class SamlSpSubscriber in SAML Service Provider 8.2

Hierarchy

• class \Drupal\saml_sp\EventSubscriber\SamlSpSubscriber implements \Symfony\Component\EventDispatcher\EventSubscriberInterface

1 string reference to 'SamlSpSubscriber'

saml_sp.services.yml in ./saml_sp.services.yml

saml_sp.services.yml

1 service uses SamlSpSubscriber

saml_sp_event_subscriber in ./saml_sp.services.yml

Drupal\saml_sp\EventSubscriber\SamlSpSubscriber

File

src/EventSubscriber/SamlSpSubscriber.php, line 10

Namespace

Drupal\saml_sp\EventSubscriber

class SamlSpSubscriber implements EventSubscriberInterface {
  public function checkForCertExpiration(GetResponseEvent $event) {
    $config = \Drupal::config('saml_sp.settings');
    $user = \Drupal::currentUser();
    if ($user
      ->hasPermission('configure saml sp') && function_exists('openssl_x509_parse') && !empty($config
      ->get('cert_location')) && file_exists($config
      ->get('cert_location'))) {
      $encoded_cert = trim(file_get_contents($config
        ->get('cert_location')));
      $cert = openssl_x509_parse(\OneLogin_Saml2_Utils::formatCert($encoded_cert));
      $test_time = REQUEST_TIME;
      if ($cert['validTo_time_t'] < $test_time) {
        $markup = new TranslatableMarkup('Your site\'s SAML certificate is expired. Please replace it with another certificate and request an update to your Relying Party Trust (RPT). You can enter in a location for the new certificate/key pair on the <a href="@url">SAML Service Providers</a> page. Until the certificate/key pair is replaced your SAML authentication service will not function.', array(
          '@url' => \Drupal::url('saml_sp.admin'),
        ));
        drupal_set_message($markup, 'error', FALSE);
      }
      else {
        if ($cert['validTo_time_t'] - $test_time < 60 * 60 * 24 * 30) {
          $markup = new TranslatableMarkup('Your site\'s SAML certificate will expire in %interval. Please replace it with another certificate and request an update to your Relying Party Trust (RPT). You can enter in a location for the new certificate/key pair on the <a href="@url">SAML Service Providers</a> page. Failure to update this certificate and update the Relying Party Trust (RPT) will result in the SAML authentication service not working.', array(
            '%interval' => \Drupal::service('date.formatter')
              ->formatInterval($cert['validTo_time_t'] - $test_time, 2),
            '@url' => \Drupal::url('saml_sp.admin'),
          ));
          drupal_set_message($markup, 'warning', FALSE);
        }
      }
    }
  }

  /**
   * {@inheritdoc}
   */
  public static function getSubscribedEvents() {
    $events[KernelEvents::REQUEST][] = array(
      'checkForCertExpiration',
    );
    return $events;
  }

}

Members

Name	Modifiers	Type	Description	Overrides
SamlSpSubscriber::checkForCertExpiration	public	function
SamlSpSubscriber::getSubscribedEvents	public static	function	Returns an array of event names this subscriber wants to listen to.