Produits Entr'ouvert » Authentic 2 » Plugin FS FranceConnect

    status = {'err': 0}

        # do not update email if it is not unique

        if attribute == 'email' and email_is_unique():

            qs = users_having_email(value)

            qs = qs.exclude(uuid=user.uuid)

            if qs.exists():

                logger.error(u'other accounts already use the same mail %s, %s', value, list(qs))

                status = {'err': 1, 'email': value}

                continue

    return status

    def update_user_info(self, request):

        status = utils.apply_user_info_mappings(self.fc_account.user, self.user_info)

        if status['err'] and status.get('email'):

            messages.warning(request, _(

                'Your FranceConnect email address \'%s\' is already used by another '

                'account, so we cannot update your account for you. Please ensure your '

                'account email is still up to date using your account management page.'

            ) % status.get('email'))

            self.update_user_info(request)

            self.update_user_info(request)

def test_update_user_info_having_non_uniq_new_email_from_fc(app, fc_settings, caplog):

    # We have 2 accounts, account1 is linked to FC.

    # Account1's email is not updated if FC return the account2's email

    callback = reverse('fc-login-or-link')

    response = app.get(callback, status=302)

    location = response['Location']

    state = check_authorization_url(location)

    EMAIL1 = 'fred@example.com'

    EMAIL2 = 'john.doe@example.com'

    SUB = '1234'

    user1 = User.objects.create(email=EMAIL1, first_name='Frédérique', last_name='Ÿuñe')

    user1.save()

    models.FcAccount.objects.create(user=user1, sub='1234', token='xxx', user_info='{}').save()

    user2 = User.objects.create(email=EMAIL2, first_name='John', last_name='Doe')

    user2.save()

    @httmock.urlmatch(path=r'.*/token$')

    def access_token_response(url, request):

        parsed = {x: y[0] for x, y in urlparse.parse_qs(request.body).items()}

        assert set(parsed.keys()) == set(['code', 'client_id', 'client_secret', 'redirect_uri',

                                          'grant_type'])

        assert parsed['code'] == 'zzz'

        assert parsed['client_id'] == 'xxx'

        assert parsed['client_secret'] == 'yyy'

        assert parsed['grant_type'] == 'authorization_code'

        parsed_redirect = urlparse.urlparse(parsed['redirect_uri'])

        parsed_callback = urlparse.urlparse(callback)

        assert parsed_redirect.path == parsed_callback.path

        for cb_key, cb_value in urlparse.parse_qs(parsed_callback.query).items():

            urlparse.parse_qs(parsed_redirect.query)[cb_key] == cb_value

        exp = now() + datetime.timedelta(seconds=1000)

        id_token = {

            'sub': SUB,

            'aud': 'xxx',

            'nonce': state,

            'exp': int(exp.timestamp()),

            'iss': 'https://fcp.integ01.dev-franceconnect.fr/',

        }

        return json.dumps({

            'access_token': 'uuu',

            'id_token': hmac_jwt(id_token, 'yyy')

        })

    @httmock.urlmatch(path=r'.*userinfo$')

    def user_info_response(url, request):

        assert request.headers['Authorization'] == 'Bearer uuu'

        return json.dumps({

            'sub': SUB,

            'family_name': u'Frédérique',

            'given_name': u'Ÿuñe',

            'email': EMAIL2,  # get a new mail from FC

        })

    fc_settings.A2_EMAIL_IS_UNIQUE = True

    # user not already authenticated

    with httmock.HTTMock(access_token_response, user_info_response):

        response = app.get(callback + '?code=zzz&state=%s' % state, status=302)

    assert User.objects.count() == 2

    assert User.objects.get(last_name='Frédérique').email == EMAIL1

    response = response.follow()

    assert 'already used by another account' in response.html.find(

        'li', {'class': 'warning'}).text

    # user is authenticated

    assert app.session['_auth_user_id']

    with httmock.HTTMock(access_token_response, user_info_response):

        response = app.get(callback + '?code=zzz&state=%s' % state, status=302)

    assert User.objects.count() == 2

    assert User.objects.get(last_name='Frédérique').email == EMAIL1

    response = response.follow()

    assert 'already used by another account' in response.html.find(

        'li', {'class': 'warning'}).text

    fc_settings.A2_EMAIL_IS_UNIQUE = False

    app.session.flush()

    callback = reverse('fc-login-or-link')

    response = app.get(callback, status=302)

    location = response['Location']

    state = check_authorization_url(location)

    # user not already authenticated

    with httmock.HTTMock(access_token_response, user_info_response):

        response = app.get(callback + '?code=zzz&state=%s' % state, status=302)

    assert User.objects.get(last_name='Frédérique').email == EMAIL2

    # user is authenticated

    user1 = User.objects.get(id=user1.id)

    user1.email = EMAIL1

    user1.save()

    assert User.objects.get(last_name='Frédérique').email == EMAIL1

    assert app.session['_auth_user_id']

    with httmock.HTTMock(access_token_response, user_info_response):

        response = app.get(callback + '?code=zzz&state=%s' % state, status=302)

    assert User.objects.get(last_name='Frédérique').email == EMAIL2