package Lemonldap::NG::Portal::AuthCAS; use strict; use Lemonldap::NG::Portal::Simple; use AuthCAS; our $VERSION = '0.01'; our $OVERRIDE = { # By default, authentication is valid if SSL_CLIENT_S_DN_Email environement # variable is present. Adapt it if you want extractFormInfo => sub { my $self = shift; my $cas = new AuthCAS(casUrl => $self->{CAS_url}, CAFile => $self->{CAS_CAFile}, ); my $login_url = $cas->getServerLoginURL($self->{CAS_loginUrl}); my $ticket = $self->param('ticket'); # Unless a ticket has been found, we redirect the user unless( $self->{user} = $cas->validateST($self->{CAS_validationUrl}, $ticket) ) { print $self->SUPER::redirect( -uri => $login_url, -status => '302 Moved Temporary' ); exit; } PE_OK; }, authenticate => sub { PE_OK; }, }; 1; __END__ =head1 NAME Lemonldap::NG::Portal::AuthCAS - Perl extension for building Lemonldap::NG compatible portals with CAS authentication. EXPERIMENTAL AND NOT FINISHED! =head1 SYNOPSIS use Lemonldap::NG::Portal::SharedConf; my $portal = new Lemonldap::NG::Portal::Simple( configStorage => {...}, # See Lemonldap::NG::Portal authentication => 'CAS', CAS_url => 'https://cas.myserver', CAS_CAFile => '/etc/httpd/conf/ssl.crt/ca-bundle.crt', CAS_loginUrl => 'http://myserver/app.cgi', CAS_validationUrl => 'http://myserver/app.cgi', ); if($portal->process()) { # Write here the menu with CGI methods. This page is displayed ONLY IF # the user was not redirected here. print $portal->header; # DON'T FORGET THIS (see CGI(3)) print "..."; # or redirect the user to the menu print $portal->redirect( -uri => 'https://portal/menu'); } else { # If the user enters here, IT MEANS THAT CAS REDIRECTION DOES NOT WORK print $portal->header; # DON'T FORGET THIS (see CGI(3)) print "