18F/micropurchase

SAML_SETTINGS = {
  assertion_consumer_service_binding: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
  issuer: Rails.application.secrets.saml_issuer,
  idp_sso_target_url: Rails.application.secrets.idp_sso_url,
  idp_slo_target_url: Rails.application.secrets.idp_slo_url,
  idp_cert_fingerprint: Rails.application.secrets.idp_cert_fingerprint,
  name_identifier_format: 'urn:oasis:names:tc:SAML:1.1:nameid-format:persistent',
  authn_context: 'http://idmanagement.gov/ns/assurance/loa/1',
  allowed_clock_drift: 60,
  certificate: File.read("#{Rails.root}/certs/sp/demo_sp.crt"),
  private_key: File.read("#{Rails.root}/keys/saml_test_sp.key"),
  security: { authn_requests_signed: true,
              logout_requests_signed: true,
              embed_sign: true,
              digest_method: 'http://www.w3.org/2001/04/xmlenc#sha256',
              signature_method: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' },
  setup: true
}.freeze

Rails.application.config.middleware.use OmniAuth::Builder do
  provider(
    :github,
    GithubCredentials.client_id,
    GithubCredentials.secret,
    scope: "user:email"
  )
  provider(:saml, SAML_SETTINGS)
end