loopback-component-cas/protocol1.js

Loopback CAS Authentification

'use strict'

const { URL } = require('url')
const debug = require('debug')('loopback:component:cas')
const findService = require('./tools.js').findService

/* p1Validate */
module.exports = function (app, config, req, res, next, loginCallback) {
  let serviceUrl = req.query['service']
  let ticket = req.query['ticket']
  let URLserviceUrl

  try {
    URLserviceUrl = new URL(serviceUrl)
  } catch (error) {
    if (serviceUrl !== undefined)
      debug('Malformed service? ',serviceUrl)
    return res.send('no\n')
  }

  if (!ticket) {
    debug('ERROR: Not all of the required request parameters were present.')
    return res.send('no\n')
  }

  // validate ST
  app.models.AccessToken.findForRequest(req, { params: ['ticket'], searchDefaultTokenKeys: false},function(err, st_token) {
    if (err || !st_token) {
      return res.send('no\n')
    }
    // remove ST
    st_token.destroy(function(err) {
      if (err) {
        debug('ERROR: CAS : error removing ST')
        return res.send('no\n')
      }

      // validate service
      findService(app, serviceUrl,function(err, service) {
        if (err || !service) {
          return res.send('no\n')
        }
        // check application
        if (st_token.appId !== service.id) {
          debug('ERROR: CAS /validate ! appId:')
          debug('ERROR: service:' + JSON.stringify(req.service) )
          debug('ERROR: ST:' + JSON.stringify(st_token))
          return res.send('no\n')
        }

        eval('app.models.' + config.userModel).findOne({ where: { id: st_token.userId } },function(err, user) {
          if (err || !user) {
            debug('ERROR: Internal Error.')
            return res.send(xml.invalidST.renderToString({
              code: errorCodes.INTERNAL_ERROR,
              message: 'Internal Error'
            }))
          }
          debug('CAS1 validate (email: %s, service: %s)', user.email, service.name)
          loginCallback(req, service, user);

          return res.send('yes\n')
        })
      })
    })
  })
}