1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
|
<?php
// Load SimpleSAMLphp configuration
$config = \SimpleSAML\Configuration::getInstance();
$session = \SimpleSAML\Session::getSessionFromRequest();
// Check if valid local session exists.
if ($config->getBoolean('admin.protectindexpage', false)) {
\SimpleSAML\Utils\Auth::requireAdmin();
}
$logouturl = \SimpleSAML\Utils\Auth::getAdminLogoutURL();
$loginurl = \SimpleSAML\Utils\Auth::getAdminLoginURL();
$isadmin = \SimpleSAML\Utils\Auth::isAdmin();
$links = [];
$links_welcome = [];
$links_config = [];
$links_auth = [];
$links_federation = [];
if ($config->getBoolean('idpdisco.enableremember', false)) {
$links_federation[] = [
'href' => 'cleardiscochoices.php',
'text' => '{core:frontpage:link_cleardiscochoices}',
];
}
$links_federation[] = [
'href' => \SimpleSAML\Utils\HTTP::getBaseURL() . 'admin/metadata-converter.php',
'text' => '{core:frontpage:link_xmlconvert}',
];
$allLinks = [
'links' => &$links,
'welcome' => &$links_welcome,
'config' => &$links_config,
'auth' => &$links_auth,
'federation' => &$links_federation,
];
\SimpleSAML\Module::callHooks('frontpage', $allLinks);
$metadataHosted = [];
\SimpleSAML\Module::callHooks('metadata_hosted', $metadataHosted);
$metadata = \SimpleSAML\Metadata\MetaDataStorageHandler::getMetadataHandler();
$metaentries = ['hosted' => $metadataHosted, 'remote' => []];
if ($isadmin) {
$metaentries['remote']['saml20-idp-remote'] = $metadata->getList('saml20-idp-remote', true);
$metaentries['remote']['shib13-idp-remote'] = $metadata->getList('shib13-idp-remote', true);
}
if ($config->getBoolean('enable.saml20-idp', false) === true) {
try {
$metaentries['hosted']['saml20-idp'] = $metadata->getMetaDataCurrent('saml20-idp-hosted');
$metaentries['hosted']['saml20-idp']['metadata-url'] =
$config->getBasePath() . 'saml2/idp/metadata.php?output=xhtml';
if ($isadmin) {
$metaentries['remote']['saml20-sp-remote'] = $metadata->getList('saml20-sp-remote', true);
}
} catch (Exception $e) {
\SimpleSAML\Logger::error('Federation: Error loading saml20-idp: ' . $e->getMessage());
}
}
if ($config->getBoolean('enable.shib13-idp', false) === true) {
try {
$metaentries['hosted']['shib13-idp'] = $metadata->getMetaDataCurrent('shib13-idp-hosted');
$metaentries['hosted']['shib13-idp']['metadata-url'] =
$config->getBasePath() . 'shib13/idp/metadata.php?output=xhtml';
if ($isadmin) {
$metaentries['remote']['shib13-sp-remote'] = $metadata->getList('shib13-sp-remote', true);
}
} catch (Exception $e) {
\SimpleSAML\Logger::error('Federation: Error loading shib13-idp: ' . $e->getMessage());
}
}
if ($config->getBoolean('enable.adfs-idp', false) === true) {
try {
$metaentries['hosted']['adfs-idp'] = $metadata->getMetaDataCurrent('adfs-idp-hosted');
$metaentries['hosted']['adfs-idp']['metadata-url'] = \SimpleSAML\Module::getModuleURL(
'adfs/idp/metadata.php',
['output' => 'xhtml']
);
if ($isadmin) {
$metaentries['remote']['adfs-sp-remote'] = $metadata->getList('adfs-sp-remote', true);
}
} catch (Exception $e) {
\SimpleSAML\Logger::error('Federation: Error loading adfs-idp: ' . $e->getMessage());
}
}
foreach ($metaentries['remote'] as $key => $value) {
if (empty($value)) {
unset($metaentries['remote'][$key]);
}
}
$t = new \SimpleSAML\XHTML\Template($config, 'core:frontpage_federation.tpl.php');
$translator = $t->getTranslator();
$language = $translator->getLanguage()->getLanguage();
$fallbackLanguage = 'en';
$defaultLanguage = $config->getString('language.default', $fallbackLanguage);
$translators = [
'name' => 'name_translated',
'descr' => 'descr_translated',
'OrganizationDisplayName' => 'organizationdisplayname_translated',
];
foreach ($metaentries['hosted'] as $index => $entity) {
foreach ($translators as $old => $new) {
if (isset($entity[$old])) {
if (isset($entity[$old][$language])) {
$metaentries['hosted'][$index][$new] = $entity[$old][$language];
} elseif (isset($entity[$old][$defaultLanguage])) {
$metaentries['hosted'][$index][$new] = $entity[$old][$defaultLanguage];
} elseif (isset($entity[$old][$fallbackLanguage])) {
$metaentries['hosted'][$index][$new] = $entity[$old][$fallbackLanguage];
} elseif (is_array($entity[$old])) {
$metaentries['hosted'][$index][$new] = array_values($entity[$old])[0];
} else {
$metaentries['hosted'][$index][$new] = $entity[$old];
}
}
}
}
foreach ($metaentries['remote'] as $key => $set) {
foreach ($set as $entityid => $entity) {
foreach ($translators as $old => $new) {
if (isset($entity[$old])) {
if (isset($entity[$old][$language])) {
$metaentries['remote'][$key][$entityid][$new] = $entity[$old][$language];
} elseif (isset($entity[$old][$defaultLanguage])) {
$metaentries['remote'][$key][$entityid][$new] = $entity[$old][$defaultLanguage];
} elseif (isset($entity[$old][$fallbackLanguage])) {
$metaentries['remote'][$key][$entityid][$new] = $entity[$old][$fallbackLanguage];
} elseif (isset($metaentries['remote'][$key][$entityid][$old])) {
$metaentries['remote'][$key][$entityid][$new] = $metaentries['remote'][$key][$entityid][$old];
}
}
}
}
}
# look up translated string
$mtype = [
'saml20-sp-remote' => $translator->noop('{admin:metadata_saml20-sp}'),
'saml20-sp-hosted' => $translator->noop('{admin:metadata_saml20-sp}'),
'saml20-idp-remote' => $translator->noop('{admin:metadata_saml20-idp}'),
'saml20-idp-hosted' => $translator->noop('{admin:metadata_saml20-idp}'),
'shib13-sp-remote' => $translator->noop('{admin:metadata_shib13-sp}'),
'shib13-sp-hosted' => $translator->noop('{admin:metadata_shib13-sp}'),
'shib13-idp-remote' => $translator->noop('{admin:metadata_shib13-idp}'),
'shib13-idp-hosted' => $translator->noop('{admin:metadata_shib13-idp}'),
'adfs-sp-remote' => $translator->noop('{admin:metadata_adfs-sp}'),
'adfs-sp-hosted' => $translator->noop('{admin:metadata_adfs-sp}'),
'adfs-idp-remote' => $translator->noop('{admin:metadata_adfs-idp}'),
'adfs-idp-hosted' => $translator->noop('{admin:metadata_adfs-idp}'),
];
$t->data['pageid'] = 'frontpage_federation';
$t->data['isadmin'] = $isadmin;
$t->data['loginurl'] = $loginurl;
$t->data['logouturl'] = $logouturl;
$t->data['links'] = $links;
$t->data['links_welcome'] = $links_welcome;
$t->data['links_config'] = $links_config;
$t->data['links_auth'] = $links_auth;
$t->data['links_federation'] = $links_federation;
$t->data['header'] = $translator->t('{core:frontpage:page_title}');
$t->data['metadata_url'] = \SimpleSAML\Module::getModuleURL('core/show_metadata.php');
$t->data['metaentries'] = $metaentries;
$t->data['mtype'] = $mtype;
$t->show();
|
