runff 1.0 commit

2019-04-29 16:09:00 +02:00
commit f1567f989b
1268 changed files with 98652 additions and 0 deletions
--- a/lib/SimpleSAML/IdP/IFrameLogoutHandler.php
+++ b/lib/SimpleSAML/IdP/IFrameLogoutHandler.php
@@ -0,0 +1,119 @@
+<?php
+
+namespace SimpleSAML\IdP;
+
+use SimpleSAML\Module;
+use SimpleSAML\Utils\HTTP;
+
+/**
+ * Class that handles iframe logout.
+ *
+ * @package SimpleSAMLphp
+ */
+class IFrameLogoutHandler implements LogoutHandlerInterface
+{
+
+    /**
+     * The IdP we are logging out from.
+     *
+     * @var \SimpleSAML_IdP
+     */
+    private $idp;
+
+
+    /**
+     * LogoutIFrame constructor.
+     *
+     * @param \SimpleSAML_IdP $idp The IdP to log out from.
+     */
+    public function __construct(\SimpleSAML_IdP $idp)
+    {
+        $this->idp = $idp;
+    }
+
+    /**
+     * Start the logout operation.
+     *
+     * @param array &$state The logout state.
+     * @param string|null $assocId The SP we are logging out from.
+     */
+    public function startLogout(array &$state, $assocId)
+    {
+        assert(is_string($assocId) || $assocId === null);
+
+        $associations = $this->idp->getAssociations();
+
+        if (count($associations) === 0) {
+            $this->idp->finishLogout($state);
+        }
+
+        foreach ($associations as $id => &$association) {
+            $idp = \SimpleSAML_IdP::getByState($association);
+            $association['core:Logout-IFrame:Name'] = $idp->getSPName($id);
+            $association['core:Logout-IFrame:State'] = 'onhold';
+        }
+        $state['core:Logout-IFrame:Associations'] = $associations;
+
+        if (!is_null($assocId)) {
+            $spName = $this->idp->getSPName($assocId);
+            if ($spName === null) {
+                $spName = array('en' => $assocId);
+            }
+
+            $state['core:Logout-IFrame:From'] = $spName;
+        } else {
+            $state['core:Logout-IFrame:From'] = null;
+        }
+
+        $params = array(
+            'id' => \SimpleSAML_Auth_State::saveState($state, 'core:Logout-IFrame'),
+        );
+        if (isset($state['core:Logout-IFrame:InitType'])) {
+            $params['type'] = $state['core:Logout-IFrame:InitType'];
+        }
+
+        $url = Module::getModuleURL('core/idp/logout-iframe.php', $params);
+        HTTP::redirectTrustedURL($url);
+    }
+
+
+    /**
+     * Continue the logout operation.
+     *
+     * This function will never return.
+     *
+     * @param string $assocId The association that is terminated.
+     * @param string|null $relayState The RelayState from the start of the logout.
+     * @param \SimpleSAML_Error_Exception|null $error The error that occurred during session termination (if any).
+     */
+    public function onResponse($assocId, $relayState, \SimpleSAML_Error_Exception $error = null)
+    {
+        assert(is_string($assocId));
+
+        $spId = sha1($assocId);
+        $this->idp->terminateAssociation($assocId);
+
+        $header = <<<HEADER
+<!DOCTYPE html>
+<html>
+ <head>
+  <title>Logout response from %s</title>
+  <script>
+HEADER;
+        printf($header, htmlspecialchars(var_export($assocId, true)));
+        if ($error) {
+            $errorMsg = $error->getMessage();
+            echo('window.parent.logoutFailed("'.$spId.'", "'.addslashes($errorMsg).'");');
+        } else {
+            echo('window.parent.logoutCompleted("'.$spId.'");');
+        }
+        echo <<<FOOTER
+  </script>
+ </head>
+ <body>
+ </body>
+</html>
+FOOTER;
+        exit(0);
+    }
+}