Soap.php 9.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340
  1. <?php
  2. /**
  3. * Zend Framework
  4. *
  5. * LICENSE
  6. *
  7. * This source file is subject to the new BSD license that is bundled
  8. * with this package in the file LICENSE.txt.
  9. * It is also available through the world-wide-web at this URL:
  10. * http://framework.zend.com/license/new-bsd
  11. * If you did not receive a copy of the license and are unable to
  12. * obtain it through the world-wide-web, please send an email
  13. * to license@zend.com so we can send you a copy immediately.
  14. *
  15. * @category Zend
  16. * @package Zend_Service
  17. * @subpackage DeveloperGarden
  18. * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
  19. * @license http://framework.zend.com/license/new-bsd New BSD License
  20. * @version $Id$
  21. */
  22. /**
  23. * @see Zend_Soap_Client
  24. */
  25. require_once 'Zend/Soap/Client.php';
  26. /**
  27. * @category Zend
  28. * @package Zend_Service
  29. * @subpackage DeveloperGarden
  30. * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
  31. * @author Marco Kaiser
  32. * @license http://framework.zend.com/license/new-bsd New BSD License
  33. */
  34. class Zend_Service_DeveloperGarden_Client_Soap extends Zend_Soap_Client
  35. {
  36. /**
  37. * class with credential interface
  38. *
  39. * @var Zend_Service_DeveloperGarden_Credential
  40. */
  41. private $_credential = null;
  42. /**
  43. * WSSE Security Ext Namespace
  44. *
  45. * @var string
  46. */
  47. const WSSE_NAMESPACE_SECEXT = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd';
  48. /**
  49. * WSSE Saml Namespace
  50. *
  51. * @var string
  52. */
  53. const WSSE_NAMESPACE_SAML = 'urn:oasis:names:tc:SAML:2.0:assertion';
  54. /**
  55. * Security Element
  56. *
  57. * @var string
  58. */
  59. const WSSE_SECURITY_ELEMENT = 'Security';
  60. /**
  61. * UsernameToken Element
  62. *
  63. * @var string
  64. */
  65. const WSSE_ELEMENT_USERNAMETOKEN = 'UsernameToken';
  66. /**
  67. * Usernae Element
  68. *
  69. * @var string
  70. */
  71. const WSSE_ELEMENT_USERNAME = 'Username';
  72. /**
  73. * Password Element
  74. *
  75. * @var string
  76. */
  77. const WSSE_ELEMENT_PASSWORD = 'Password';
  78. /**
  79. * Password Element WSSE Type
  80. *
  81. */
  82. const WSSE_ELEMENT_PASSWORD_TYPE = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText';
  83. /**
  84. * is this client used by the token service
  85. *
  86. * @var Zend_Service_DeveloperGarden_SecurityTokenServer
  87. */
  88. protected $_tokenService = null;
  89. /**
  90. * Perform a SOAP call but first check for adding STS Token or fetch one
  91. *
  92. * @param string $name
  93. * @param array $arguments
  94. * @return mixed
  95. */
  96. public function __call($name, $arguments)
  97. {
  98. /**
  99. * add WSSE Security header
  100. */
  101. if ($this->_tokenService !== null) {
  102. // if login method we addWsseLoginHeader
  103. if (in_array('login', $arguments)) {
  104. $this->addWsseLoginHeader();
  105. } elseif ($name == 'getTokens') {
  106. $this->addWsseTokenHeader($this->_tokenService->getLoginToken());
  107. } else {
  108. $this->addWsseSecurityTokenHeader($this->_tokenService->getTokens());
  109. }
  110. }
  111. return parent::__call($name, $arguments);
  112. }
  113. /**
  114. * sets the internal handling for handle token service
  115. *
  116. * @param Zend_Service_DeveloperGarden_SecurityTokenServer $isTokenService
  117. * @return Zend_Service_DeveloperGarden_Client_Soap
  118. */
  119. public function setTokenService(Zend_Service_DeveloperGarden_SecurityTokenServer $tokenService)
  120. {
  121. $this->_tokenService = $tokenService;
  122. return $this;
  123. }
  124. /**
  125. * returns the currently configured tokenService object
  126. *
  127. * @return Zend_Service_DeveloperGarden_SecurityTokenServer
  128. */
  129. public function getTokenService()
  130. {
  131. return $this->_tokenService;
  132. }
  133. /**
  134. * Sets new credential callback object
  135. *
  136. * @param Zend_Service_DeveloperGarden_Credential $credential
  137. * @return Zend_Service_DeveloperGarden_Client_Soap
  138. */
  139. public function setCredential(Zend_Service_DeveloperGarden_Credential $credential)
  140. {
  141. $this->_credential = $credential;
  142. return $this;
  143. }
  144. /**
  145. * returns the internal credential callback object
  146. *
  147. * @return Zend_Service_DeveloperGarden_Credential
  148. */
  149. public function getCredential()
  150. {
  151. return $this->_credential;
  152. }
  153. /**
  154. * creates the login header and add
  155. *
  156. * @return SoapHeader
  157. */
  158. public function getWsseLoginHeader()
  159. {
  160. $dom = new DOMDocument();
  161. /**
  162. * Security Element
  163. */
  164. $securityElement = $dom->createElementNS(
  165. self::WSSE_NAMESPACE_SECEXT,
  166. 'wsse:' . self::WSSE_SECURITY_ELEMENT
  167. );
  168. $securityElement->setAttribute('mustUnderstand', true);
  169. /**
  170. * Username Token Element
  171. */
  172. $usernameTokenElement = $dom->createElementNS(
  173. self::WSSE_NAMESPACE_SECEXT,
  174. self::WSSE_ELEMENT_USERNAMETOKEN
  175. );
  176. /**
  177. * Username Element
  178. */
  179. $usernameElement = $dom->createElementNS(
  180. self::WSSE_NAMESPACE_SECEXT,
  181. self::WSSE_ELEMENT_USERNAME,
  182. $this->_credential->getUsername(true)
  183. );
  184. /**
  185. * Password Element
  186. */
  187. $passwordElement = $dom->createElementNS(
  188. self::WSSE_NAMESPACE_SECEXT,
  189. self::WSSE_ELEMENT_PASSWORD,
  190. $this->_credential->getPassword()
  191. );
  192. $passwordElement->setAttribute('Type', self::WSSE_ELEMENT_PASSWORD_TYPE);
  193. $usernameTokenElement->appendChild($usernameElement);
  194. $usernameTokenElement->appendChild($passwordElement);
  195. $securityElement->appendChild($usernameTokenElement);
  196. $dom->appendChild($securityElement);
  197. $authSoapVar = new SoapVar(
  198. $dom->saveXML($securityElement),
  199. XSD_ANYXML,
  200. self::WSSE_NAMESPACE_SECEXT,
  201. self::WSSE_SECURITY_ELEMENT
  202. );
  203. $authSoapHeader = new SoapHeader(
  204. self::WSSE_NAMESPACE_SECEXT,
  205. self::WSSE_SECURITY_ELEMENT,
  206. $authSoapVar,
  207. true
  208. );
  209. return $authSoapHeader;
  210. }
  211. /**
  212. * creates the token auth header for direct calls
  213. *
  214. * @param Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  215. * @return SoapHeader
  216. */
  217. public function getWsseTokenHeader(
  218. Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  219. ) {
  220. $format = '<wsse:%s xmlns:wsse="%s" SOAP-ENV:mustUnderstand="1">%s</wsse:%s>';
  221. $securityHeader = sprintf(
  222. $format,
  223. self::WSSE_SECURITY_ELEMENT,
  224. self::WSSE_NAMESPACE_SECEXT,
  225. $token->getTokenData(),
  226. self::WSSE_SECURITY_ELEMENT
  227. );
  228. $authSoapVar = new SoapVar(
  229. $securityHeader,
  230. XSD_ANYXML,
  231. self::WSSE_NAMESPACE_SECEXT,
  232. self::WSSE_SECURITY_ELEMENT
  233. );
  234. $authSoapHeader = new SoapHeader(
  235. self::WSSE_NAMESPACE_SECEXT,
  236. self::WSSE_SECURITY_ELEMENT,
  237. $authSoapVar,
  238. true
  239. );
  240. return $authSoapHeader;
  241. }
  242. /**
  243. * creates the security token auth header for direct calls
  244. *
  245. * @param Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  246. * @return SoapHeader
  247. */
  248. public function getWsseSecurityTokenHeader(
  249. Zend_Service_DeveloperGarden_Response_SecurityTokenServer_GetTokensResponse $token
  250. ) {
  251. $format = '<wsse:%s xmlns:wsse="%s" SOAP-ENV:mustUnderstand="1">%s</wsse:%s>';
  252. $securityHeader = sprintf(
  253. $format,
  254. self::WSSE_SECURITY_ELEMENT,
  255. self::WSSE_NAMESPACE_SECEXT,
  256. $token->getTokenData(),
  257. self::WSSE_SECURITY_ELEMENT
  258. );
  259. $authSoapVar = new SoapVar(
  260. $securityHeader,
  261. XSD_ANYXML,
  262. self::WSSE_NAMESPACE_SECEXT,
  263. self::WSSE_SECURITY_ELEMENT
  264. );
  265. $authSoapHeader = new SoapHeader(
  266. self::WSSE_NAMESPACE_SECEXT,
  267. self::WSSE_SECURITY_ELEMENT,
  268. $authSoapVar,
  269. true
  270. );
  271. return $authSoapHeader;
  272. }
  273. /**
  274. * adds the login specific header to the client
  275. *
  276. * @return Zend_Service_DeveloperGarden_Client_Soap
  277. */
  278. public function addWsseLoginHeader()
  279. {
  280. return $this->addSoapInputHeader($this->getWsseLoginHeader());
  281. }
  282. /**
  283. * adds the earlier fetched token to the header
  284. *
  285. * @param Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  286. * @return Zend_Service_DeveloperGarden_Client_Soap
  287. */
  288. public function addWsseTokenHeader(
  289. Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  290. ) {
  291. return $this->addSoapInputHeader($this->getWsseTokenHeader($token));
  292. }
  293. /**
  294. * adds the earlier fetched token to the header
  295. *
  296. * @param Zend_Service_DeveloperGarden_Response_SecurityTokenServer_SecurityTokenResponse $token
  297. * @return Zend_Service_DeveloperGarden_Client_Soap
  298. */
  299. public function addWsseSecurityTokenHeader(
  300. Zend_Service_DeveloperGarden_Response_SecurityTokenServer_GetTokensResponse $token
  301. ) {
  302. return $this->addSoapInputHeader($this->getWsseSecurityTokenHeader($token));
  303. }
  304. }