Produits Entr'ouvert » Authentic 2

from django.contrib import admin

from django.utils.translation import ugettext_lazy as _

from . import models

    list_select_related = True

    def name(self, obj):

    name.short_description = _('name')

admin.site.register(models.Role, RoleAdmin)

from django.utils.translation import ugettext_lazy as _

from django.utils.text import slugify

from django.contrib.contenttypes.models import ContentType

        # do not create scoped admin roles if the model is not scopable

        if not ou_model:

            continue

        slug = '_a2-' + slugify(name)

        name = scoped_name.format(ou=ou)

        ou_slug = slug + '-' + ou.slug

        if app_settings.MANAGED_CONTENT_TYPES == ():

        if ct_tuple not in MANAGED_CT:

            continue

        # General admin role

        slug = '_a2-' + slugify(name)

        if app_settings.MANAGED_CONTENT_TYPES is not None and ct_tuple not in \

                app_settings.MANAGED_CONTENT_TYPES:

from collections import namedtuple

from django.core.exceptions import ValidationError

from django.utils.translation import ugettext_lazy as _

from django.utils.text import slugify

from django.db import models

        admin_role = self.__class__.objects.get_admin_role(

            self, ou=self.ou,

            name=_('Managers of role "{role}"').format(

            slug='_a2-managers-of-role-{role}'.format(

            permissions=(utils.get_view_user_perm(),),

            self_administered=True)

        return admin_role

from django.db import models

from django.contrib.auth import get_user_model

from django.core.exceptions import MultipleObjectsReturned

from django.utils.translation import ugettext as _

from django.utils.encoding import force_text

from django.views.decorators.vary import vary_on_headers

from django import forms

from django.core.exceptions import ValidationError

from django.core.validators import RegexValidator

from django.utils.translation import ugettext_lazy as _, pgettext_lazy

from django.utils.functional import allow_lazy

from django.utils import html

from . import app_settings

from .forms import widgets, fields

DEFAULT_TITLE_CHOICES = (

    (pgettext_lazy('title', 'Mrs'), pgettext_lazy('title', 'Mrs')),

import base64

from django.core.exceptions import ImproperlyConfigured

from ...decorators import to_list

    source_attributes_values.append(instance['salt'])

    hash_algo = instance.get('hash', 'sha1')

    hasher = getattr(hashlib, hash_algo)

    value = u'!'.join(source_attributes_values)

    value = value.encode('utf-8')

    value = hasher(value).digest()

from django.utils.translation import ugettext_lazy as _

from django_rbac.utils import get_role_model

        ctx['django_user_' + str(av.attribute.name)] = serialized

        ctx['django_user_' + str(av.attribute.name) + ':verified'] = av.verified

    ctx['django_user_groups'] = [group for group in user.groups.all()]

    if user.username:

        splitted = user.username.rsplit('@', 1)

        ctx['django_user_domain'] = splitted[1] if '@' in user.username else ''

import logging

import random

import base64

import os

# code originaly copied from by now merely inspired by

from django.conf import settings

from django.contrib.auth.models import Group

from django.utils.encoding import force_bytes, force_text

from django.utils.six.moves.urllib import parse as urlparse

from authentic2.a2_rbac.models import Role

    @classmethod

    def ad_encoding(cls, s):

        return (u'"{0}"'.format(s)).encode('utf-16-le')

    @classmethod

from django.db import models

from django.utils import timezone

from django.core.mail import send_mail

from django.utils.translation import ugettext_lazy as _

from django.core.exceptions import ValidationError, MultipleObjectsReturned

try:

        return u'%s (%s)' % (human_name, short_id)

    def __repr__(self):

    def clean(self):

        pass

from django.http import Http404, HttpResponseForbidden, HttpResponse, HttpResponseBadRequest

from django.core.cache import cache as django_cache

from django.core.exceptions import ValidationError

from . import utils, app_settings, middleware

from .utils import to_list, to_iter

        for i, arg in enumerate(args):

            if self.args and i not in self.args:

                continue

        for kw, arg in sorted(kwargs.items(), key=lambda x: x[0]):

            if kw not in self.kwargs:

                continue

        return u'|'.join(parts)

import logging

import hashlib

from django.core.cache import cache

        self.key_prefix = key_prefix

    def key(self, keys):

        key = key.encode('utf-8')

        return '%s%s' % (self.key_prefix or self.KEY_PREFIX, hashlib.md5(key).hexdigest())

from django.core.exceptions import ObjectDoesNotExist

from django.http import HttpResponse, HttpResponseRedirect, \

    HttpResponseForbidden, HttpResponseBadRequest

from django.utils.translation import ugettext as _, ugettext_noop as N_

from django.views.decorators.csrf import csrf_exempt

from django.views.decorators.cache import never_cache

        logger.debug('access denied, return answer to the requester')

        set_saml2_response_responder_status_code(login.response,

                lasso.SAML2_STATUS_CODE_REQUEST_DENIED,

        return finish_sso(request, login)

    provider = load_provider(request, login.remoteProviderId,

import logging

class RequestContextFilter(logging.Filter):

    DEFAULT_USERNAME = '-'

        request_id = self.DEFAULT_REQUEST_ID

        if not request is None:

            if hasattr(request, 'user') and request.user.is_authenticated():

            ip = request.META.get('REMOTE_ADDR', self.DEFAULT_IP)

            request_id = request.request_id

        record.user = user

from django.contrib.auth import get_user_model

from django.core.management.base import BaseCommand

from optparse import make_option

COMMAND = 1

            for user in qs:

                o = {}

                for user_attribute, ldap_attribute in MAPPING.items():

                o['objectClass'] = ['inetOrgPerson']

                dn = 'uid=%s,%s' % (escape_dn_chars(o['uid'][0]), attrs['suffix'])

                self.logger.debug(u'sending entry %s %s', dn, o)

from django import forms

from django.contrib.contenttypes.models import ContentType

from django.db.models.query import Q

from django.utils.text import slugify

from django.core.exceptions import ValidationError

    def save(self, commit=True):

        instance = self.instance

        if not instance.slug:

            qs = instance.__class__.objects.all()

            if instance.pk:

                qs = qs.exclude(pk=instance.pk)

            if self.show_all_ou and (len(self.ou_qs) > 1 or self.search_all_ous):

                choices.append(('all', all_ou_label))

            for ou in self.ou_qs:

            if self.search_all_ous:

                choices.append(('none', pgettext('organizational unit', 'None')))

from django_rbac.utils import get_ou_model

from django.http import HttpResponseRedirect

from django.contrib import messages

from django.utils.translation import ugettext as _

from authentic2 import data_transfer

    @property

    def title(self):

    def authorize(self, request, *args, **kwargs):

        super(OrganizationalUnitDetailView, self).authorize(request, *args, **kwargs)

from import_export.resources import ModelResource

from import_export.fields import Field

from import_export.widgets import Widget

        raise NotImplementedError

    def render(self, value):

class UserResource(ModelResource):

            result.add(role)

            for pr in role.parent_relation.all():

                result.add(pr.parent)

    class Meta:

        model = get_user_model()

from django.utils.translation import ugettext as _

from django.contrib import messages

from django.shortcuts import get_object_or_404

    @property

    def title(self):

    def get_table_queryset(self):

        return self.object.authorized_roles.all()

from django.views.generic.detail import SingleObjectMixin

from django.http import HttpResponse, Http404

from django.utils.encoding import force_text

from django.utils.translation import ugettext_lazy as _

from django.utils.timezone import now

from django.core.urlresolvers import reverse, reverse_lazy

    def get_instance_name(self):

        if hasattr(self, 'get_object'):

        return u''

    def get_context_data(self, **kwargs):

        menu_entries = []

        for entry in self.get_homepage_entries():

            menu_entries.append({

                'slug': entry.get('slug', ''),

            })

        return menu_entries

            with transaction.atomic():

                import_site(json_site, ImportContext())

        except DataImportError as e:

            return self.form_invalid(form)

        return super(SiteImportView, self).form_valid(form)

import operator

from django_select2.forms import ModelSelect2Widget, ModelSelect2MultipleWidget

from django.contrib.auth import get_user_model

from django_rbac.backends import DjangoRBACBackend

from django_rbac.utils import get_role_model, get_ou_model

        queries = []

        for term in term.split():

            queries.append(super(SplitTermMixin, self).filter_queryset(term, queryset=qs))

        return qs

class RoleLabelMixin(object):

    def label_from_instance(self, obj):

        if obj.ou and utils.get_ou_count() > 1:

            label = u'{ou} - {obj}'.format(

                ou=obj.ou, obj=obj)

from django.conf import settings

from django.db import models

from django.db.models.query import Q

from django.utils.translation import ugettext_lazy as _

from django.utils.six.moves.urllib import parse as urlparse

from django.core.exceptions import ValidationError, FieldDoesNotExist

        verbose_name_plural = _('password reset')

    def __unicode__(self):

class Service(models.Model):

        return self.name

    def __repr__(self):

    def authorize(self, user):

        if not self.authorized_roles.exists():

import logging

from django.contrib import admin

from django.utils.translation import ugettext as _

from django.conf.urls import url

from django.conf import settings

    def render(self, name, value, attrs=None):

        if attrs is None:

            attrs = {}

            attrs['rows'] = value.count('\n') + 5

            attrs['cols'] = min(max((len(x) for x in value.split('\n'))), 150)

        return super(TextAndFileWidget, self).render(name, value, attrs)

from django.conf import settings

from django.http import HttpResponseRedirect, Http404, HttpResponse

from django.shortcuts import render

from django.utils.six.moves.urllib import parse as urlparse

from django.core.exceptions import ValidationError

        return None

    logger.debug('loaded %d bytes', len(metadata))

    try:

    except:

        logging.error('SAML metadata autoload: retrieved metadata for entity '

                      'id %s is not UTF-8', provider_id)

import hashlib

import numbers

import datetime

import requests

from authentic2.compat_lasso import lasso

from django.db.models import Q

from django.conf import settings

from django.core.exceptions import ValidationError

from django.utils.translation import ugettext_lazy as _

from django.core.exceptions import ObjectDoesNotExist

from django.contrib.contenttypes.models import ContentType

        return (self.liberty_provider.slug,)

    def __unicode__(self):

    class Meta:

        verbose_name = _('SAML service provider')

from django.utils.functional import empty, allow_lazy

from django.utils.http import urlsafe_base64_encode

from django.utils.encoding import iri_to_uri, force_bytes, uri_to_iri

from django.shortcuts import render

    # explicitly state that the session has been modified

    request.session.modified = True

    event = {

        'who_id': getattr(request.user, 'pk', None),

        'how': how,

        'when': int(time.time()),

    }

    kwargs = {

        'how': how,

    }

    nonce = nonce or get_nonce(request)

    for value in values:

        if isinstance(value, bool):

            value = str(value).lower()

    return values_set

        return dict((utf8_encode(a), utf8_encode(b)) for a, b in v.items())

    if isinstance(v, (list, tuple)):

        return type(v)(utf8_encode(a) for a in v)

        return v.encode('utf-8')

    return v

from django.core.urlresolvers import reverse

from django.core.exceptions import ValidationError

from django.contrib import messages

from django.utils.translation import ugettext as _

from django.contrib.auth import logout as auth_logout

from django.contrib.auth import REDIRECT_FIELD_NAME

                value = filter(None, value)

                value = [html_value(attribute, at_value) for at_value in value]

                if not title:

            else:

                # fallback to model attributes

                try:

                if not isinstance(value, (list, tuple)):

                    value = (value,)

                raw_value = value

            if value or app_settings.A2_PROFILE_DISPLAY_EMPTY_FIELDS:

                profile.append((title, value))

                attributes.append({'attribute': attribute, 'values': raw_value})

from jwcrypto.jwt import JWT

from jwcrypto.jwk import JWK

from django.utils.timezone import now

from django.contrib.auth import get_user_model

from django.contrib.auth.backends import ModelBackend

                      check_claims={}, algs=algs)

            jwt.claims

            logger.warning(u'auth_oidc: invalid id_token audience %s != provider client_id %s',

                           id_token.aud, provider.client_id)

            return None

from django.core.management.base import BaseCommand, CommandError

from django.core.exceptions import ValidationError

from authentic2.compat import atomic

import requests

from django.utils.timezone import utc

from django.shortcuts import get_object_or_404

from django.utils.translation import ugettext as _

REQUIRED_ID_TOKEN_KEYS = set(['iss', 'sub', 'aud', 'exp', 'iat'])

KEY_TYPES = {

    'exp': int,

    'iat': int,

    'auth_time': int,

    # aud and amr havec specific checks

}

            raise ValueError('missing field: %s' % (REQUIRED_ID_TOKEN_KEYS - keys))

        for key in keys:

            if key == 'aud':

                    raise ValueError('invalid aud value: %r' % decoded['aud'])

                                                                decoded['aud']):

                    raise ValueError('invalid aud value: %r' % decoded['aud'])

            elif key == 'amr':

                if not isinstance(decoded['amr'], list):

                    raise ValueError('invalid amr value: %s' % decoded['amr'])

                    raise ValueError('invalid amr value: %s' % decoded['amr'])

            elif key in KEY_TYPES:

                if not isinstance(decoded[key], KEY_TYPES[key]):

from django.http import HttpResponseBadRequest, HttpResponse

from django.views.generic.base import View

from django.utils.timezone import now

from authentic2.utils import (get_user_from_session_key, make_url,

            attributes = self.get_attributes(request, st)

            if st.service.identifier_attribute not in attributes:

                self.logger.error('unable to compute an identifier for user %r and service %s',

                return self.validation_failure(request, service, INTERNAL_ERROR)

            # Compute user identifier

            identifier = attribute_values_to_identifier(

    def validation_success(self, request, st, identifier):

        self.logger.info('validation success service: %r ticket: %s '

        return self.real_validation_success(request, st, identifier)

        root = ET.Element(SERVICE_RESPONSE_ELT)

        success = ET.SubElement(root, AUTHENTICATION_SUCCESS_ELT)

        user = ET.SubElement(success, USER_ELT)

        self.provision_pgt(request, st, success)

        self.provision_attributes(request, st, success)

        return HttpResponse(ET.tostring(root, encoding='utf-8'),

        for key, values in values.items():

            for value in values:

                attribute_elt = ET.SubElement(attributes_elt, '{%s}%s' % (CAS_NAMESPACE, key))

    def provision_pgt(self, request, st, success):

from django.core.exceptions import ValidationError, ImproperlyConfigured

from django.utils.translation import ugettext_lazy as _

from django.conf import settings

from django.utils.timezone import now

from django.contrib.contenttypes.fields import GenericForeignKey, GenericRelation

def generate_uuid():

def validate_https_url(data):

    def __repr__(self):

        return '<OIDCAuthorization client:%r user:%r scopes:%r>' % (

            self.scopes)

    def __repr__(self):

        return '<OIDCCode uuid:%s client:%s user:%s expired:%s scopes:%s>' % (

            self.uuid,

            self.expired,

            self.scopes)

    def __repr__(self):

        return '<OIDCAccessToken uuid:%s client:%s user:%s expired:%s scopes:%s>' % (

            self.uuid,

            self.expired,

            self.scopes)

import base64

import uuid

from jwcrypto.jwk import JWK, JWKSet, InvalidJWKValue

from jwcrypto.jwt import JWT

from django.core.exceptions import ImproperlyConfigured

from django.conf import settings

from django.utils.encoding import force_bytes, force_text

from django.utils.six.moves.urllib import parse as urlparse

from authentic2 import hooks, crypto

def clean_words(data):

    '''Clean and order a list of words'''

def url_domain(url):

def normalize_claim_values(values):

    values_list = []

        return values

    for value in values:

        if isinstance(value, bool):

import time

from django.http import HttpResponse, HttpResponseBadRequest, HttpResponseNotAllowed

from django.utils.timezone import now, utc

from django.utils.http import urlencode

from django.shortcuts import render

                    code.uuid, ' '.join(scopes),

                    client.name)

        params = {

        }

        if state is not None:

            params['state'] = state

    if oidc_code.nonce is not None:

        id_token['nonce'] = oidc_code.nonce

    response = HttpResponse(json.dumps({

        'token_type': 'Bearer',

        'expires_in': expires_in,

        'id_token': utils.make_idtoken(client, id_token),

from ldaptools import paged

from django.core.management.base import BaseCommand

from authentic2.attributes_ng.engine import get_attributes

from authentic2 import compat, utils

            values = [values]

        ldap_values = ldap_attributes.setdefault(ldap_attribute, [])

        for value in values:

                value = value.encode('utf-8')

            elif isinstance(value, str):

                pass # must be well encoded

import operator

import hashlib

from django.utils.text import slugify

from django.utils.translation import ugettext_lazy as _

from django.db import models

    def save(self, *args, **kwargs):

        # truncate slug and add a hash if it's too long

        if not self.slug:

        if len(self.slug) > 256:

            self.slug = self.slug[:252] + \

                hashlib.md5(self.slug).hexdigest()[:4]

        return [self.slug]

    def __unicode__(self):

    def export_json(self):

        return {'slug': self.slug, 'name': self.name}

from authentic2.decorators import GlobalCache

from django.conf import settings

from django.apps import apps

from . import constants

def get_operation(operation_tpl):

    from . import models

    operation, created = models.Operation.objects.get_or_create(

    return operation

from django.contrib.auth import get_user_model

from django.contrib.contenttypes.models import ContentType

from django.utils.translation import ugettext as _

from django.utils.six.moves.urllib import parse as urlparse

from rest_framework import test

        for i, name in enumerate(attribute_kinds.get_attribute_kinds()):

            fields['field_%d' % i] = attribute_kinds.get_form_field(name)

        AttributeKindForm = type('AttributeKindForm', (forms.Form,), fields)

class APITest(TestCase):

from django.core.urlresolvers import reverse

from django.contrib.contenttypes.models import ContentType

from authentic2.custom_user.models import User

from authentic2.models import Attribute, AttributeValue

    response = login(app, superuser_or_admin,

                     reverse('a2-manager-user-by-uuid-detail',

    assert 'Change user email' in response.content

    # cannot click it's a submit button :/

    response = app.get(reverse('a2-manager-user-by-uuid-change-email',

    assert response.form['new_email'].value == simple_user.email

    response.form.set('new_email', NEW_EMAIL)

    assert len(mailoutbox) == 0

    response = login(app, superuser_or_admin,

                     reverse('a2-manager-user-by-uuid-detail',

    assert 'Change user email' in response.content

    # cannot click it's a submit button :/

    response = app.get(reverse('a2-manager-user-by-uuid-change-email',

    assert response.form['new_email'].value == simple_user.email

    assert len(mailoutbox) == 0

    response = response.form.submit().follow()