// Copyright 2019 Yunion
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package saml
import (
"context"
"fmt"
"yunion.io/x/log"
"yunion.io/x/pkg/appctx"
"yunion.io/x/pkg/errors"
"yunion.io/x/pkg/util/samlutils"
"yunion.io/x/onecloud/pkg/appsrv"
"yunion.io/x/onecloud/pkg/cloudid/models"
"yunion.io/x/onecloud/pkg/cloudid/options"
"yunion.io/x/onecloud/pkg/httperrors"
"yunion.io/x/onecloud/pkg/i18n"
"yunion.io/x/onecloud/pkg/mcclient/auth"
"yunion.io/x/onecloud/pkg/util/samlutils/idp"
)
func initSAMLIdp(app *appsrv.Application, prefix string) error {
spFunc := func(ctx context.Context, idpId string, sp *idp.SSAMLServiceProvider) (samlutils.SSAMLSpInitiatedLoginData, error) {
token := auth.FetchUserCredential(ctx, nil)
log.Debugf("Recive SP initiated Login: %s", sp.GetEntityId())
data := samlutils.SSAMLSpInitiatedLoginData{}
driver := models.FindDriver(sp.GetEntityId())
if driver == nil {
return data, errors.Wrapf(httperrors.ErrResourceNotFound, "entityID %s not found", sp.GetEntityId())
}
data, err := driver.GetSpInitiatedLoginData(ctx, token, idpId, sp)
if err != nil {
return data, errors.Wrap(err, "driver.GetSpInitiatedLoginData")
}
return data, nil
}
idpFunc := func(ctx context.Context, sp *idp.SSAMLServiceProvider, idpId, redirectUrl string) (samlutils.SSAMLIdpInitiatedLoginData, error) {
token := auth.FetchUserCredential(ctx, nil)
log.Debugf("Recive IDP initiated Login: %s", sp.GetEntityId())
data := samlutils.SSAMLIdpInitiatedLoginData{}
driver := models.FindDriver(sp.GetEntityId())
if driver == nil {
return data, errors.Wrapf(httperrors.ErrResourceNotFound, "entityID %s not found", sp.GetEntityId())
}
data, err := driver.GetIdpInitiatedLoginData(ctx, token, idpId, sp, redirectUrl)
if err != nil {
return data, errors.Wrap(err, "driver.GetIdpInitiatedLoginData")
}
return data, nil
}
logoutFunc := func(ctx context.Context, idpId string) string {
switch appctx.AppContextLang(ctx) {
case "zh-CN":
return fmt.Sprintf(``, options.Options.ApiServer)
default:
return fmt.Sprintf(``, options.Options.ApiServer)
}
}
idpInst := idp.NewIdpInstance(saml, spFunc, idpFunc, logoutFunc)
for _, drvFactory := range models.AllDrivers() {
metaBytes, err := models.GetMetadata(drvFactory)
if err != nil {
return err
}
err = idpInst.AddSPMetadata(metaBytes)
if err != nil {
return errors.Wrapf(err, "AddSPMetadata %s", metaBytes)
}
}
idpInst.AddHandlers(app, prefix, auth.Authenticate)
idpInst.SetHtmlTemplate(i18n.NewTableEntry().CN(`正在跳转到云控制台，请等待。。。
$FORM$`).EN(`Login into to the cloud console, please wait。。。
$FORM$`))
idpInstance = idpInst
return nil
}