util.go

package saml

import (
	"crypto/rand"
	"io"
	"net/url"
	"strings"
	"time"

	dsig "github.com/russellhaering/goxmldsig"
)

// TimeNow is a function that returns the current time. The default
// value is time.Now, but it can be replaced for testing.
var TimeNow = func() time.Time { return time.Now().UTC() }

// Clock is assigned to dsig validation and signing contexts if it is
// not nil, otherwise the default clock is used.
var Clock *dsig.Clock

// RandReader is the io.Reader that produces cryptographically random
// bytes when they are need by the library. The default value is
// rand.Reader, but it can be replaced for testing.
var RandReader = rand.Reader

//nolint:unparam // This always receives 20, but we want the option to do more or less if needed.
func randomBytes(n int) []byte {
	rv := make([]byte, n)

	if _, err := io.ReadFull(RandReader, rv); err != nil {
		panic(err)
	}
	return rv
}

// IsSameBase returns true if both urls have the same base URI, false otherwise.
func IsSameBase(refURL, someURL string) bool {
	if refURL == someURL {
		return true
	}

	ref, err := url.Parse(refURL)
	if err != nil {
		return false
	}

	if ref.Host == "" {
		return false
	}

	base := ref.ResolveReference(&url.URL{Path: "/"})
	base.Path = "" // Strip path "/"

	return strings.HasPrefix(someURL, base.String())
}