mirror of https://github.com/jacekkow/keycloak-protocol-cas
view | history | commit | commitdiff
Matthias Piepkorn
2017-07-26 f75caf002c2014cd1dd875225417f2a5de1af9d0
commit | author | age
57a6c1 1 package org.keycloak.protocol.cas.utils;
MP 2
3 import org.apache.http.HttpEntity;
4 import org.apache.http.HttpResponse;
5 import org.apache.http.client.HttpClient;
6 import org.apache.http.client.methods.HttpPost;
7 import org.apache.http.entity.ContentType;
8 import org.apache.http.entity.StringEntity;
9 import org.keycloak.connections.httpclient.HttpClientProvider;
10 import org.keycloak.models.KeycloakSession;
11 import org.keycloak.saml.common.exceptions.ConfigurationException;
12 import org.keycloak.saml.processing.core.saml.v2.common.IDGenerator;
13 import org.keycloak.saml.processing.core.saml.v2.util.XMLTimeUtil;
14
15 import javax.ws.rs.core.HttpHeaders;
16 import javax.xml.datatype.XMLGregorianCalendar;
17 import java.io.IOException;
18 import java.io.InputStream;
19 import java.nio.charset.StandardCharsets;
20
21 public class LogoutHelper {
22     //although it looks alike, the CAS SLO protocol has nothing to do with SAML; so we build the format
23     //required by the spec manually
24     private static final String TEMPLATE = "<samlp:LogoutRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" ID=\"$ID\" Version=\"2.0\" IssueInstant=\"$ISSUE_INSTANT\">\n" +
25             "  <saml:NameID xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\">@NOT_USED@</saml:NameID>\n" +
26             "  <samlp:SessionIndex>$SESSION_IDENTIFIER</samlp:SessionIndex>\n" +
27             "</samlp:LogoutRequest>";
28
29     public static HttpEntity buildSingleLogoutRequest(String serviceTicket) {
30         String id = IDGenerator.create("ID_");
31         XMLGregorianCalendar issueInstant;
32         try {
33             issueInstant = XMLTimeUtil.getIssueInstant();
34         } catch (ConfigurationException e) {
35             throw new RuntimeException(e);
36         }
37         String document = TEMPLATE.replace("$ID", id).replace("$ISSUE_INSTANT", issueInstant.toString())
38                 .replace("$SESSION_IDENTIFIER", serviceTicket);
39         return new StringEntity(document, ContentType.APPLICATION_XML.withCharset(StandardCharsets.UTF_8));
40     }
41
42     public static void postWithRedirect(KeycloakSession session, String url, HttpEntity postBody) throws IOException {
43         HttpClient httpClient = session.getProvider(HttpClientProvider.class).getHttpClient();
44         for (int i = 0; i < 2; i++) { // follow redirects once
45             HttpPost post = new HttpPost(url);
46             post.setEntity(postBody);
47             HttpResponse response = httpClient.execute(post);
48             try {
49                 int status = response.getStatusLine().getStatusCode();
50                 if (status == 302 && !url.endsWith("/")) {
51                     String redirect = response.getFirstHeader(HttpHeaders.LOCATION).getValue();
52                     String withSlash = url + "/";
53                     if (withSlash.equals(redirect)) {
54                         url = withSlash;
55                         continue;
56                     }
57                 }
58             } finally {
59                 HttpEntity entity = response.getEntity();
60                 if (entity != null) {
61                     InputStream is = entity.getContent();
62                     if (is != null)
63                         is.close();
64                 }
65
66             }
67             break;
68         }
69     }
70 }