saml20-clj.sp — metabase/saml20-clj 1.0.1

bump-saml-id-timeout! clj

(bump-saml-id-timeout! saml-id-timeouts saml-id issue-instant)

Sets the current time to the provided saml-id in the saml-id-timeouts ref map. This function has side-effects.

create-request clj

(create-request time-issued
                saml-format
                saml-service-name
                saml-id
                acs-url
                idp-uri)

Return XML elements that represent a SAML 2.0 auth request.

create-request-factory clj

(create-request-factory mutables idp-uri saml-format saml-service-name acs-url)

(create-request-factory next-saml-id-fn!
                        bump-saml-id-timeout-fn!
                        xml-signer
                        idp-uri
                        saml-format
                        saml-service-name
                        acs-url)

Creates new requests for a particular service, format, and acs-url.

generate-mutables clj

(generate-mutables)

get-idp-redirect clj

(get-idp-redirect idp-url saml-request relay-state)

Return Ring response for HTTP 302 redirect.

make-saml-decrypter clj

(make-saml-decrypter keystore-filename keystore-password key-alias)

make-saml-signer clj

(make-saml-signer keystore-filename
                  keystore-password
                  key-alias
                  &
                  {:keys [algorithm] :or {algorithm :sha1}})

metadata clj

(metadata app-name acs-uri certificate-str)

next-saml-id! clj

(next-saml-id! saml-last-id)

Returns the next available saml id.

parse-saml-assertion clj

(parse-saml-assertion assertion)

Returns the attributes and the 'audiences' for the given SAML assertion

parse-saml-resp-status clj

(parse-saml-resp-status saml-resp)

Parses and returns information about the status (i.e. successful or not), the version, addressing info etc. of the SAML response

Check the javadoc of OpenSAML at:

https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/org/opensaml/opensaml/2.5.3/opensaml-2.5.3-javadoc.jar/!/index.html

parse-saml-response clj

(parse-saml-response raw-response)

Does everything from parsing the verifying saml data to returning it in an easy to use map.

prune-timed-out-ids! clj

(prune-timed-out-ids! saml-id-timeouts timeout-duration)

Given a timeout duration, remove all SAML IDs that are older than now minus the timeout.

pull-attrs clj

(pull-attrs loc attrs)

response->map clj

(response->map saml-resp)

Parses and performs final validation of the request. An exception will be thrown if validation fails.

saml-resp->assertions clj

(saml-resp->assertions saml-resp decrypter)

Returns the assertions (encrypted or not) of a SAML Response object

validate-saml-response-signature clj

(validate-saml-response-signature saml-resp idp-cert)

Checks (if exists) the signature of SAML Response given the IdP certificate

xml-string->saml-resp clj

(xml-string->saml-resp xml-string)

Parses a SAML response (XML string) from IdP and returns the corresponding (Open)SAML Response object