digidentity/libsaml

module Saml
  module Bindings
    class SOAP
      include Saml::Notification

      class << self

        SOAP_ACTION = 'http://www.oasis-open.org/committees/security'

        def create_response_xml(response)
          notify('create_response', Saml::Util.sign_xml(response, :soap))
        end

        def post_message(message, response_type)
          signed_message = notify('create_post', Saml::Util.sign_xml(message, :soap))

          http_response = Saml::Util.post(message.destination, signed_message, { 'SOAPAction' => SOAP_ACTION } )

          if http_response.code == "200"
            response = notify('receive_response', Saml.parse_message(http_response.body, response_type))
            Saml::Util.verify_xml(response, http_response.body)
          else
            nil
          end
        end

        def receive_message(request, type)
          raw_xml = request.body.dup.read
          notify('receive_message', raw_xml)
          message = Saml.parse_message(raw_xml, type)

          skip_signature_verification = (
            message.is_a?(Saml::AuthnRequest) &&
            !message.provider.authn_requests_signed?
          )

          if skip_signature_verification
            message
          else
            Saml::Util.verify_xml(message, raw_xml)
          end
        end
      end
    end
  end
end