8.3.2

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Stanford SSP
 
+8.3.2
+--------------------------------------------------------------------------------
+_Release Date: 2023-07-07_
+
+- Add validation for sunetID add user form.
+
 8.3.1
 --------------------------------------------------------------------------------
 _Release Date: 2023-06-27_

src/Form/AddUserForm.php

@@ -7,6 +7,7 @@
 use Drupal\Core\Form\FormStateInterface;
 use Drupal\Core\Password\PasswordGeneratorInterface;
 use Drupal\externalauth\AuthmapInterface;
+use Drupal\stanford_ssp\Service\StanfordSSPWorkgroupApiInterface;
 use Drupal\user\Entity\User;
 use Drupal\Component\Utility\EmailValidatorInterface;
 use Symfony\Component\DependencyInjection\ContainerInterface;
@@ -77,6 +78,7 @@ public function buildForm(array $form, FormStateInterface $form_state) {
       '#title' => $this->t('SUNetID'),
       '#description' => $this->t('Enter the SUNetID of the user you wish to add.'),
       '#required' => TRUE,
+      '#element_validate' => [[static::class, 'validateSunetId']],
     ];
 
     $form['name'] = [
@@ -119,6 +121,29 @@ public function buildForm(array $form, FormStateInterface $form_state) {
     return $form;
   }
 
+  /**
+   * SunetID input validation.
+   *
+   * @param array $element
+   *   Field element.
+   * @param \Drupal\Core\Form\FormStateInterface $form_state
+   *   Submitted form state.
+   * @param array $complete_form
+   *   Complete form.
+   */
+  public static function validateSunetId(array &$element, FormStateInterface $form_state, array &$complete_form){
+    $value = $element['#value'];
+    if(!preg_match('/^[a-z0-9]*$/', $value)) {
+      $form_state->setError($element, t('Invalid SunetID'));
+    }
+
+    /** @var \Drupal\stanford_ssp\Service\StanfordSSPWorkgroupApiInterface $workgroup_api */
+    $workgroup_api = \Drupal::service('stanford_ssp.workgroup_api');
+    if ($workgroup_api->connectionSuccessful() && !$workgroup_api->isSunetValid($value)) {
+      $form_state->setError($element, t('Invalid SunetID'));
+    }
+  }
+
   /**
    * Get available roles, limited if the role_delegation module is enabled.
    *

src/Service/StanfordSSPWorkgroupApi.php

@@ -175,6 +175,13 @@ public function isWorkgroupValid(string $workgroup): bool {
     return !empty($this->callApi($workgroup));
   }
 
+  /**
+   * {@inheritDoc}
+   */
+  public function isSunetValid(string $sunet): bool {
+    return !!$this->callApi(null, $sunet);
+  }
+
   /**
    * Call the workgroup api and get the response for the workgroup.
    *

src/Service/StanfordSSPWorkgroupApiInterface.php

@@ -110,4 +110,15 @@ public function userInAllGroups(array $workgroups, string $name): bool;
    */
   public function isWorkgroupValid(string $workgroup): bool;
 
+  /**
+   * Check if the provided sunet exists.
+   *
+   * @param string $sunet
+   *   Sunet String to check.
+   *
+   * @return bool
+   *   If the user exists.
+   */
+  public function isSunetValid(string $sunet): bool;
+
 }

stanford_ssp.info.yml

@@ -2,7 +2,7 @@ name: Stanford SimpleSAML PHP
 description: Configures SimpleSAML PHP auth to work in Stanford web environment
 core_version_requirement: ^9 || ^10
 type: module
-version: 8.3.1
+version: 8.3.2
 package: Stanford
 dependencies:
   - simplesamlphp_auth:simplesamlphp_auth