uabookstores/laravel-shibboleth

Enable basic Shibboleth support for Laravel 5.x

Tuesday, May 15, 2018
by uabookstores
Repository
1 Watchers
0 Stars
115 Installations

PHP
0 Dependents
0 Suggesters
22 Forks
0 Open issues
39 Versions
58 % Grown

The README.md

Laravel Shibboleth Service Provider

This package provides Shibboleth authentication for Laravel., _(*1)

For development, it can emulate an IdP (via [mrclay/shibalike][13])., _(*2)

[![Build Status][12]][11] , _(*3)

Installation

Use composer to require the latest release into your project:, _(*4)

composer require uabookstores/laravel-shibboleth

If you're running Laravel >= 5.5, then you can skip this step, otherwise you will need to manually register the service provider in your config/app.php file within the Providers array., _(*5)

StudentAffairsUwm\Shibboleth\ShibbolethServiceProvider::class,

If you you would like to use the emulated IdP via shibalike, then you will need to manually register it on any version - this is not automatically loaded even in Laravel 5.5., _(*6)

StudentAffairsUwm\Shibboleth\ShibalikeServiceProvider::class,

Note that the password is the same as the username for shibalike., _(*7)

Publish the default configuration file:, _(*8)

php artisan vendor:publish --provider="StudentAffairsUwm\Shibboleth\ShibbolethServiceProvider"

Optionally, you can also publish the views for the shibalike emulated IdP login:, _(*9)

php artisan vendor:publish --provider="StudentAffairsUwm\Shibboleth\ShibalikeServiceProvider"

University of Arizona Users:, _(*10)

To also logout with the IdP, set the the following in config/shibboleth.php, _(*11)
'idp_logout' => '/Shibboleth.sso/Logout?return=https%3A%2F%2Fshibboleth.arizona.edu%2Fcgi-bin%2Flogout.pl',
  

Change the driver to shibboleth in your config/auth.php file., _(*12)

'providers' => [
    'users' => [
        'driver' => 'shibboleth',
        'model'  => App\User::class,
    ],
],

Now users may login via Shibboleth by going to https://example.com/shibboleth-login and logout using https://example.com/shibboleth-logout so you can provide a custom link or redirect based on email address in the login form., _(*13)

@if (Auth::guest())
    <a href="/shibboleth-login">Login</a>
@else
    <a href="/shibboleth-logout">
        Logout {{ Auth::user()->name }}
    </a>
@endif

You may configure server variable mappings in config/shibboleth.php such as the user's first name, last name, entitlements, etc. You can take a look at them by reading what's been populated into the $_SERVER variable after authentication., _(*14)

<?php print_r($_SERVER);

Mapped values will be synced to the user table upon successful authentication., _(*15)

Authorization

You can check for an entitlement string of the current user statically:, _(*16)

$entitlement = 'urn:mace:uark.edu:ADGroups:Computing Services:Something';

if (Entitlement::has($entitlement)) {
    // authorize something
}

Now you can draft [policies and gates][16] around these entitlements., _(*17)

Local Users

This was designed to work side-by-side with the native authentication system for projects where you want to have both Shibboleth and local users. If you would like to allow local registration as well as authenticate Shibboleth users, then use laravel's built-in auth system., _(*18)

php artisan make:auth

JWTAuth Tokens

If you're taking advantage of token authentication with tymon/jwt-auth then set this variable in your .env, _(*19)

JWTAUTH=true

The Versions

15/05 2018

dev-master

9999999-dev

Enable basic Shibboleth support for Laravel 5.x

library laravel-shibboleth

Enable basic Shibboleth support for Laravel 5.x

uabookstores/laravel-shibboleth

The README.md

Laravel Shibboleth Service Provider

Installation

Authorization

Local Users

JWTAuth Tokens

The Versions

dev-master

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

by Brandon Williams

3.0.3

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

by Brandon Williams

3.0.2

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

by Brandon Williams

3.0.1

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

by Brandon Williams

dev-dev

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

dev-revert-symfony-http-foundation

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

3.0.0

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

2.2.6

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

2.2.5

The Requires

The Development Requires

by Jeff Puckett

by Michael Schuett

by Christopher Maio

by Taylor Donald Harvey Smith

2.2.4

The Requires

The Development Requires