VATSIM SSO with Laravel 5.6 Error

[Lakehal Abd Ellatif]

I am working on VATSIM SSO for VATSAF (Vatsim South African Division Website) with Laravel 5.6

I have installed and configured VATSIM SSO vatsim/sso-laravel 3* as any other Laravel packages

 

I am using harden demo API to implement SSO before asking for VATSIM credentials However I am getting this error

 

Trying to get property 'request' of non-object

Error in line 234 in SSO.php file:
if ( $sso->request->result === 'success' )

 

My config/vatsim-sso.php file looks like this

 

<?php

return [

   /*
    * The location of the VATSIM OAuth interface
    */
   'base'            => 'http://sso.hardern.net/server/auth/login/',

   /*
    * The consumer key for your organisation (provided by VATSIM)
    */
   'key'             => "SSO_DEMO_VACC",

   /*
   * The secret key for your organisation (provided by VATSIM)
   * Do not give this to anyone else or display it to your users. It must be kept server-side
   */
   'secret'          => "04i_~ruVUE.1-do1--sc",

   /*
    * The URL users will be redirected to after they log in, this should
    * be on the same server as the request
    */
   'return'          => 'vatsaf.io:8023', //not sensitive

   /*
    * The signing method you are using to encrypt your request signature.
    * Different options must be enabled on your account at VATSIM.
    * Options: RSA / HMAC
    */
   'method'          => 'RSA',

   /*
    * Your RSA **PRIVATE** key
    * If you are not using RSA, this value can be anything (or not set)
    */
   'cert'            => <<<EOT
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
EOT
   ,

   /*
    * Set to true to allow suspended users to sign in
    */
   'allow_suspended' => false,

   /*
    * Set to true to allow inactive users to sign in
    */
   'allow_inactive'  => false,

];

[Daniel Hawton]

It sounds like $sso isn't being initialized correctly before the $sso->request call, as PHP is telling you $sso isn't an object.

 

Is something like this before your line 234?

 

$sso = new SSO(config('sso.base'),
                            config('sso.key'),
                            config('sso.secret'),
                            config('sso.method'),
                            config('sso.cert'),
                            ['allow_suspended' => false, 'allow_inactive' => false]
                           );

[Lakehal Abd Ellatif]

It is already configured on the OauthServiceProvider like so

 

return new SSO(
			array_get($config, 'base'), // base
			array_get($config, 'key'), // key
			array_get($config, 'secret'), // secret
			array_get($config, 'method'), // method
			array_get($config, 'cert') // certificate
		);

 

Here is the project repo if you want to take a quick look https://bitbucket.org/lotfio/vacc-panel/src/master/

[Neil Farrington]

This is the same issue as viewtopic.php?f=134&t=76302 - unfortunately, the demo SSO environment isn't available at the moment, which means when the JSON response is received, it doesn't have the correct format.

 

Currently, the demo environment simply returns "DB1001B", however when functioning properly, it should return something like:

{"request":{"result":"success","message":""},"user":{"id":"1104841","name_first":"Neil","name_last":"Farrington","rating":{"id":"4","short":"S3","long":"Student 3","GRP":"TMA Controller"},"pilot_rating":{"rating":"1","1":{"id":1,"short":"P1","long":"Online Pilot"}},"experience":"N","reg_date":"2009-04-08 21:51:39","country":{"code":"GB","name":"United Kingdom"},"region":{"code":"EUR","name":"Europe"},"division":{"code":"GBR","name":"United Kingdom"},"subdivision":{"code":null,"name":null}}}

[Matthew Cianfarani]

Regarding the Demo environment not working -

 

Gents, we know there's an issue. Unfortunately when transitioning technical roles and staff, things like this can happen. I am hoping we can get this resolved in the next few days.

 

For [Mod - Happy Thoughts]istance with implementing SSO in alternative methods, reach out to my team ([email protected]) and we can help.

 

Again, sorry for the stress and difficulty here. We are all heads-down working on a number of systems at the moment.

[Lakehal Abd Ellatif]

Thank you so much @Neil and @Matthew for you replays.

I will send an email to the provided address and see what will come out .

 

Best Regards,

[Aidan Stevens]

All,

 

The demo SSO application is now back up and running. Thank you for your patience and a huge shoutout to Jamie Fox (VATGOV3) for fixing the MySQL daemon that was in a broken state due to an update.

 

Regards,