Produits Entr'ouvert » django-mellon

    hooks:

    - id: black

      args: ['--target-version', 'py37', '--skip-string-normalization', '--line-length', '110']

   tox

Code Style

black is used to format the code, using thoses parameters:

There is .pre-commit-config.yaml to use pre-commit to automatically run black

before commits. (execute `pre-commit install` to install the git hook.)

Remarks

=======

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import hashlib

import logging

import os

import threading

import time

import uuid

import lasso

import requests

import requests.exceptions

from atomicwrites import atomic_write

from django.contrib.auth.models import Group

from django.utils import six

from django.utils.encoding import force_text

from django.utils.six.moves.urllib.parse import urlparse

from django.utils.translation import ugettext as _

User = auth.get_user_model()

def display_truncated_list(l, max_length=10):

    if len(l) > max_length:

        s += '..truncated more than %d items (%d)]' % (max_length, len(l))

    else:

    return s

    def __init__(self, request=None):

        self.request = request

                        idp['METADATA'] = fd.read()

                    # use file cache mtime as last_update time, prevent too many loading from different workers

                    last_update = max(last_update, os.stat(file_cache_path).st_mtime)

                    warning('metadata url %s : error when loading the file cache %s', url, file_cache_path)

        # fresh cache, skip loading

        if saml_attributes['name_id_format'] == lasso.SAML2_NAME_IDENTIFIER_FORMAT_TRANSIENT:

            if transient_federation_attribute and saml_attributes.get(transient_federation_attribute):

                name_id = saml_attributes[transient_federation_attribute]

                    if len(name_id) == 1:

                        name_id = name_id[0]

                    else:

import sys

    __PREFIX = 'MELLON_'

    __DEFAULTS = {

        'IDENTITY_PROVIDERS': [],

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import logging

from django.contrib.auth.backends import ModelBackend

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from django.http import HttpResponseRedirect

from django.urls import reverse

from . import app_settings, utils

from django.conf import settings

class Migration(migrations.Migration):

        ),

        migrations.AlterUniqueTogether(

            name='usersamlidentifier',

        ),

    ]

# Generated by Django 2.2.12 on 2020-04-24 05:14

import django.db.models.deletion

class Migration(migrations.Migration):

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from importlib import import_module

from django.db import models

from django.utils.translation import ugettext_lazy as _

class UserSAMLIdentifier(models.Model):

        session_not_on_or_after = self.get_session_not_on_or_after()

        if session_not_on_or_after and 'expiry' not in kwargs:

            kwargs['expiry'] = session_not_on_or_after

    def get_expiry_date(self, **kwargs):

        session_not_on_or_after = self.get_session_not_on_or_after()

        if session_not_on_or_after and 'expiry' not in kwargs:

            kwargs['expiry'] = session_not_on_or_after

import django

from . import views

urlpatterns = [

    url('login/$', views.login, name='mellon_login'),

    url('login/debug/$', views.debug_login, name='mellon_debug_login'),

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import datetime

import importlib

from functools import wraps

from xml.parsers import expat

from django.contrib import auth

from django.template.loader import render_to_string

from django.urls import reverse

from django.utils.encoding import force_text

from django.utils.six.moves.urllib.parse import urlparse

from . import app_settings

def get_idps():

    for adapter in get_adapters():

        if hasattr(adapter, 'get_idps'):

def flatten_datetime(d):

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from contextlib import contextmanager, nullcontext

from importlib import import_module

from io import StringIO

from xml.sax.saxutils import escape

import django.http

from django.conf import settings

from django.shortcuts import render, resolve_url

from django.urls import reverse

from django.utils import six

from django.utils.translation import ugettext as _

RETRY_LOGIN_COOKIE = 'MELLON_RETRY_LOGIN'

lasso.setFlag('thin-sessions')

EO_NS = 'https://www.entrouvert.com/'

class HttpResponseBadRequest(django.http.HttpResponseBadRequest):

    def __init__(self, *args, **kwargs):

        kwargs['content_type'] = kwargs.get('content_type', 'text/plain')

        self['X-Content-Type-Options'] = 'nosniff'

    """Initialize a module logger in new objects"""

    def __init__(self, *args, **kwargs):

        self.log = logging.getLogger(__name__)

def check_next_url(request, next_url):

    return next_url

    profile = None

    def set_next_url(self, next_url):

            # configure requested AuthnClassRef

            authn_classref = utils.get_setting(idp, 'AUTHN_CLASSREF')

            if authn_classref:

                req_authncontext = lasso.Samlp2RequestedAuthnContext()

                authn_request.requestedAuthnContext = req_authncontext

                req_authncontext.authnContextClassRef = authn_classref

        assert hasattr(authn_request.extensions, 'any'), 'extension nodes need lasso > 2.5.1'

        serialized = ET.tostring(node, 'utf-8')

        # tostring return bytes in PY3, but lasso needs str

        extension_content = authn_request.extensions.any or ()

        extension_content += (serialized,)

        authn_request.extensions.any = extension_content

            return HttpResponseBadRequest('error processing logout request: %r' % e)

        issuer = force_text(logout.remoteProviderId)

        saml_identifier = (

            models.UserSAMLIdentifier.objects.filter(

import os

import subprocess

from distutils.command.build import build as _build

from setuptools.command.sdist import sdist as _sdist

class compile_translations(Command):

    def run(self):

        import os

        from django.core.management import call_command

        os.environ.pop('DJANGO_SETTINGS_MODULE', None)

    tag exists, take 0.0.0- and add the length of the commit log.

    """

    if os.path.exists('VERSION'):

            return v.read()

    if os.path.exists('.git'):

        p = subprocess.Popen(

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import logging

import django_webtest

@pytest.fixture(autouse=True)

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import datetime

import re

import time

from multiprocessing.pool import ThreadPool

import pytest

from django.contrib import auth

from django.db import connection

from mellon.adapters import DefaultAdapter

from mellon.backends import SAMLBackend

pytestmark = pytest.mark.django_db

User = auth.get_user_model()

    users = p.map(f, range(concurrency))

    assert len(users) == concurrency

def test_provision_user_attributes(settings, django_user_model, idp, saml_attributes, caplog):

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import datetime

import re

import xml.etree.ElementTree as ET

import lasso

import pytest

from django.contrib.auth.models import User

from django.urls import reverse

from django.utils import six

from django.utils.encoding import force_str

from mellon.utils import create_metadata

from mellon.views import lasso_decode

@fixture

def idp_metadata():

    return create_metadata(request)

    session_dump = None

    identity_dump = None

    assert 'created new user' in caplog.text

    assert 'logged in using SAML' in caplog.text

    assert urlparse.urlparse(response['Location']).path == '/whatever/'

    assert urlparse.urlparse(response['Location']).path == '/singleLogout'

    # again, user is already logged out

    assert urlparse.urlparse(response['Location']).path == '/some/path'

    assert not relay_state

    assert url.endswith(reverse('mellon_login'))

    response = app.post(reverse('mellon_login'), params={'SAMLResponse': body, 'RelayState': relay_state})

 'urn:oasis:names:tc:SAML:2.0:status:RequestDenied']"

@pytest.mark.urls('urls_tests_template_base')

    settings.MELLON_OPENED_SESSION_COOKIE_NAME = 'IDP_SESSION'

    assert 'MELLON_PASSIVE_TRIED' not in app.cookies

    # webtest-lint is against unicode

    response = app.get('/', headers={'Accept': force_str('text/html')}, status=302)

    assert urlparse.urlparse(response.location).path == '/login/'

    assert urlparse.parse_qs(urlparse.urlparse(response.location).query, keep_blank_values=True) == {

    assert 'MELLON_PASSIVE_TRIED' not in app.cookies

    # check passive authentication is tried again

    response = app.get('/', headers={'Accept': force_str('text/html')}, status=302)

    assert urlparse.urlparse(response.location).path == '/login/'

    assert urlparse.parse_qs(urlparse.urlparse(response.location).query, keep_blank_values=True) == {

    settings.MELLON_OPENED_SESSION_COOKIE_NAME = 'IDP_SESSION'

    assert 'MELLON_PASSIVE_TRIED' not in app.cookies

    # webtest-lint is against unicode

    app.get('/?no-passive-auth', headers={'Accept': force_str('text/html')}, status=200)

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import datetime

import lasso

from mellon.views import check_next_url

def test_create_metadata(rf, private_settings, caplog):

        'y': 1,

        'z': 'u',

    }

    assert flatten_datetime(d)['x'] == '2010-10-10T10:10:34'

    assert flatten_datetime(d)['y'] == 1

    assert flatten_datetime(d)['z'] == 'u'

def test_check_next_url(rf):

    assert not check_next_url(rf.get('/'), None)

    # default hostname is testserver

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import base64

import hashlib

from django.urls import reverse

from django.utils.encoding import force_text

from django.utils.http import urlencode

from utils import error_500, html_response

pytestmark = pytest.mark.django_db

    assert response.status_code == 302

    params = parse_qs(urlparse(response['Location']).query)

    assert response['Location'].startswith('http://idp5/singleSignOn?')

    assert len(params['SAMLRequest']) == 1

    assert base64.b64decode(params['SAMLRequest'][0])

    assert client.session['mellon_next_url_%s' % params['RelayState'][0]] == '/whatever'

    assert response.status_code == 302

    params = parse_qs(urlparse(response['Location']).query)

    assert response['Location'].startswith('http://idp5/singleSignOn?')

    assert len(params['SAMLRequest']) == 1

    assert base64.b64decode(params['SAMLRequest'][0])

    assert client.session['mellon_next_url_%s' % params['RelayState'][0]] == '/whatever'

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from django.http import HttpResponse

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from django.http import HttpResponse

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from django.http import HttpResponse

import os

import django

from django.conf import global_settings

[tox]

toxworkdir = {env:TMPDIR:/tmp}/tox-{env:USER}/django-mellon/

[testenv]

  ./getlasso3.sh

  django-admin {posargs:--help}

skip_install = true

deps =

  pre-commit

commands =

[pytest]

junit_family=legacy