syslogin

tokens.clj

(:require [net.cgrand.enlive-html :as enlive]
          [vurderings-api.rest.assertion :as assertion]
          [vurderings-api.rest.shared :as shared])
           
(defn syslogin-assertion->tokens
  "Takes XML response from non-interactive ADFS login, returns map with `:access-token`, `:refresh-token` and `:access-token-exp` keys"
  [syslogin-response-xml jwt-sign-secret response-ip]
  (let [xml-nodes     (enlive/xml-resource (java.io.StringReader. syslogin-response-xml))
        assertion-str (apply str (enlive/emit* (first (enlive/select xml-nodes [:Assertion]))))
        assertion     (assertion/parse-saml-assertion (shared/stream->obj assertion-str))]
    (create-tokens auth/standard-issuer
                   (auth-claims assertion {:ipAddress response-ip})
                   jwt-sign-secret)))