dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

AuthWebID seems to be ready...

Browse Source
This commit is contained in:
Xavier Guimard 2013-10-13 12:15:54 +00:00
parent ffda037c52
commit d7b33f9e8f
1 changed files with 20 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/AuthWebID.pm
View File

@ -60,22 +60,30 @@ sub authInit {
sub extractFormInfo {
my $self = shift;
# 1. Verify SSL exchange using AuthSSL::extractFormInfo()
my $tmp = $self->SUPER::extractFormInfo(@_);
return $tmp unless ( $tmp eq PE_OK );
# 1. Verify SSL exchange
unless ( $ENV{SSL_CLIENT_S_DN} ) {
$self->_sub( 'userError', "No certificate found for " . $self->ipAddr );
$self->lmLog(
'No certificate found, be sure to have "SSLOptions +StdEnvVars +ExportCertData" for .pl files',
'debug'
);
return PE_CERTIFICATEREQUIRED;
}
# 2. Return an error if SSL_CLIENT_CERT is not set
$self->abort( 'SSL configuration error',
'Unable to get client certificate, SSL_CLIENT_CERT is not set' )
unless ( $ENV{SSL_CLIENT_CERT} );
$self->abort(
'SSL configuration error',
'Unable to get client certificate, SSL_CLIENT_CERT is not set<br/>'
. 'Be sure to have "SSLOptions +StdEnvVars +ExportCertData" for .pl files'
) unless ( $ENV{SSL_CLIENT_CERT} );
# 3. Verify that certificate is WebID compliant
return PE_BADCREDENTIALS
unless ( $self->{webid} =
Web::ID->new( certificate => $ENV{SSL_CLIENT_CERT} ) );
# WebID URI is used as user field
$self->{user} = $self->{webid}->uri;
# NB: WebID URI is used as user field
eval {
$self->{webid} = Web::ID->new( certificate => $ENV{SSL_CLIENT_CERT} )
and $self->{user} = $self->{webid}->uri->as_string;
};
return PE_BADCERTIFICATE if ( $@ or not( $self->{user} ) );
# 4. Verify that FOAF host is in white list
return PE_BADPARTNER unless ( $self->{user} =~ $reWebIDWhitelist );