#==============================================================================
# Liberty Alliance Authentication for LemonLDAP.
#
# This file is part of the LemonLDAP project and released under GPL.
#==============================================================================

package Lemonldap::NG::Portal::AuthLA;

use strict;
use warnings;

use Lemonldap::NG::Portal::SharedConf qw(:all);
use lasso;

*EXPORT_OK   = *Lemonldap::NG::Portal::SharedConf::EXPORT_OK;
*EXPORT_TAGS = *Lemonldap::NG::Portal::SharedConf::EXPORT_TAGS;
*EXPORT      = *Lemonldap::NG::Portal::SharedConf::EXPORT;

our $VERSION = '0.1';

our @ISA = qw(Lemonldap::NG::Portal::SharedConf);

#==============================================================================
# Overloaded methods
#==============================================================================

# Main process as described in Portal::Simple module

# 1. Retrieve source URL
# Not overloaded

# 2. Control existing sessions
# Not overloaded

# 3. Retrieve user credentials
# Test here if the user was authenticated by IdP
sub extractFormInfo {
	# IdP redirect
	return PE_OK;
}

# 4. LDAP format filter for attributes reading
# We must retrive user DN in SAML response
# Or use WSF to retrieve attributes
sub formateFilter {
	my $self = shift;

	# Get DN in SAML response (TODO)
	my $dn = "uid=clement,ou=personnes,dc=linagora,dc=com";

	# Explode DN to build RDN
	my @rdn = split /,/ , $dn;
	
	$self->{filter}="(".shift(@rdn).")";

	return PE_OK;
}

# 5. LDAP connection
# Overload only if WSF is used to retrieve attributes
#sub connectLDAP {
#    return PE_OK;
#}

# 6. LDAP bind (with Directory Manager or anonymous)
# Overload only if WSF is used to retrieve attributes
#sub bind {
#    return PE_OK;
#}


# 7. Search the DN
# Overload only if WSF is used to retrieve attributes
#sub search {
#	return PE_OK;
#}

# 8. Load parameters 
# Overload only if WSF is used to retrieve attributes
#sub setSessionInfo {
#	# Use WSF to get "exprotedVars"
#	return PE_OK;
#}

# 9. Set macros
# Not overloaded

# 10. Set groups
# Not overloaded

# 11. LDAP unbind
# Overload only if WSF is used to retrieve attributes
#sub unbind {
#    return PE_OK;
#}

# 12. Authentication
# Authentication is done by IdP, so we disable this step
sub authenticate {
	return PE_OK;
}

# 13. Store parameters in session
# Not overloaded

# 14. Build cookie
# Not overloaded

# 15. Log
# Not overloaded

# 16. Redirection
# Not overloaded

1;
__END__

=head1 NAME

Lemonldap::NG::Portal::AuthLA - Provide Liberty Alliance Authentication

=head1 SYNOPSIS

=head1 DESCRIPTION

=head1 SEE ALSO

L<Lemonldap::NG::Portal::SharedConf>, L<Lemonldap::NG::Portal>,
L<Lemonldap::NG::Handler>, L<Lemonldap::NG::Manager>

=head1 AUTHOR

Clement Oudot, E<lt>coudot@linagora.comE<gt>

=head1 COPYRIGHT AND LICENSE

Copyright (C) 2005 by Xavier Guimard E<lt>x.guimard@free.frE<gt>

This library is free software; you can redistribute it and/or modify
it under the same terms as Perl itself, either Perl version 5.8.4 or,
at your option, any later version of Perl 5 you may have available.

=cut