geni-auth.js

var genilib = {};
genilib.trustedHost = 'https://www.emulab.net';
genilib.trustedPath = '/protogeni/speaks-for/index.html';

genilib.authorize = function(idOrObject, cert, callback, defaultMA, userBundle)
{
    var id;
    var authenticate;

    // If the user invokes with just a single object, it is a dictionary of options
    if (typeof(idOrObject) === 'object')
    {
	id = idOrObject.id;
	cert = idOrObject.toolCertificate;
	callback = idOrObject.complete;
	defaultMA = idOrObject.defaultMA;
	userBundle = idOrObject.userBundle;
	authenticate = idOrObject.authenticate;
	console.log('set args based on dictionary');
    }
    else
    {
	id = idOrObject;
    }

    shouldAuthenticate = (authenticate !== undefined)

  var wrapper = {};

  wrapper.other = window.open(genilib.trustedHost + genilib.trustedPath +
                              '?id=' +
                              encodeURIComponent(id),
                              'GENI Tool Authorization',
                              'height=600,width=800');

  wrapper.listener = function (event) {
    var data;
    if (event.source === wrapper.other &&
        event.origin === genilib.trustedHost &&
        event.data.ready)
    {
      data = {
        certificate: cert,
        tool: true,
	auth: shouldAuthenticate
      };
      if (userBundle)
      {
	data.userBundle = userBundle;
      }
      /* Include the default MA if specified. */
      if (defaultMA && defaultMA.url && defaultMA.name) {
          data.ma = {};
          data.ma.url = defaultMA.url;
          data.ma.name = defaultMA.name;
      }
      console.log('Sending cert to ' + genilib.trustedHost);
      wrapper.other.postMessage(data, genilib.trustedHost);
    }
    else if (event.source === wrapper.other &&
             event.origin === genilib.trustedHost &&
             event.data.id && event.data.id === id && event.data.credential)
    {
	wrapper.credential = event.data.credential;
	wrapper.credentialId = event.data.id;
	wrapper.authenticationToken = event.data.userToken;
	wrapper.encryptedCredential = event.data.encryptedCredential;
	if (shouldAuthenticate && event.data.userCertificate)
	{
	    console.log('authenticating');
	    authenticate(event.data.userCertificate, wrapper.authenticationToken, wrapper.toolAuthSuccess, wrapper.toolAuthFailure);
	}
	else
	{
	    console.log('sendAck');
	    wrapper.sendAck();
	}
    }
  };

    wrapper.sendAck = function () {
      window.removeEventListener('message', wrapper.listener, false);
//      wrapper.other.removeEventListener('close', wrapper.close, false);

      data = {
        id: wrapper.credentialId,
        ack: true
      };
      console.log('Sending ack to ' + genilib.trustedHost);
      wrapper.other.postMessage(data, genilib.trustedHost);

      callback(wrapper.credential, wrapper.encryptedCredential);
    };

    wrapper.toolAuthSuccess = function (toolToken) {
	data = {
	    id: wrapper.credentialId,
	    toolToken: toolToken
	};
	console.log('Sending tool token to ' + genilib.trustedHost);
	wrapper.other.postMessage(data, genilib.trustedHost);
    };

    wrapper.toolAuthFailure = function () {
	wrapper.sendAck();
    };

  wrapper.close = function (event) {
    window.removeEventListener('message', wrapper.message, false);
//    wrapper.other.removeEventListener('close', wrapper.close, false);
  };

  window.addEventListener('message', wrapper.listener, false);
//  wrapper.other.addEventListener('close', wrapper.close, false);

  // Return the other window so the caller can notice when it's gone
  // or put up UI directing the user's attention to the other window
  return wrapper.other;
};

genilib.sendCertificate = function (cert)
{
  var options = {
    certificate: cert,
    authority: true
  };
  window.opener.postMessage(options, '*'/*genilib.trustedHost*/);
  window.close();
};

genilib.sendCredential = function (cred)
{
  var options = {
    sfcred: cred,
    authority: true
  };
  window.opener.postMessage(options, '*'/*genilib.trustedHost*/);
  window.close();
};