Merge pull request #157 from limosa-io/configurable-auth-schemes

Configurable auth schemes

Author: arietimmerman

config/scim.php

@@ -14,5 +14,8 @@
         'defaultPageSize' => 10,
         'maxPageSize' => 100,
         'cursorPaginationEnabled' => true,
+    ],
+    "authenticationSchemes" => [
+        "oauthbearertoken"
     ]
 ];

src/Http/Controllers/ServiceProviderController.php

@@ -6,6 +6,61 @@
 
 class ServiceProviderController extends Controller
 {
+    private function getAuthenticationSchemes(): array
+    {
+        $allSchemes = [
+            'oauth' => [
+                'name' => 'OAuth',
+                'description' => 'Authentication scheme using the OAuth Standard',
+                'specUri' => 'http://tools.ietf.org/html/rfc5849',
+                'documentationUri' => 'http://example.com/help/oauth.html',
+                'type' => 'oauth',
+            ],
+            'oauth2' => [
+                'name' => 'OAuth 2.0',
+                'description' => 'Authentication scheme using the OAuth 2.0 Standard',
+                'specUri' => 'http://tools.ietf.org/html/rfc6749',
+                'documentationUri' => 'http://example.com/help/oauth2.html',
+                'type' => 'oauth2',
+            ],
+            'oauthbearertoken' => [
+                'name' => 'OAuth Bearer Token',
+                'description' => 'Authentication scheme using the OAuth Bearer Token Standard',
+                'specUri' => 'http://www.rfc-editor.org/info/rfc6750',
+                'documentationUri' => 'http://example.com/help/oauth.html',
+                'type' => 'oauthbearertoken',
+            ],
+            'httpbasic' => [
+                'name' => 'HTTP Basic',
+                'description' => 'Authentication scheme using the HTTP Basic Standard',
+                'specUri' => 'http://www.rfc-editor.org/info/rfc2617',
+                'documentationUri' => 'http://example.com/help/httpBasic.html',
+                'type' => 'httpbasic',
+            ],
+            'httpdigest' => [
+                'name' => 'HTTP Digest',
+                'description' => 'Authentication scheme using the HTTP Digest Standard',
+                'specUri' => 'http://www.rfc-editor.org/info/rfc2617',
+                'documentationUri' => 'http://example.com/help/httpDigest.html',
+                'type' => 'httpdigest',
+            ],
+        ];
+
+        $schemes = config('scim.authenticationSchemes', ['oauthbearertoken']);
+        $authenticationSchemes = [];
+
+        foreach ($schemes as $index => $scheme) {
+            if (isset($allSchemes[$scheme])) {
+                $authenticationSchemes[] = array_merge(
+                    $allSchemes[$scheme],
+                    ['primary' => $index === 0]
+                );
+            }
+        }
+
+        return $authenticationSchemes;
+    }
+
     public function index()
     {
         $cursorPaginationEnabled = (bool) config('scim.pagination.cursorPaginationEnabled', true);
@@ -22,6 +77,8 @@ public function index()
             $pagination["cursorTimeout"] = 3600;
         }
 
+        $authenticationSchemes = $this->getAuthenticationSchemes();
+
         return [
             "schemas" => ["urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig"],
             "patch" => [
@@ -45,25 +102,7 @@ public function index()
             "etag" => [
                 "supported" => true,
             ],
-            "authenticationSchemes" => [ // "oauth", "oauth2", "oauthbearertoken", "httpbasic", and "httpdigest"
-                [
-                    "name" => "OAuth Bearer Token",
-                    "description" =>
-                    "Authentication scheme using the OAuth Bearer Token Standard",
-                    "specUri" => "http://www.rfc-editor.org/info/rfc6750",
-                    "documentationUri" => "http://example.com/help/oauth.html",
-                    "type" => "oauthbearertoken",
-                    "primary" => true,
-                ],
-                [
-                    "name" => "HTTP Basic",
-                    "description" =>
-                    "Authentication scheme using the HTTP Basic Standard",
-                    "specUri" => "http://www.rfc-editor.org/info/rfc2617",
-                    "documentationUri" => "http://example.com/help/httpBasic.html",
-                    "type" => "httpbasic",
-                ],
-            ],
+            "authenticationSchemes" => $authenticationSchemes,
             "pagination" => $pagination,
             "meta" => [
                 "location" => route('scim.serviceproviderconfig'),