Rewrite php-saml to use ZF naming conventions, PSR-0 structure, improve repo layout, add Metadata generation, improve tests

Author: Boy Baukema

consume.php

@@ -0,0 +1,28 @@
+<?php
+/**
+ * SAMPLE Code to demonstrate how to handle a SAML assertion response.
+ *
+ * The URL of this file will have been given during the SAML authorization.
+ * After a successful authorization, the browser will be directed to this
+ * link where it will send a certified response via $_POST.
+ */
+
+error_reporting(E_ALL);
+
+require 'settings.php';
+
+require 'lib/onelogin/saml.php';
+
+$samlResponse = new OneLogin_Saml_Response(saml_get_settings(), $_POST['SAMLResponse']);
+
+try {
+    if ($samlResponse->is_valid()) {
+        echo "You are: " . $samlResponse->get_nameid();
+    }
+    else {
+        echo "Invalid SAML response.";
+    }
+}
+catch (Exception $e) {
+    echo "Invalid SAML response: " . $e->getMessage();
+}

demo/consume.php

@@ -0,0 +1,20 @@
+<?php
+/**
+ * SAMPLE Code to demonstrate how to initiate a SAML Authorization request
+ *
+ * When the user visits this URL, the browser will be redirected to the SSO
+ * IdP with an authorization request. If successful, it will then be
+ * redirected to the consume URL (specified in settings) with the auth
+ * details.
+ */
+
+error_reporting(E_ALL);
+
+require 'settings.php';
+
+require 'lib/onelogin/saml.php';
+
+$authrequest = new OneLogin_Saml_AuthRequest(saml_get_settings());
+$url = $authrequest->create();
+
+header("Location: $url");

demo/index.php

@@ -0,0 +1,8 @@
+<?php
+/**
+ * Created by JetBrains PhpStorm.
+ * User: boy
+ * Date: 4/6/12
+ * Time: 9:31 AM
+ * To change this template use File | Settings | File Templates.
+ */

demo/metadata.php

@@ -0,0 +1,63 @@
+<?php
+/**
+ * SAMPLE Code to demonstrate how provide SAML settings.
+ *
+ * The settings are contained within a SamlSettings object. You need to
+ * provide, at a minimum, the following things:
+ *  - idp_sso_target_url: This is the URL to forward to for auth requests.
+ *    It will be provided by your IdP.
+ *  - x509certificate: This is a certificate required to authenticate your
+ *    request. This certificate should be provided by your IdP.
+ *  - assertion_consumer_service_url: The URL that the IdP should redirect
+ *    to once the authorization is complete. You must provide this, and it
+ *    should point to the consume.php script or its equivalent.
+ */
+
+define('XMLSECLIB_DIR', './../src')
+
+define('ONELOGIN_SAML_DIR', './../src/OneLogin/Saml/');
+require ONELOGIN_SAML_DIR . 'AuthRequest.php';
+require ONELOGIN_SAML_DIR . 'Response.php';
+require ONELOGIN_SAML_DIR . 'Settings.php';
+require ONELOGIN_SAML_DIR . 'XmlSec.php';
+
+/**
+ * Return a SamlSettings object with user settings.
+ */
+function saml_get_settings()
+{
+    // This function should be modified to return the SAML settings for the current user
+
+    $settings = new OneLogin_Saml_Settings();
+
+    // When using Service Provider Initiated SSO (starting at index.php), this URL asks the IdP to authenticate the user.
+    $settings->idp_sso_target_url = "https://app.onelogin.com/saml/signon/6171";
+
+    // The certificate for the users account in the IdP
+    $settings->x509certificate = <<<ENDCERTIFICATE
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+ENDCERTIFICATE;
+
+    // The URL where to the SAML Response/SAML Assertion will be posted
+    $settings->assertion_consumer_service_url = "http://localhost/php-saml/consume.php";
+
+    // Name of this application
+    $settings->issuer = "php-saml";
+
+    // Tells the IdP to return the email address of the current user
+    $settings->name_identifier_format = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress";
+
+
+    return $settings;
+}