11 (patch)
treec1b6c7016399eba1c5ed624e715ae1bbb8095622 /src
parentd5bfefac388467bc99b7c7d48a74743d3598122b (diff)
Move src file to bin dir
Diffstat (limited to 'src')
-rw-r--r--src/idp/.gitignore1
-rw-r--r--src/idp/README.md12
-rwxr-xr-xsrc/idp/main.rb171
-rw-r--r--src/sp/README.md16
-rw-r--r--src/sp/main.rb147
5 files changed, 0 insertions, 347 deletions
diff --git a/src/idp/.gitignore b/src/idp/.gitignore
deleted file mode 100644
index 1d3ed4c1..00000000
--- a/src/idp/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-config.yml
diff --git a/src/idp/README.md b/src/idp/README.md
deleted file mode 100644
index a9d8f2a7..00000000
--- a/src/idp/README.md
+++ /dev/null
@@ -1,12 +0,0 @@
-# SAML IdP
-
-This is a tiny SAML Identity Provider for testing out interactions with
-a SAML Service Provider
-
-## Getting Started
-
-1. Start the server:
-
- $ ruby main.rb
-
-1. Use `http://localhost:8282/metadata.xml` as your SAML IdP Metadata url.
diff --git a/src/idp/main.rb b/src/idp/main.rb
deleted file mode 100755
index daa15cc6..00000000
--- a/src/idp/main.rb
+++ /dev/null
@@ -1,171 +0,0 @@
-#!/usr/bin/env ruby
-
-# Start the server by running:
-#
-# $ ruby main.rb
-
-require "bundler/inline"
-gemfile do
- source "https://rubygems.org"
-
- gem "erb", "~> 4.0"
- gem "rack", "~> 3.0"
- gem "rackup", "~> 2.0"
- gem "saml-kit", "~> 1.0"
- gem "webrick", "~> 1.0"
-end
-
-class User
- def initialize(attributes)
- @attributes = attributes
- end
-
- def name_id_for(name_id_format)
- @attributes[:email]
- end
-
- def assertion_attributes_for(request)
- {
- custom: 'custom attribute'
- }
- end
-end
-
-class OnDemandRegistry < Saml::Kit::DefaultRegistry
- def metadata_for(entity_id)
- found = super(entity_id)
- return found if found
-
- register_url(entity_id, verify_ssl: false)
- super(entity_id)
- end
-end
-
-Saml::Kit.configure do |x|
- x.entity_id = "http://localhost:8282/metadata.xml"
- x.registry = OnDemandRegistry.new
- x.logger = Logger.new("/dev/stderr")
-end
-
-class IdentityProvider
- def initialize
- @storage = {}
- end
-
- # Download IDP Metadata
- #
- # GET /metadata.xml
- def metadata
- xml = Saml::Kit::Metadata.build_xml do |builder|
- builder.contact_email = 'hi@example.com'
- builder.organization_name = "Acme, Inc"
- builder.organization_url = "https://example.com"
- builder.build_identity_provider do |x|
- x.add_single_sign_on_service("http://localhost:8282/sessions/new", binding: :http_post)
- x.name_id_formats = [Saml::Kit::Namespaces::EMAIL_ADDRESS]
- x.attributes << :Username
- end
- end
-
- [200, { 'Content-Type' => "application/samlmetadata+xml" }, [xml]]
- end
-
- def call(env)
- path = env['PATH_INFO']
- case env['REQUEST_METHOD']
- when 'GET'
- case path
- when "/metadata.xml"
- return metadata
- when "/sessions/new"
- return post_back(Rack::Request.new(env))
- else
- return not_found
- end
- when 'POST'
- case path
- when "/sessions/new"
- return post_back(Rack::Request.new(env))
- else
- return not_found
- end
- end
- not_found
- end
-
- private
-
- def post_back(request)
- params = saml_params_from(request)
- saml_request = binding_for(request).deserialize(params)
- @builder = nil
- url, saml_params = saml_request.response_for(
- User.new({ email: "example@example.com" }),
- binding: :http_post,
- relay_state: params[:RelayState]
- ) do |builder|
- builder.embed_signature = true
- @builder = builder
- end
- template = <<~ERB
- <!doctype html>
- <html>
- <head><title></title></head>
- <body>
- <h2>Recieved SAML Request</h2>
- <textarea readonly="readonly" disabled="disabled" cols=225 rows=6><%=- saml_request.to_xml(pretty: true) -%></textarea>
-
- <h2>Sending SAML Response (IdP -> SP)</h2>
- <textarea readonly="readonly" disabled="disabled" cols=225 rows=30><%=- @builder.build.to_xml(pretty: true) -%></textarea>
- <form action="<%= url %>" method="post">
- <%- saml_params.each do |(key, value)| -%>
- <input type="hidden" name="<%= key %>" value="<%= value %>" />
- <%- end -%>
- <input type="submit" value="Submit" />
- </form>
- </body>
- </html>
- ERB
- erb = ERB.new(template, nil, trim_mode: '-')
- html = erb.result(binding)
- [200, { 'Content-Type' => "text/html" }, [html]]
- end
-
-
- def not_found
- [404, {}, []]
- end
-
- def saml_params_from(request)
- if request.post?
- {
- "SAMLRequest" => request.params["SAMLRequest"],
- "RelayState" => request.params["RelayState"],
- }
- else
- query_string = request.query_string
- on = query_string.include?("&amp;") ? "&amp;" : "&"
- Hash[query_string.split(on).map { |x| x.split("=", 2) }].symbolize_keys
- end
- end
-
- def binding_for(request)
- location = "http://localhost:8282/sessions/new"
- if request.post?
- Saml::Kit::Bindings::HttpPost
- .new(location: location)
- else
- Saml::Kit::Bindings::HttpRedirect
- .new(location: location)
- end
- end
-end
-
-if __FILE__ == $0
- app = Rack::Builder.new do
- use Rack::Reloader
- run IdentityProvider.new
- end.to_app
-
- Rackup::Server.start(app: app, Port: 8282)
-end
diff --git a/src/sp/README.md b/src/sp/README.md
deleted file mode 100644
index c7894a62..00000000
--- a/src/sp/README.md
+++ /dev/null
@@ -1,16 +0,0 @@
-# SAML SP
-
-This is a tiny SAML Service Provider for testing out interactions with
-a SAML Identity Provider (IdP)
-
-## Getting Started
-
-1. Start the server:
-
- $ ruby main.rb
-
-1. Start ngrok
-
- $ ngrok http 8283
-
-1. Use `https://<xxxx>.ngrok.io/metadata.xml` as your SAML SP Metadata url.
diff --git a/src/sp/main.rb b/src/sp/main.rb
deleted file mode 100644
index 68a0e3db..00000000
--- a/src/sp/main.rb
+++ /dev/null
@@ -1,147 +0,0 @@
-#!/usr/bin/env ruby
-
-# Start the server by running:
-#
-# $ ruby main.rb
-
-require "bundler/inline"
-gemfile do
- source "https://rubygems.org"
-
- gem "base64", "~> 0.1"
- gem "erb", "~> 4.0"
- gem "rack", "~> 3.0"
- gem "rackup", "~> 2.0"
- gem "saml-kit", "~> 1.0"
- gem "webrick", "~> 1.0"
-end
-
-class OnDemandRegistry < Saml::Kit::DefaultRegistry
- def metadata_for(entity_id)
- found = super(entity_id)
- return found if found
-
- register_url(entity_id, verify_ssl: false)
- super(entity_id)
- end
-end
-
-Saml::Kit.configure do |x|
- x.entity_id = "http://localhost:8283/metadata.xml"
- x.registry = OnDemandRegistry.new
- x.logger = Logger.new("/dev/stderr")
-end
-
-class ServiceProvider
- def initialize
- @storage = {}
- end
-
- # Download IDP Metadata
- #
- # GET /metadata.xml
- def metadata
- xml = Saml::Kit::Metadata.build_xml do |builder|
- builder.embed_signature = false
- builder.contact_email = 'hi@example.com'
- builder.organization_name = "Acme, Inc"
- builder.organization_url = "https://example.com"
- builder.build_service_provider do |x|
- x.name_id_formats = [Saml::Kit::Namespaces::EMAIL_ADDRESS]
- x.add_assertion_consumer_service("http://localhost:8283/assertions", binding: :http_post)
- end
- end
-
- [200, { 'Content-Type' => "application/samlmetadata+xml" }, [xml]]
- end
-
- def call(env)
- path = env['PATH_INFO']
- case env['REQUEST_METHOD']
- when 'GET'
- case path
- when "/metadata.xml"
- return metadata
- else
- # TODO Generate a post to the IdP
- return post_to_idp(Rack::Request.new(env))
- end
- when 'POST'
- case path
- when "/assertions"
- # TODO:: Render the SAMLResponse from the IdP
- return assertions(Rack::Request.new(env))
- else
- return not_found
- end
- end
- not_found
- end
-
- private
-
- def not_found
- [404, {}, []]
- end
-
- def post_to_idp(request)
- idp = Saml::Kit.registry.metadata_for('http://localhost:8282/metadata.xml')
- relay_state = Base64.strict_encode64(JSON.generate(redirect_to: '/dashboard'))
-
- @saml_builder = nil
- uri, saml_params = idp.login_request_for(binding: :http_post, relay_state: relay_state) do |builder|
- @saml_builder = builder
- end
-
- template = <<~ERB
- <!doctype html>
- <html>
- <head><title></title></head>
- <body style="background-color: pink;">
- <h2>Sending SAML Request (SP -> IdP)</h2>
- <textarea readonly="readonly" disabled="disabled" cols=225 rows=6><%=- @saml_builder.to_xml(pretty: true) -%></textarea>
-
- <form action="<%= uri %>" method="post">
- <%- saml_params.each do |(key, value)| -%>
- <input type="hidden" name="<%= key %>" value="<%= value %>" />
- <%- end -%>
- <input type="submit" value="Submit" />
- </form>
- </body>
- </html>
- ERB
- erb = ERB.new(template, nil, trim_mode: '-')
- html = erb.result(binding)
- [200, { 'Content-Type' => "text/html" }, [html]]
- end
-
- def assertions(request)
- sp = Saml::Kit.registry.metadata_for('http://localhost:8283/metadata.xml')
- saml_binding = sp.assertion_consumer_service_for(binding: :http_post)
- saml_response = saml_binding.deserialize(request.params)
- raise saml_response.errors unless saml_response.valid?
-
- template = <<~ERB
- <!doctype html>
- <html>
- <head><title></title></head>
- <body style="background-color: pink;">
- <h2>Received SAML Response</h2>
- <textarea readonly="readonly" disabled="disabled" cols=220 rows=40><%=- saml_response.to_xml(pretty: true) -%></textarea>
- </body>
- </html>
- ERB
- erb = ERB.new(template, nil, trim_mode: '-')
- html = erb.result(binding)
- [200, { 'Content-Type' => "text/html" }, [html]]
- end
-end
-
-if __FILE__ == $0
- app = Rack::Builder.new do
- use Rack::Reloader
- run ServiceProvider.new
- end.to_app
-
- Rackup::Server.start(app: app, Port: 8283)
-end
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 08:57:45 +0000