NAME

Google::SAML::Request - Create or parse Google's SAML requests

VERSION

You are currently reading the documentation for version 0.05

DESCRIPTION

Google::SAML::Request will parse (and, for the sake of completeness, create) SAML requests as used by Google. Please note that Google::SAML::Request is by no means a full implementation of the SAML 2.0 standard. But if you want to talk to Google to authenticate users, you should be fine.

In fact, if you want to talk to Google about SSO, just use Google::SAML::Response and you should be fine.

SYNOPSIS

Create a new request object by taking the request ouf of the CGI environment:

use Google::SAML::Request;
my $req = Google::SAML::Request->new_from_cgi();
if ( $req->ProviderName() eq 'google.com'
   && $req->AssertionConsumerServiceURL() eq 'https://www.google.com/hosted/psosamldemo.net/acs' ) {

   processRequest();
}
else {
    print "go talk to someone else\n";
}

Or use a request string that you get from somewhere else (but make sure that it is no longer URI-escaped):

use Google::SAML::Request;
my $req = Google::SAML::Request->new_from_string( $request_string );
if ( $req->ProviderName() eq 'google.com'
   && $req->AssertionConsumerServiceURL() eq 'https://www.google.com/hosted/psosamldemo.net/acs' ) {

   processRequest();
}
else {
    print "go talk to someone else\n";
}

Or, finally, create a request from scratch and send that to somebody else:

use Google::SAML::Request;
my $req = Google::SAML::Request->new(
           {
               ProviderName => 'me.but.invalid',
               AssertionConsumerServiceURL => 'http://send.your.users.here.invalid/script',
           }
          );

PREREQUISITES

You will need the following modules installed:

• MIME::Base64
• Compress::Zlib
• Date::Format
• XML::Simple
• URI::Escape
• CGI (if you are going to use the 'new_from_cgi' constructor)

METHODS

new

Create a new Google::SAML::Request object from scratch.

You have to provide the needed parameters here. Some parameters are optional and defaults are used if they are not supplied.

The parameters need to be passed in in a hash reference as key value pairs.

Required parameters

• ProviderName

  Your name, e.g. 'google.com'

• AssertionConsumerServiceURL

  The URL the user used to contact you. E.g. 'https://www.google.com/hosted/psosamldemo.net/acs'

Optional parameters

• IssueInstant

  The time stamp for the Request. Default is now.

• ID

  If you need to create the ID yourself, use this option. Otherwise the ID is generated from the current time and a pseudo-random number.

new_from_cgi

Create a new Google::SAML::Request object by fishing it out of the CGI environment.

If you provide a hash-ref with the key 'param_name' you can determine which cgi parameter to use. The default is 'SAMLRequest'.

new_from_string

Pass in a (uri_unescaped!) string that contains the request string. The string will be base64-unencoded, inflated and parsed. You'll get back a fresh Google::SAML::Response object if the string can be parsed.

get_xml

Returns the XML representation of the request.

get_get_param

No, that's not a typo. This method will return the request in a form suitable to be used as a GET parameter. In other words, this method will take the XML representation, compress it, base64-encode the result and, finally, URI-escape that.

Accessor methods (read-only)

All of the following accessor methods return the value of the attribute with the same name

AssertionConsumerServiceURL

ID

IssueInstant

ProtocolBinding

ProviderName

Version

SOURCE CODE

This module has a repository on github. Pull requests are welcome.

https://github.com/mannih/Google-SAML-Request/

AUTHOR

Manni Heumann (saml at lxxi dot org)

LICENSE

Copyright (c) 2008 Manni Heumann. All rights reserved.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.