mirror of
https://github.com/overleaf/overleaf.git
synced 2024-11-21 20:47:08 -05:00
d717ebb2e0
show expiration data and throw on date errors when loading certs GitOrigin-RevId: d81c96c722f0ce20352f2ef9a346b6d9bfa028d1
73 lines
1.8 KiB
JavaScript
73 lines
1.8 KiB
JavaScript
'use strict'
|
|
|
|
/**
|
|
* Run with: node metadata-processor /path/ukamf.xml http://idp/entity/id
|
|
*
|
|
* `npm install` must be run for scripts/ukamf first.
|
|
*
|
|
* The ukamf metadata xml file can be downloaded from:
|
|
* http://metadata.ukfederation.org.uk/
|
|
*
|
|
* The entity id should be provided by the university.
|
|
*/
|
|
|
|
const { Certificate } = require('@fidm/x509')
|
|
const moment = require('moment')
|
|
|
|
const UKAMFDB = require('./ukamf-db')
|
|
|
|
main().catch(err => {
|
|
console.error(err.stack)
|
|
})
|
|
|
|
async function main() {
|
|
const [, , file, entityId] = process.argv
|
|
|
|
console.log(`loading file ${file}...\n`)
|
|
|
|
const ukamfDB = new UKAMFDB(file)
|
|
await ukamfDB.init()
|
|
|
|
const entity = ukamfDB.findByEntityID(entityId)
|
|
if (!entity) {
|
|
throw new Error(`could not find entity for ${entityId}`)
|
|
}
|
|
const samlConfig = entity.getSamlConfig()
|
|
|
|
const certificate = Certificate.fromPEM(
|
|
Buffer.from(
|
|
`-----BEGIN CERTIFICATE-----\n${
|
|
samlConfig.cert
|
|
}\n-----END CERTIFICATE-----`,
|
|
'utf8'
|
|
)
|
|
)
|
|
|
|
const validFrom = moment(certificate.validFrom)
|
|
const validTo = moment(certificate.validTo)
|
|
|
|
if (validFrom.isAfter(moment())) {
|
|
throw new Error(`certificate not valid till: ${validFrom.format('LLL')}`)
|
|
}
|
|
|
|
if (validTo.isBefore(moment())) {
|
|
throw new Error(`certificate expired: ${validTo.format('LLL')}`)
|
|
}
|
|
|
|
console.log(
|
|
`!!!!!!!!!!!!!\nCERTIFICATE EXPIRES: ${validTo.format(
|
|
'LLL'
|
|
)}\n!!!!!!!!!!!!!\n`
|
|
)
|
|
|
|
console.log(`UPDATE universities SET
|
|
sso_entity_id = '${samlConfig.entityId}',
|
|
sso_entry_point = '${samlConfig.entryPoint}',
|
|
sso_cert = '${samlConfig.cert}',
|
|
sso_user_id_attribute = 'eduPersonPrincipalName',
|
|
sso_user_email_attribute = 'mail',
|
|
sso_license_entitlement_attribute = 'eduPersonPrincipalName',
|
|
sso_license_entitlement_matcher = '.'
|
|
WHERE id =
|
|
`)
|
|
}
|