saml-service-provider.core — org.clojars.rutledgepaulv/saml-service-provider 0.1.2

acs-handler clj

(acs-handler auth-fn settings)

authn-handler clj

(authn-handler settings)

initiate-logout-handler clj

(initiate-logout-handler settings)

metadata-handler clj

(metadata-handler settings)

perform-logout-handler clj

(perform-logout-handler settings)

wrap-saml-authentication clj

(wrap-saml-authentication
  handler
  {:keys [auth-fn endpoints idp-metadata-url onelogin-settings]
   :or {auth-fn identity
        endpoints {:authn "/saml/login"
                   :acs "/saml/acs"
                   :metadata "/saml/metadata"
                   :initiate-logout "/saml/initiate-logout"
                   :confirm-logout "/saml/confirm-logout"}}})

Wraps a ring handler with required SAML authentication.

auth-fn - an optional function to interpret the saml response data into an authenticated identity. defaults to clojure.core/identity endpoints - a map of uris for each of the saml endpoints being implemented by this middleware. sp-base-url - an optional base url for this app from which the service provider endpoints can be constructed for insertion into the service provider metadata, otherwise you must provide the full urls in the onelogin-settings idp-metadata-url - an optional url from which to access the idp metadata. if provided metadata will be accessed, parsed, and made part of the onelogin-settings for the middleware in order to configure the provider settings. at this time no attempt is made to periodically refresh the idp configuration. onelogin-settings - a map of onelogin settings used to configure the service provider (certificates, contact info, etc)