| | | 1 | | using Microsoft.AspNetCore.Authentication; |
| | | 2 | | using Microsoft.AspNetCore.Authentication.Cookies; |
| | | 3 | | using Sustainsys.Saml2; |
| | | 4 | | using Sustainsys.Saml2.Metadata; |
| | | 5 | | |
| | | 6 | | namespace ProjectTemplate.Web.Authentication.Providers.Saml2; |
| | | 7 | | |
| | | 8 | | /// <summary> |
| | | 9 | | /// Provides extension methods for registering SAML2 authentication provider services. |
| | | 10 | | /// </summary> |
| | | 11 | | public static class Saml2AuthenticationServiceExtensions |
| | | 12 | | { |
| | | 13 | | /// <summary> |
| | | 14 | | /// Adds SAML2 authentication using the specified options to the authentication builder. |
| | | 15 | | /// </summary> |
| | | 16 | | /// <remarks>If the SAML2 authentication is not enabled in the provided options, the method returns the |
| | | 17 | | /// original builder without modification.</remarks> |
| | | 18 | | /// <param name="builder">The authentication builder to which the SAML2 authentication scheme is added.</param> |
| | | 19 | | /// <param name="options">The options used to configure the SAML2 authentication scheme. Cannot be null.</param> |
| | | 20 | | /// <returns>The authentication builder with the SAML2 authentication scheme configured.</returns> |
| | | 21 | | public static AuthenticationBuilder AddSaml2Authentication( |
| | | 22 | | this AuthenticationBuilder builder, |
| | | 23 | | Saml2AuthenticationOptions options) |
| | | 24 | | { |
| | 182 | 25 | | ArgumentNullException.ThrowIfNull(builder); |
| | 180 | 26 | | ArgumentNullException.ThrowIfNull(options); |
| | | 27 | | |
| | 178 | 28 | | if (!options.Enabled) |
| | | 29 | | { |
| | 172 | 30 | | return builder; |
| | | 31 | | } |
| | | 32 | | |
| | 6 | 33 | | builder.AddSaml2(options.Scheme, options.DisplayName, saml2Options => |
| | 6 | 34 | | { |
| | 2 | 35 | | saml2Options.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme; |
| | 2 | 36 | | saml2Options.SPOptions.EntityId = new EntityId(options.EntityId); |
| | 2 | 37 | | saml2Options.SPOptions.ModulePath = options.ModulePath; |
| | 2 | 38 | | saml2Options.SPOptions.WantAssertionsSigned = options.RequireSignedAssertions; |
| | 2 | 39 | | saml2Options.SPOptions.ValidateCertificates = options.ValidateCertificates; |
| | 6 | 40 | | |
| | 2 | 41 | | IdentityProvider identityProvider = new( |
| | 2 | 42 | | new EntityId(options.MetadataUrl), |
| | 2 | 43 | | saml2Options.SPOptions) |
| | 2 | 44 | | { |
| | 2 | 45 | | MetadataLocation = options.MetadataUrl, |
| | 2 | 46 | | LoadMetadata = options.LoadMetadata, |
| | 2 | 47 | | AllowUnsolicitedAuthnResponse = false |
| | 2 | 48 | | }; |
| | 6 | 49 | | |
| | 2 | 50 | | saml2Options.IdentityProviders.Add(identityProvider); |
| | 8 | 51 | | }); |
| | | 52 | | |
| | 6 | 53 | | return builder; |
| | | 54 | | } |
| | | 55 | | } |