worteks
/
lemonldap-ng
mirror of https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng
3
0
Fork 0
Code Issues Projects Releases Wiki Activity

Verify CAS with multiple app (#1183)

Browse Source
environments/ppa-mbqj77/deployments/1
Xavier Guimard 8 years ago
parent 3ab746eabb
commit 3203c82ccf
5 changed files with 59 additions and 31 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 1
      TODO-2.0.md
  2. 4
      lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Auth/CAS.pm
  3. 5
      lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-app.t
  4. 31
      lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-default.t
  5. 49
      lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-proxied.t

1
TODO-2.0.md
Unescape View File

@ -1,4 +1,3 @@
* CAS: use exportedVars in issuers (with casAttributes as default)
* Add new SMTP params
* unhandled parameters:
* issuerDB\*Rule

4
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Auth/CAS.pm
Unescape View File

@ -140,10 +140,10 @@ sub extractFormInfo {
else {
# Server list
my $portalPath = $self->{portal};
my $portalPath = $self->conf->{portal};
$portalPath =~ s#^https?://[^/]+/?#/#;
$req->datas->{list} = $self->opList;
$req->datas->{list} = $self->casAppList;
$req->datas->{confirmRemember} = 0;
$req->datas->{login} = 1;

5
lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-app.t
Unescape View File

@ -232,7 +232,10 @@ sub issuer {
casAppMetaDataOptions => {
sp => {
casAppMetaDataOptionsService => 'http://auth.sp.com',
}
},
sp2 => {
casAppMetaDataOptionsService => 'http://auth.sp2.com',
},
},
}
}

31
lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-default.t
Unescape View File

@ -30,6 +30,8 @@ ok(
'Unauth SP request'
);
count(1);
ok( expectCookie( $res, 'llngcasserver' ) eq 'idp', 'Get CAS server cookie' );
count(1);
expectRedirection( $res,
'http://auth.idp.com/cas/login?service=http%3A%2F%2Fauth.sp.com%2F' );
@ -71,13 +73,21 @@ my $idpId = expectCookie($res);
# Back to SP
switch ('sp');
ok( $res = $sp->_get( '/', query => $query, accept => 'text/html' ),
'Query SP with ticket' );
ok(
$res = $sp->_get(
'/',
query => $query,
accept => 'text/html',
cookie => 'llngcasserver=idp',
),
'Query SP with ticket'
);
count(1);
my $spId = expectCookie($res);
# Test authentication
ok( $res = $sp->_get( '/', cookie => "lemonldap=$spId" ), 'Get / on SP' );
ok( $res = $sp->_get( '/', cookie => "lemonldap=$spId,llngcasserver=idp" ),
'Get / on SP' );
count(1);
expectOK($res);
expectAuthenticatedAs( $res, 'french' );
@ -86,9 +96,9 @@ expectAuthenticatedAs( $res, 'french' );
ok( $res = $sp->_get("/sessions/global/$spId"), 'Get UTF-8' );
expectOK($res);
ok( $res = eval { JSON::from_json( $res->[2]->[0] ) }, ' GET JSON' )
or print STDERR $@;
or print STDERR $@;
ok( $res->{cn} eq 'Frédéric Accents', 'UTF-8 values' )
or explain( $res, 'cn => Frédéric Accents' );
or explain( $res, 'cn => Frédéric Accents' );
count(3);
# Logout initiated by SP
@ -96,7 +106,7 @@ ok(
$res = $sp->_get(
'/',
query => 'logout',
cookie => "lemonldap=$spId",
cookie => "lemonldap=$spId,llngcasserver=idp",
accept => 'text/html'
),
'Query SP for logout'
@ -143,8 +153,11 @@ expectReject($res);
switch ('sp');
ok(
$res =
$sp->_get( '/', accept => 'text/html', cookie => "lemonldap=$idpId" ),
$res = $sp->_get(
'/',
accept => 'text/html',
cookie => "lemonldap=$idpId,llngcasserver=idp"
),
'Query IdP'
);
count(1);
@ -160,7 +173,7 @@ no warnings 'redefine';
sub LWP::UserAgent::request {
my ( $self, $req ) = @_;
ok( $req->uri =~ m#http://auth.((?:id|s)p).com([^\?]*)(?:\?(.*))?$#,
' SOAP request' );
' Request to ' . $req->uri );
my $host = $1;
my $url = $2;
my $query = $3;

49
lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-proxied.t
Unescape View File

@ -30,6 +30,8 @@ ok(
'Unauth SP request'
);
count(1);
ok( expectCookie( $res, 'llngcasserver' ) eq 'idp', 'Get CAS server cookie' );
count(1);
expectRedirection( $res,
'http://auth.idp.com/cas/login?service=http%3A%2F%2Fauth.sp.com%2F' );
@ -71,13 +73,21 @@ my $idpId = expectCookie($res);
# Back to SP
switch ('sp');
ok( $res = $sp->_get( '/', query => $query, accept => 'text/html' ),
'Query SP with ticket' );
ok(
$res = $sp->_get(
'/',
query => $query,
accept => 'text/html',
cookie => 'llngcasserver=idp',
),
'Query SP with ticket'
);
count(1);
my $spId = expectCookie($res);
# Test authentication
ok( $res = $sp->_get( '/', cookie => "lemonldap=$spId" ), 'Get / on SP' );
ok( $res = $sp->_get( '/', cookie => "lemonldap=$spId,llngcasserver=idp" ),
'Get / on SP' );
count(1);
expectOK($res);
expectAuthenticatedAs( $res, 'french' );
@ -86,9 +96,9 @@ expectAuthenticatedAs( $res, 'french' );
ok( $res = $sp->_get("/sessions/global/$spId"), 'Get UTF-8' );
expectOK($res);
ok( $res = eval { JSON::from_json( $res->[2]->[0] ) }, ' GET JSON' )
or print STDERR $@;
or print STDERR $@;
ok( $res->{cn} eq 'Frédéric Accents', 'UTF-8 values' )
or explain( $res, 'cn => Frédéric Accents' );
or explain( $res, 'cn => Frédéric Accents' );
count(3);
# Logout initiated by SP
@ -96,7 +106,7 @@ ok(
$res = $sp->_get(
'/',
query => 'logout',
cookie => "lemonldap=$spId",
cookie => "lemonldap=$spId,llngcasserver=idp",
accept => 'text/html'
),
'Query SP for logout'
@ -143,8 +153,11 @@ expectReject($res);
switch ('sp');
ok(
$res =
$sp->_get( '/', accept => 'text/html', cookie => "lemonldap=$idpId" ),
$res = $sp->_get(
'/',
accept => 'text/html',
cookie => "lemonldap=$idpId,llngcasserver=idp"
),
'Query IdP'
);
count(1);
@ -160,7 +173,7 @@ no warnings 'redefine';
sub LWP::UserAgent::request {
my ( $self, $req ) = @_;
ok( $req->uri =~ m#http://auth.((?:id|s)p).com([^\?]*)(?:\?(.*))?$#,
' Request to '.$req->uri );
' Request to ' . $req->uri );
my $host = $1;
my $url = $2;
my $query = $3;
@ -230,14 +243,14 @@ sub sp {
return LLNG::Manager::Test->new(
{
ini => {
logLevel => $debug,
domain => 'sp.com',
portal => 'http://auth.sp.com',
authentication => 'CAS',
userDB => 'CAS',
restSessionServer => 1,
issuerDBCASActivation => 0,
multiValuesSeparator => ';',
logLevel => $debug,
domain => 'sp.com',
portal => 'http://auth.sp.com',
authentication => 'CAS',
userDB => 'CAS',
restSessionServer => 1,
issuerDBCASActivation => 0,
multiValuesSeparator => ';',
casSrvMetaDataExportedVars => {
idp => {
cn => 'cn',
@ -248,7 +261,7 @@ sub sp {
casSrvMetaDataOptions => {
idp => {
casSrvMetaDataOptionsUrl => 'http://auth.idp.com/cas',
casSrvMetaDataOptionsGateway => 0,
casSrvMetaDataOptionsGateway => 0,
casSrvMetaDataOptionsProxiedServices => {
test => 'http://test.sp.com/',
},

Write Preview
Loading…
Cancel
Save