Produits Entr'ouvert » Authentic 2

authentic2-auth-fc is entirely under the copyright of Entr'ouvert and

distributed under the license AGPLv3 or later.

include COPYING

recursive-include src/authentic2_auth_fc/templates *.html

recursive-include src/authentic2_auth_fc/static *.css *.png *.svg

recursive-include src/authentic2_auth_fc/locale *.po *.mo

recursive-include src/authentic2_auth_fc *.json

include VERSION

include MANIFEST.in

==================

authentic2-auth-fc

==================

Authentic2 plugin to authenticate against *France Connect* the french

citizen and entreprise SSO.

Installation

============

Install with `pip install authentic2-auth-fc`

Settings

========

Add `A2_FC_ENABLE = True` to your `local_settings.py` file

Define the needed parameters::

   A2_FC_CLIENT_ID = 'id assigned by DISIC'

   A2_FC_CLIENT_SECRET = 'secret assigned by DISIC'

   A2_FC_VERIFY_CERTIFICATE = False # True for production

A2_FC_CREATE = True set the plugin in provisionning mode. If a sub is unknown,

a user is created instead of asking authentication.

When the create mode is enabled, the link for unlinking is hidden on the

profile frontend. This is due to the not yet implemented need of asking

the user credentiels when unlinking a user created without any other credential

that the authentication delegation. Unlinking meaning, loosing access to this

account at the end of the current session. To enable unlinking when create is

unabled use A2_FC_ENABLE_UNLINK_WHEN_CREATE = True.

A2_FC_LOGOUT_WHEN_UNLINK = True is using to trigger a logout toward the OP

after unlinking.

Platforms

=========

When testing against another platform than FranceConnect you must change

the default endpoints URL in your `local_settings.py` file::

   A2_FC_AUTHORIZE_URL = 'https://fcp.integ01.dev-franceconnect.fr/api/v1/authorize'

   A2_FC_TOKEN_URL = 'https://fcp.integ01.dev-franceconnect.fr/api/v1/token'

   A2_FC_USERINFO_URL = 'https://fcp.integ01.dev-franceconnect.fr/api/v1/userinfo'

   A2_FC_LOGOUT_URL = 'https://fcp.integ01.dev-franceconnect.fr/api/v1/logout'

Data Providers

==============

You can define data provider endpoints with the following dictionnary :

A2_FC_FD_LIST = {

    'revenu_fiscal_de_reference': [

        {

            'name': 'OpenDataSoft',

            'url': 'https://datafranceconnect.opendatasoft.com/api/records/1.0/search',

            'query_dic': {'dataset': 'guichet-des-bretons', },

        },

    ],

}

Data is requested using the login or link endpoint view giving space delimited

scopes in the `fd_scopes` get parameter :

    fc/callback/?next=%2F&fd_scopes=revenu_fiscal_de_reference scolarite

The data received is recorded in the session with a dictionnary named `fc-data`

with scopes as keys and lists of data as values. A data is a tuple

FD name and data content.

fc_data_dic = {

    scope_name = [

        [FD_name, data],

    ],

}

Attribute mapping

=================

You can map France Connect attributes to Authentic2 attributes through the

setting A2_FC_USER_INFO_MAPPINGS. A2_FC_USER_INFO_MAPPINGS is a dictionnary

whose keys are authentic2's attribute names and value can be France Connect

attribute names or dictionnary with the following keys:

- `value` : a static value which will be assigned to the authentic2 attribute,

  can be any Python value,

- `ref` : the name of a France Connect attribute,

- `translation` : a transformation name among:

  -  @insee-communes@ : translate the value using mapping from INSEE code of

     communes to their name,

  -  @insee-countries@ : translate the value using mapping from INSEE code of

     countries to their name,

  -  @simple@ : lookup the value using the dictionnary in @translation_simple@.

- `compute`: compute a value using a known function, only known function for now

  is @today@ which returns @datetime.date.today()@.

- `verified`: set the verified flag on the value.

Exemple:

A2_FC_USER_INFO_MAPPINGS = {

  'first_name': 'given_name',

  'last_name': 'family_name',

  'birthdate': { 'ref': 'birthdate', 'translation': 'isodate' },

  'birthplace': { 'ref': 'birthplace', 'translation': 'insee-communes' },

  'birthcountry': { 'ref': 'birthcountry', 'translation': 'insee-countries' },

  'birthplace_insee': 'birthplace',

  'birthcountry_insee': 'birthcountry',

  'title': {

     'ref': 'gender',

     'translation': 'simple',

     'translation_simple': {

        'male': 'Monsieur',

        'female': 'Madame',

     }

  },

  'gender': 'gender',

  'validated': { 'value': True },

  'validation_date': { 'compute': 'today' },

  'validation_context': { 'value': 'France Connect' },

}

python-authentic2-auth-fc (1.0.1-0) wheezy; urgency=low

  * First upstream release

 -- Benjamin Dauvergne <bdauvergne@entrouvert.org>  Thu, 2 Dec 2014 12:00:29 +0100

7

Source: python-authentic2-auth-fc

Maintainer: Benjamin Dauvergne <info@entrouvert.com>

Section: python

Priority: optional

Build-Depends: python-setuptools (>= 0.6b3), python-all (>= 2.6), debhelper (>= 7.4.3),

 python-django (>= 1.5)

Standards-Version: 3.9.1

X-Python-Version: >= 2.6

Package: python-authentic2-auth-fc

Architecture: all

Depends: ${misc:Depends},

    python-authentic2 (>= 2.1.2.1009),

    python-requests,

    python-requests-oauthlib

Description: FranceConnect authentication frontend for Authentic2

#!/usr/bin/make -f

# This file was automatically generated by stdeb 0.6.0+git at

# Fri, 14 Jun 2013 17:33:52 +0200

%:

	dh $@ --with python2 --buildsystem=python_distutils

3.0 (quilt)

#!/bin/sh

# Get venv site-packages path

DSTDIR=`python -c 'from distutils.sysconfig import get_python_lib; print(get_python_lib())'`

# Get not venv site-packages path

# Remove first path (assuming that is the venv path)

NONPATH=`echo $PATH | sed 's/^[^:]*://'`

SRCDIR=`PATH=$NONPATH python -c 'from distutils.sysconfig import get_python_lib; print(get_python_lib())'`

# Clean up

rm -f $DSTDIR/lasso.*

rm -f $DSTDIR/_lasso.*

# Link

ln -sv $SRCDIR/lasso.py $DSTDIR

ln -sv $SRCDIR/_lasso.* $DSTDIR

exit 0

#!/usr/bin/python

import sys

import os

import subprocess

import glob

from setuptools import setup, find_packages

from setuptools.command.install_lib import install_lib as _install_lib

from distutils.command.build import build as _build

from distutils.command.sdist import sdist

from distutils.cmd import Command

class compile_translations(Command):

    description = 'compile message catalogs to MO files via django compilemessages'

    user_options = []

    def initialize_options(self):

        pass

    def finalize_options(self):

        pass

    def run(self):

        curdir = os.getcwd()

        try:

            os.environ.pop('DJANGO_SETTINGS_MODULE', None)

            from django.core.management import call_command

            for dir in glob.glob('src/*'):

                for path, dirs, files in os.walk(dir):

                    if 'locale' not in dirs:

                        continue

                    os.chdir(os.path.realpath(path))

                    call_command('compilemessages')

                    os.chdir(curdir)

        except ImportError:

            print

            sys.stderr.write('!!! Please install Django >= 1.4 to build translations')

            print

            print

            os.chdir(curdir)

class build(_build):

    sub_commands = [('compile_translations', None)] + _build.sub_commands

class eo_sdist(sdist):

    def run(self):

        print "creating VERSION file"

        if os.path.exists('VERSION'):

            os.remove('VERSION')

        version = get_version()

        version_file = open('VERSION', 'w')

        version_file.write(version)

        version_file.close()

        sdist.run(self)

        print "removing VERSION file"

        if os.path.exists('VERSION'):

            os.remove('VERSION')

class install_lib(_install_lib):

    def run(self):

        self.run_command('compile_translations')

        _install_lib.run(self)

def get_version():

    '''Use the VERSION, if absent generates a version with git describe, if not

       tag exists, take 0.0.0- and add the length of the commit log.

    '''

    if os.path.exists('VERSION'):

        with open('VERSION', 'r') as v:

            return v.read()

    if os.path.exists('.git'):

        p = subprocess.Popen(['git','describe','--dirty','--match=v*'],

                stdout=subprocess.PIPE, stderr=subprocess.PIPE)

        result = p.communicate()[0]

        if p.returncode == 0:

            return result.split()[0][1:].replace('-', '.')

        else:

            return '0.0.0-%s' % len(

                    subprocess.check_output(

                            ['git', 'rev-list', 'HEAD']).splitlines())

    return '0.0.0'

README = file(os.path.join(

    os.path.dirname(__file__),

    'README')).read()

setup(name='authentic2-auth-fc',

        version=get_version(),

        license='AGPLv3',

        description='Authentic2 FranceConnect plugin',

        long_description=README,

        author="Entr'ouvert",

        url='https://repos.entrouvert.org/authentic2-auth-fc.git',

        author_email="info@entrouvert.com",

        packages=find_packages('src'),

        package_dir={

            '': 'src',

        },

        package_data={

            'authentic2_auth_fc': [

                  'templates/authentic2_auth_fc/*.html',

                  'static/authentic2_auth_fc/css/*.css',

                  'static/authentic2_auth_fc/img/*.png',

                  'static/authentic2_auth_fc/img/*.svg',

                  'locale/fr/LC_MESSAGES/django.po',

                  'locale/fr/LC_MESSAGES/django.mo',

                  '*.json',

            ],

        },

        install_requires=[

            'authentic2',

            'requests',

            'requests-oauthlib',

        ],

        entry_points={

            'authentic2.plugin': [

                'authentic2-auth-fc = authentic2_auth_fc:Plugin',

            ],

        },

        cmdclass={

            'build': build,

            'install_lib': install_lib,

            'compile_translations': compile_translations,

            'sdist': eo_sdist},

        zip_safe=False,

)

import os

LANGUAGE_CODE = 'en'

DATABASES = {

    'default': {

        'ENGINE': os.environ.get('DB_ENGINE', 'django.db.backends.sqlite3'),

        'TEST': {

            'NAME': 'a2-test',

        },

    }

}

# Tox (http://tox.testrun.org/) is a tool for running tests

# in multiple virtualenvs. This configuration file will run the

# test suite on all supported python versions. To use it, "pip install tox"

# and then run "tox" from this directory.

[tox]

toxworkdir = {env:TMPDIR:/tmp}/tox-{env:USER}/authentic2-auth-fc/

envlist = {coverage,nocoverage}-{dj18}-{pg,sqlite}

[testenv]

# django.contrib.auth is not tested it does not work with our templates

whitelist_externals =

  /bin/mv

setenv =

  AUTHENTIC2_SETTINGS_FILE=tests/settings.py

  DJANGO_SETTINGS_MODULE=authentic2.settings

  sqlite: DB_ENGINE=django.db.backends.sqlite3

  pg: DB_ENGINE=django.db.backends.postgresql_psycopg2

  coverage: COVERAGE=--junitxml=junit-{envname}.xml --cov-report xml --cov=src/ --cov-config .coveragerc

  fast: FAST=--nomigrations

usedevelop =

  coverage: True

  nocoverage: False

deps =

  dj18: django>1.8,<1.9

  dj19: django>1.8,<1.9

  pg: psycopg2<2.7

  coverage

  pytest-cov

  pytest-django

  mock

  pytest

  lxml

  cssselect

  pylint

  pylint-django

  django-webtest

  WebTest

  pyquery

  httmock

  pytest-catchlog

  pytz

  ../authentic2

commands =

  ./getlasso.sh

  py.test {env:FAST:} {env:COVERAGE:} {posargs:tests/}

-