Produits Entr'ouvert » Lasso

                elif skip == 'unless-id-wsf' and not binding.options.idwsf:

                    self.skip = True

    wsf_prefixes = ['disco_', 'dst_', 'is_', 'profile_service_', 'discovery_',

            'wsf_', 'interaction_', 'utility_', 'sa_', 'authentication_',

            'wsse_', 'sec_', 'idwsf2_', 'wsf2_', 'wsa_', 'wsu', 'soap_binding']

    exclusion = ('xml_idff.h', 'xml_idwsf.h', 'xml_saml2.h', \

            'xml_idwsf2.h', 'xml_soap11.h',

            'lasso_config.h', 'saml2_xsd.h' )

    if not binding.options.idwsf:

        exclusion += ( 'idwsf_strings.h', )

        if not binding.options.idwsf and (bname == 'id-wsf' or \

                bname == 'id-wsf-2.0' or bname == 'ws'):

            # ignore ID-WSF

            continue

            if not binding.options.idwsf:

                if True in (filename.startswith(wsf_prefix) for wsf_prefix in wsf_prefixes):

                    continue

    binding.constants.append(('b', 'LASSO_WSF_ENABLED'))

    parser.add_option('--enable-id-wsf', dest = 'idwsf', action = 'store_true')

if WSF_ENABLED

EXTRA_ARGS = --enable-id-wsf

endif

  <!-- LassoWsfProfile -->

  <func name="lasso_wsf_profile_get_identity" return_owner="false" />

  <func name="lasso_wsf_profile_get_session" return_owner="false" />

  <func name="lasso_wsf_profile_get_remote_provider" skip="java,perl"/>

  <func name="lasso_data_service_get_answer" skip="java,perl"/>

  <func name="lasso_data_service_get_query_item" skip="java,perl"/>

  <func name="lasso_data_service_add_modification" skip="java,perl"/>

  <func name="lasso_data_service_get_answers" skip="java,perl"/>

  <func name="lasso_data_service_get_answers_by_select" skip="java,perl"/>

  <func name="lasso_data_service_get_answers_by_item_id" skip="java,perl"/>

  <func name="lasso_saml2_encrypted_element_decrypt" skip="true"/>

  <func name="lasso_server_get_service" skip="unless-id-wsf" />

  <func name="lasso_login_set_encryptedResourceId" skip="unless-id-wsf"/>

  <func name="lasso_personal_profile_service_new_full" rename="lasso_personal_profile_server_new_personal_profile_service_full"/>

  <func name="lasso_wsf_profile_new_full" rename="lasso_wsf_profile_wsf_profile_new_full"/>

  <func name="lasso_wsa_endpoint_reference_get_target_identity_token" skip="true"/>

  <func name="lasso_wsa_endpoint_reference_get_security_token" skip="true"/>

  <func name="lasso_wsa_endpoint_reference_associate_service_to_type" skip="true"/>

  <func name="lasso_authentication_get_type" skip="true"/>

  <func name="lasso_authentication_get_type" skip="true"/>

  <func name="lasso_authentication_new" skip="true"/>

  <func name="lasso_authentication_destroy" skip="true"/>

  <func name="lasso_authentication_client_start" skip="true"/>

  <func name="lasso_authentication_client_step" skip="true"/>

  <func name="lasso_authentication_get_mechanism_list" skip="true"/>

  <func name="lasso_authentication_init_request" skip="true"/>

  <func name="lasso_authentication_process_request_msg" skip="true"/>

  <func name="lasso_authentication_process_response_msg" skip="true"/>

  <func name="lasso_authentication_server_start" skip="true"/>

  <func name="lasso_authentication_server_step" skip="true"/>

  <struct name="LassoAuthentication" skip="true"/>

  <func name="lasso_wsse_username_token_derive_key" skip="true"/>

  <func name="lasso_wsa_endpoint_reference_add_security_token" skip="true"/>

    <category name="WsfProfile" parent="Profile"/>

    <category name="Discovery" parent="WsfProfile"/>

    <category name="DataService" parent="WsfProfile"/>

    <category name="Dst" parent="WsfProfile"/>

if WSF_ENABLED

EXTRA_ARGS = --enable-id-wsf

endif

                elif type == 'b': # only one case LASSO_WSF_ENABLED

                elif type == 'b': # only one case LASSO_WSF_ENABLED

if WSF_ENABLED

EXTRA_ARGS = --enable-id-wsf

endif

if WSF_ENABLED

EXTRA_ARGS = --enable-id-wsf

endif

if WSF_ENABLED

EXTRA_ARGS = --enable-id-wsf

endif

WSF_SUPPORT = WSF_ENABLED

registerIdWsf2DstService = registerIdwsf2DstService

if WSF_SUPPORT:

    DiscoDescription_newWithBriefSoapHttpDescription = DiscoDescription.newWithBriefSoapHttpDescription

    Discovery.buildRequestMsg = Discovery.buildSoapRequestMsg

    InteractionProfileService.buildRequestMsg = InteractionProfileService.buildSoapRequestMsg

    InteractionProfileService.buildResponseMsg = InteractionProfileService.buildSoapResponseMsg

    DataService.buildRequestMsg = DataService.buildSoapRequestMsg

    DiscoModifyResponse.newEntryIds = DiscoModifyResponse.newEntryIDs

if WSF_ENABLED

TESTS += idwsf1_tests.py idwsf2_tests.py

endif

#! /usr/bin/env python

# -*- coding: utf-8 -*-

#

# $Id: idwsf2_tests.py 3254 2007-06-05 21:23:57Z dlaniel $

#

# Python unit tests for Lasso library

#

# Copyright (C) 2004-2007 Entr'ouvert

# http://lasso.entrouvert.org

#

# Authors: See AUTHORS file in top-level directory.

#

# This program is free software; you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation; either version 2 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, see <http://www.gnu.org/licenses/>.

import os

import unittest

import sys

from six import StringIO

import logging

logging.basicConfig()

if not '..' in sys.path:

    sys.path.insert(0, '..')

if not '../.libs' in sys.path:

    sys.path.insert(0, '../.libs')

import lasso

try:

    import lxml.etree as ET

except ImportError:

    try:

        import elementtree.ElementTree as ET

    except ImportError:

        import xml.etree.ElementTree as ET

try:

    dataDir

except NameError:

    dataDir = os.path.join(os.environ['TOP_SRCDIR'], 'tests', 'data')

idpSoapEndpoint = 'http://idp1/soapEndpoint'

spSoapEndpoint = 'http://sp1/soapEndpoint'

spInteractionUrl = 'http://sp1/askMeAQuestion'

class IdWsf2TestCase(unittest.TestCase):

    def getWspServer(self):

        wsp_metadata = os.path.join(dataDir, 'sp5-saml2/metadata.xml')

        wsp_private_key = os.path.join(dataDir, 'sp5-saml2/private-key.pem')

        idp_metadata = os.path.join(dataDir, 'idp5-saml2/metadata.xml')

        server = lasso.Server(wsp_metadata, wsp_private_key, None, None)

        server.role = lasso.PROVIDER_ROLE_SP

        server.addProvider(lasso.PROVIDER_ROLE_IDP, idp_metadata, None, None)

        server.setEncryptionPrivateKey(wsp_private_key);

        return server;

    def getWscServer(self):

        wsc_metadata = os.path.join(dataDir, 'sp6-saml2/metadata.xml')

        wsc_private_key = os.path.join(dataDir, 'sp6-saml2/private-key.pem')

        idp_metadata = os.path.join(dataDir, 'idp5-saml2/metadata.xml')

        server = lasso.Server(wsc_metadata, wsc_private_key, None, None)

        server.role = lasso.PROVIDER_ROLE_SP

        server.addProvider(lasso.PROVIDER_ROLE_IDP, idp_metadata, None, None)

        return server;

    def getIdpServer(self):

        if hasattr(self, 'idp_server_dump') and self.idp_server_dump is not None:

            server = lasso.Server.newFromDump(self.idp_server_dump)

            server.role = lasso.PROVIDER_ROLE_IDP

        else:

            idp_metadata = os.path.join(dataDir, 'idp5-saml2/metadata.xml')

            idp_private_key = os.path.join(dataDir, 'idp5-saml2/private-key.pem')

            wsp_metadata = os.path.join(dataDir, 'sp5-saml2/metadata.xml')

            wsc_metadata = os.path.join(dataDir, 'sp6-saml2/metadata.xml')

            server = lasso.Server(idp_metadata, idp_private_key, None, None)

            server.role = lasso.PROVIDER_ROLE_IDP

            server.addProvider(lasso.PROVIDER_ROLE_SP, wsp_metadata, None, None)

            server.getProvider(server.providerIds[0]).setEncryptionMode(lasso.ENCRYPTION_MODE_NAMEID);

            server.addProvider(lasso.PROVIDER_ROLE_SP, wsc_metadata, None, None)

            self.idp_server_dump = server.dump()

        return server

    def query(self, wsc, idp, idp_identity_dump, wsc_session_dump, uid, federations, services_map, service_associations, provider_ids = None, service_types = None, options = None, actions = None):

        session = lasso.Session.newFromDump(wsc_session_dump)

        assertion = session.getAssertion(idp.providerId)

        self.failUnless(assertion is not None)

        epr = assertion.idwsf2GetDiscoveryBootstrapEpr()

        self.failUnless(epr is not None)

        wsc_disco = lasso.IdWsf2Discovery(wsc)

        wsc_disco.setEpr(epr)

        wsc_disco.initQuery()

        wsc_disco.addRequestedService(service_types = service_types, provider_ids = provider_ids, options = options, actions = actions)

        wsc_disco.buildRequestMsg()

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.setIdentityFromDump(idp_identity_dump)

        idp_disco.processRequestMsg(wsc_disco.msgBody)

        f = self.nid2tuple(idp_disco.getNameIdentifier())

        uid = federations[f]

        for id in service_associations[uid]:

            idp_disco.addServiceMetadata(services_map[id])

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsc_disco.processResponseMsg(idp_disco.msgBody)

        return wsc_disco.endpointReferences

    def metadataRegister(self, wsp, idp, session_dump, abstract = None, address = None, provider_id = None, service_types = None, services_map = None):

        session = lasso.Session.newFromDump(session_dump)

        assertion = session.getAssertion(idp.providerId)

        self.failUnless(assertion is not None)

        epr = assertion.idwsf2GetDiscoveryBootstrapEpr()

        self.failUnless(epr is not None)

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(epr)

        abstract = 'Personal Profile service'

        self.failUnless(abstract is not None)

        self.failUnless(address is not None)

        self.failUnless(service_types is not None)

        self.failUnless(isinstance(services_map, dict))

        wsp_disco.initMetadataRegister()

        if not provider_id:

            provider_id = wsp.providerId

        wsp_disco.addSimpleServiceMetadata(

                service_types = service_types,

                abstract = abstract, provider_id = provider_id,

                address = address, 

                security_mechanisms = (lasso.SECURITY_MECH_BEARER,))

        wsp_disco.buildRequestMsg()

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        idp_disco.validateRequest()

        self.failUnlessEqual(len(idp_disco.metadatas), 1)

        # add metadatas to directory

        sender = idp_disco.getSoapEnvelopeRequest().sb2GetProviderId()

        self.failUnless(sender is not None)

        metadatas = services_map.get(sender, [])

        for metadata in idp_disco.metadatas:

            services_map[metadata.svcMDID] = metadata

            metadatas.append(metadata.svcMDID)

        services_map[sender] = metadatas

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnlessEqual(len(wsp_disco.metadatas), 1)

        self.failUnlessEqual(wsp_disco.metadatas[0].svcMDID, wsp_disco.response.svcMDID[0])

        return wsp_disco.metadatas[0].svcMDID

    def nid2tuple(self, nid):

        return (nid.nameQualifier, nid.format, nid.sPNameQualifier, nid.content)

    def addAssociation(self, wsp, idp, session_dump, svcmdid, service_maps, federations, service_associations):

        self.failUnless(isinstance(service_associations, dict))

        self.failUnless(isinstance(service_maps, dict))

        # Get the bootstrap

        session = lasso.Session.newFromDump(session_dump)

        assertion = session.getAssertion(idp.providerId)

        self.failUnless(assertion is not None)

        epr = assertion.idwsf2GetDiscoveryBootstrapEpr()

        self.failUnless(epr is not None)

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(epr)

        wsp_disco.initMetadataAssociationAdd()

        wsp_disco.svcmdids = (svcmdid,)

        wsp_disco.buildRequestMsg()

        # Handle request

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        self.failUnlessEqual(idp_disco.svcmdids, (svcmdid,))

        sender = idp_disco.getSoapEnvelopeRequest().sb2GetProviderId()

        name_identifier = idp_disco.getNameIdentifier()

        f = self.nid2tuple(name_identifier)

        uid = federations[f]

        l = service_associations.get(uid, [])

        for id in idp_disco.svcmdids:

            # check it exists

            self.failUnless(service_maps.get(id) is not None)

            # create association

            if id not in l:

                l.append(id)

        service_associations[uid] = l

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

    def login(self, sp, idp, user_id, federations, sp_identity_dump=None, sp_session_dump=None,

            idp_identity_dump=None, idp_session_dump=None):

        sp_login = lasso.Login(sp)

        idp_provider_id = 'http://idp5/metadata'

        sp_login.initAuthnRequest(idp_provider_id, lasso.HTTP_METHOD_REDIRECT)

        sp_login.request.nameIDPolicy.format = lasso.SAML2_NAME_IDENTIFIER_FORMAT_PERSISTENT

        sp_login.request.nameIDPolicy.allowCreate = True

        sp_login.buildAuthnRequestMsg()

        idp_login = lasso.Login(idp)

        query = sp_login.msgUrl.split('?')[1]

        if idp_identity_dump is not None:

            idp_login.setIdentityFromDump(idp_identity_dump)

        if idp_session_dump is not None:

            idp_login.setSessionFromDump(idp_session_dump)

        idp_login.processAuthnRequestMsg(query)

        idp_login.validateRequestMsg(True, True)

        idp_login.buildAssertion(lasso.SAML_AUTHENTICATION_METHOD_PASSWORD, None, None, None, None)

        if idp_login.assertion.subject.encryptedId:

            f = self.nid2tuple(idp_login.assertion.subject.encryptedId.originalData)

        else:

            f = self.nid2tuple(idp_login.assertion.subject.nameId)

        federations[f] = user_id

        l = federations.get(user_id, [])

        l.append(f)

        federations[user_id] = l

        idp_login.idwsf2AddDiscoveryBootstrapEpr(url = idpSoapEndpoint, abstract = 'Discovery Service', security_mechanisms = (lasso.SECURITY_MECH_BEARER,))

        idp_login.buildArtifactMsg(lasso.HTTP_METHOD_ARTIFACT_GET)

        artifact_message = idp_login.artifactMessage

        if idp_login.isIdentityDirty:

            idp_identity_dump = idp_login.identity.dump()

        if idp_login.isSessionDirty:

            idp_session_dump = idp_login.session.dump()

        sp_login = lasso.Login(sp)

        query = idp_login.msgUrl.split('?')[1]

        query = query.replace("%3D", "=")

        sp_login.initRequest(query, lasso.HTTP_METHOD_ARTIFACT_GET)

        sp_login.buildRequestMsg()

        idp_login = lasso.Login(idp)

        idp_login.processRequestMsg(sp_login.msgBody)

        idp_login.artifactMessage = artifact_message

        idp_login.buildResponseMsg(None)

        sp_login.processResponseMsg(idp_login.msgBody)

        sp_login.acceptSso()

        if sp_login.isIdentityDirty:

            sp_identity_dump = sp_login.identity.dump()

        if sp_login.isSessionDirty:

            sp_session_dump = sp_login.session.dump()

        return sp_identity_dump, sp_session_dump, idp_identity_dump, idp_session_dump, sp_login.idwsf2GetDiscoveryBootstrapEpr()

class MetadataTestCase(IdWsf2TestCase):

    def test01(self):

        """Test metadata registration on the IdP"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        abstract = 'Personal Profile service'

        wsp_disco.initMetadataRegister()

        self.failUnless(wsp_disco.request is not None)

        wsp_disco.addSimpleServiceMetadata(service_types = 

                (lasso.PP11_HREF,), abstract = abstract,

                provider_id = wsp.providerId, address = spSoapEndpoint,

                security_mechanisms = (lasso.SECURITY_MECH_BEARER,))

        self.failUnlessEqual(len(wsp_disco.metadatas), 1)

        metadata = wsp_disco.metadatas[0]

        self.failUnlessEqual(metadata.abstract, abstract)

        self.failUnlessEqual(metadata.providerId, wsp.providerId)

        self.failUnlessEqual(len(metadata.serviceContext), 1)

        self.failUnlessEqual(len(metadata.serviceContext[0].serviceType), 1)

        self.failUnlessEqual(metadata.serviceContext[0].serviceType[0],

                lasso.PP11_HREF)

        self.failUnlessEqual(len(metadata.serviceContext[0].endpointContext), 1)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].address),

                1)

        self.failUnlessEqual(metadata.serviceContext[0].endpointContext[0].address[0],

                spSoapEndpoint)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].securityMechId),

                1)

        self.failUnlessEqual(

                metadata.serviceContext[0].endpointContext[0].securityMechId[0],

                lasso.SECURITY_MECH_BEARER)

        self.failUnless(metadata.svcMDID is None)

        wsp_disco.buildRequestMsg()

        self.failUnlessEqual(wsp_disco.msgUrl, idpSoapEndpoint)

        self.failUnless(wsp_disco.msgBody is not None)

        idp_disco = lasso.IdWsf2Discovery(idp)

        self.failUnless(idp_disco is not None)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        self.failUnless(idp_disco.request is not None)

        self.failUnlessEqual(len(idp_disco.request.svcMD), 1)

        self.failUnless(idp_disco.request.svcMD[0].svcMDID is None)

        try:

            idp_disco.checkSecurityMechanism()

        except lasso.Error as e:

            self.fail(e)

        try:

            idp_disco.validateRequest()

        except lasso.Error as e:

            self.fail(e)

        self.failUnless(idp_disco.response is not None)

        self.failUnlessEqual(len(idp_disco.metadatas), 1)

        metadata = idp_disco.metadatas[0]

        self.failUnlessEqual(metadata.abstract, abstract)

        self.failUnlessEqual(metadata.providerId, wsp.providerId)

        self.failUnlessEqual(len(metadata.serviceContext), 1)

        self.failUnlessEqual(len(metadata.serviceContext[0].serviceType), 1)

        self.failUnlessEqual(metadata.serviceContext[0].serviceType[0],

                lasso.PP11_HREF)

        self.failUnlessEqual(len(metadata.serviceContext[0].endpointContext), 1)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].address),

                1)

        self.failUnlessEqual(metadata.serviceContext[0].endpointContext[0].address[0],

                spSoapEndpoint)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].securityMechId),

                1)

        self.failUnlessEqual(

                metadata.serviceContext[0].endpointContext[0].securityMechId[0],

                lasso.SECURITY_MECH_BEARER)

        idp_disco.buildResponseMsg()

        self.failUnless(metadata.svcMDID is not None)

        self.failUnless(idp_disco.msgUrl is None)

        self.failUnless(idp_disco.msgBody is not None)

        wsp_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnless(len(wsp_disco.metadatas) == 1, 'missing svcMDID')

        self.failUnless(wsp_disco.metadatas[0].svcMDID, 'missing svcMDID')

    def test02(self):

        "Test failure by IdP for register request"

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        abstract = 'Personal Profile service'

        wsp_disco.initMetadataRegister()

        self.failUnless(wsp_disco.request is not None)

        wsp_disco.addSimpleServiceMetadata(service_types = 

                (lasso.PP11_HREF,), abstract = abstract,

                provider_id = wsp.providerId, address = spSoapEndpoint,

                security_mechanisms= (lasso.SECURITY_MECH_BEARER,))

        self.failUnlessEqual(len(wsp_disco.metadatas), 1)

        metadata = wsp_disco.metadatas[0]

        self.failUnlessEqual(metadata.abstract, abstract)

        self.failUnlessEqual(metadata.providerId, wsp.providerId)

        self.failUnlessEqual(len(metadata.serviceContext[0].serviceType), 1)

        self.failUnlessEqual(metadata.serviceContext[0].serviceType[0],

                lasso.PP11_HREF)

        self.failUnlessEqual(len(metadata.serviceContext[0].endpointContext), 1)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].address),

                1)

        self.failUnlessEqual(metadata.serviceContext[0].endpointContext[0].address[0],

                spSoapEndpoint)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].securityMechId),

                1)

        self.failUnlessEqual(

                metadata.serviceContext[0].endpointContext[0].securityMechId[0],

                lasso.SECURITY_MECH_BEARER)

        self.failUnless(metadata.svcMDID is None)

        wsp_disco.buildRequestMsg()

        self.failUnlessEqual(wsp_disco.msgUrl, idpSoapEndpoint)

        self.failUnless(wsp_disco.msgBody is not None)

        idp_disco = lasso.IdWsf2Discovery(idp)

        self.failUnless(idp_disco is not None)

        try:

            idp_disco.processRequestMsg(wsp_disco.msgBody)

        except lasso.Error as e:

            self.fail(e)

        self.failUnless(idp_disco.request is not None)

        try:

            idp_disco.checkSecurityMechanism()

        except lasso.Error as e:

            self.fail(e)

        try:

            idp_disco.failRequest(lasso.IDWSF2_DISCOVERY_STATUS_CODE_FAILED, lasso.IDWSF2_DISCOVERY_STATUS_CODE_FORBIDDEN)

        except lasso.Error as e:

            self.fail(e)

        self.failUnless(idp_disco.response is not None)

        self.failUnless(idp_disco.response.status is not None)

        self.failUnless(idp_disco.response.status.code is not lasso.IDWSF2_DISCOVERY_STATUS_CODE_FAILED)

        self.failUnlessEqual(len(idp_disco.response.status.status), 1)

        self.failUnless(idp_disco.response.status.status[0].code is not lasso.IDWSF2_DISCOVERY_STATUS_CODE_FORBIDDEN)

        idp_disco.buildResponseMsg()

        self.failUnless(idp_disco.msgUrl is None)

        self.failUnless(idp_disco.msgBody is not None)

        try:

            wsp_disco.processResponseMsg(idp_disco.msgBody)

        except lasso.Idwsf2DiscoveryForbiddenError:

            pass

        except lasso.Error as e:

            self.fail(e)

    def test03(self):

        """Test metadata register with redirection"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        abstract = 'Personal Profile service'

        wsp_disco.initMetadataRegister()

        soap_envelope = wsp_disco.getSoapEnvelopeRequest()

        soap_envelope.setSb2UserInteractionHint(lasso.IDWSF2_SB2_USER_INTERACTION_HINT_INTERACT_IF_NEEDED)

        self.failUnless(isinstance(soap_envelope.header, lasso.SoapHeader))

        self.failUnless(len(soap_envelope.header.other) > 0)

        self.failUnlessEqual(soap_envelope.getSb2UserInteractionHint(), lasso.IDWSF2_SB2_USER_INTERACTION_HINT_INTERACT_IF_NEEDED)

        self.failUnless(wsp_disco.request is not None)

        wsp_disco.addSimpleServiceMetadata(service_types = 

                (lasso.PP11_HREF,), abstract = abstract,

                provider_id = wsp.providerId, address = spSoapEndpoint,

                security_mechanisms = (lasso.SECURITY_MECH_BEARER,))

        self.failUnlessEqual(len(wsp_disco.metadatas), 1)

        metadata = wsp_disco.metadatas[0]

        self.failUnlessEqual(metadata.abstract, abstract)

        self.failUnlessEqual(metadata.providerId, wsp.providerId)

        self.failUnlessEqual(len(metadata.serviceContext), 1)

        self.failUnlessEqual(len(metadata.serviceContext[0].serviceType), 1)

        self.failUnlessEqual(metadata.serviceContext[0].serviceType[0],

                lasso.PP11_HREF)

        self.failUnlessEqual(len(metadata.serviceContext[0].endpointContext), 1)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].address),

                1)

        self.failUnlessEqual(metadata.serviceContext[0].endpointContext[0].address[0],

                spSoapEndpoint)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].securityMechId),

                1)

        self.failUnlessEqual(

                metadata.serviceContext[0].endpointContext[0].securityMechId[0],

                lasso.SECURITY_MECH_BEARER)

        self.failUnless(metadata.svcMDID is None)

        wsp_disco.buildRequestMsg()

        self.failUnlessEqual(wsp_disco.msgUrl, idpSoapEndpoint)

        self.failUnless(wsp_disco.msgBody is not None)

        idp_disco = lasso.IdWsf2Discovery(idp)

        self.failUnless(idp_disco is not None)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        self.failUnless(idp_disco.request is not None)

        self.failUnlessEqual(len(idp_disco.request.svcMD), 1)

        self.failUnless(idp_disco.request.svcMD[0].svcMDID is None)

        soap_envelope = idp_disco.getSoapEnvelopeRequest()

        self.failUnless(soap_envelope is not None)

        self.failUnless(soap_envelope.getMessageId() is not None)

        try:

            idp_disco.checkSecurityMechanism()

        except lasso.Error as e:

            self.fail(e)

        # redirect

        interactionUrl = spInteractionUrl

        idp_disco.redirectUserForInteraction(interactionUrl, False)

        response = idp_disco.response

        self.failUnless(isinstance(response, lasso.SoapFault))

        self.failUnless(response.detail is not None)

        self.failUnlessEqual(len(response.detail.any), 1)

        self.failUnless(isinstance(response.detail.any[0], lasso.IdWsf2Sb2RedirectRequest))

        self.failUnless(response.detail.any[0].redirectURL.startswith(interactionUrl + '?transactionID='))

        try:

            idp_disco.buildResponseMsg()

        except lasso.Error as e:

            self.fail(e)

        self.failUnless(idp_disco.msgBody is not None)

        self.failUnless(idp_disco.msgUrl is None)

        self.failUnless(idp_disco.msgBody is not None)

        try:

            wsp_disco.processResponseMsg(idp_disco.msgBody)

        except lasso.WsfprofileRedirectRequestError:

            pass

        except lasso.Error as e:

            self.fail(e)

        response_envelope = wsp_disco.getSoapEnvelopeResponse()

        self.failUnless(response_envelope.sb2GetRedirectRequestUrl().startswith(interactionUrl + '?transactionID='))

        # Here keep information about the request associated to ID: response_envelope.getMessageId().content

        wsp_disco_dump = wsp_disco.dump()

        wsp_disco = lasso.Node.newFromDump(wsp_disco_dump)

        wsp_disco.server = wsp

        request_envelope = wsp_disco.getSoapEnvelopeRequest()

        self.failUnless(request_envelope is not None)

        relates_to = request_envelope.getRelatesTo(True)

        self.failUnless(relates_to is not None)

        response_message_id = response_envelope.getMessageId().content

        relates_to.content = response_message_id

        wsp_disco.buildRequestMsg()

        # now redo as for test01 after request building

        self.failUnlessEqual(wsp_disco.msgUrl, idpSoapEndpoint)

        self.failUnless(wsp_disco.msgBody is not None)

        idp_disco = lasso.IdWsf2Discovery(idp)

        self.failUnless(idp_disco is not None)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        self.failUnless(idp_disco.request is not None)

        self.failUnlessEqual(len(idp_disco.request.svcMD), 1)

        self.failUnless(idp_disco.request.svcMD[0].svcMDID is None)

        try:

            idp_disco.checkSecurityMechanism()

        except lasso.Error as e:

            self.fail(e)

        try:

            idp_disco.validateRequest()

        except lasso.Error as e:

            self.fail(e)

        self.failUnless(idp_disco.response is not None)

        self.failUnlessEqual(len(idp_disco.metadatas), 1)

        metadata = idp_disco.metadatas[0]

        self.failUnlessEqual(metadata.abstract, abstract)

        self.failUnlessEqual(metadata.providerId, wsp.providerId)

        self.failUnlessEqual(len(metadata.serviceContext), 1)

        self.failUnlessEqual(len(metadata.serviceContext[0].serviceType), 1)

        self.failUnlessEqual(metadata.serviceContext[0].serviceType[0],

                lasso.PP11_HREF)

        self.failUnlessEqual(len(metadata.serviceContext[0].endpointContext), 1)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].address),

                1)

        self.failUnlessEqual(metadata.serviceContext[0].endpointContext[0].address[0],

                spSoapEndpoint)

        self.failUnlessEqual(

                len(metadata.serviceContext[0].endpointContext[0].securityMechId),

                1)

        self.failUnlessEqual(

                metadata.serviceContext[0].endpointContext[0].securityMechId[0],

                lasso.SECURITY_MECH_BEARER)

        idp_disco.buildResponseMsg()

        self.failUnless(metadata.svcMDID is not None)

        self.failUnless(idp_disco.msgUrl is None)

        self.failUnless(idp_disco.msgBody is not None)

        wsp_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnless(len(wsp_disco.metadatas) == 1, 'missing svcMDID')

        self.failUnless(wsp_disco.metadatas[0].svcMDID, 'missing svcMDID')

    def test04(self):

        """Test metadata query"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        federations = {}

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, federations)

        service_map = {}

        self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint,

            abstract = 'My first PP service', services_map = service_map)

        self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint+'2',

            abstract = 'My second PP service', services_map = service_map)

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, federations)

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        wsp_disco.initMetadataQuery()

        wsp_disco.buildRequestMsg()

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        self.failUnlessEqual(idp_disco.svcmdids, ())

        sender = idp_disco.getSoapEnvelopeRequest().sb2GetProviderId()

        for svcMDID in service_map.get(sender, []):

            idp_disco.addServiceMetadata(service_map.get(svcMDID))

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnless(len(wsp_disco.metadatas), 2)

    def test05(self):

        """Test metadata delete"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        service_map = {}

        self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint,

            abstract = 'My first PP service', services_map = service_map)

        self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint+'2',

            abstract = 'My second PP service', services_map = service_map)

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        wsp_disco.initMetadataDelete()

        svcmdids = tuple(service_map[wsp.providerId])

        wsp_disco.setSvcmdids(svcmdids)

        wsp_disco.buildRequestMsg()

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        self.failUnlessEqual(idp_disco.svcmdids, svcmdids)

        sender = idp_disco.getSoapEnvelopeRequest().sb2GetProviderId()

        self.failUnlessEqual(sender, wsp.providerId)

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

class MetadataAssociationTestCase(IdWsf2TestCase):

    def test01(self):

        """Metadata association add"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, dst_epr = self.login(wsp, idp, 1, {})

        service_map = {}

        svcMDID = self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint,

            abstract = 'My first PP service', services_map = service_map)

        # Make the request

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(dst_epr)

        wsp_disco.initMetadataAssociationAdd()

        wsp_disco.svcmdids = (svcMDID,)

        wsp_disco.buildRequestMsg()

        # Receive it

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        self.failUnlessEqual(idp_disco.svcmdids, (svcMDID,))

        sender = idp_disco.getSoapEnvelopeRequest().sb2GetProviderId()

        name_identifier = idp_disco.getNameIdentifier()

        # Store the association

        self.failUnless(sender is not None)

        self.failUnless(name_identifier is not None)

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

    def test02(self):

        """Metadata association query"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsc = self.getWscServer()

        # Register the service, add an association

        federations = {}

        wsp_identity_dump, wsp_session_dump, \

                idp_identity_dump, idp_session_dump, \

                wsp_dst_epr = self.login(wsp, idp, 1, federations)

        service_maps = {}

        svcMDID = self.metadataRegister(wsp, idp, wsp_session_dump,

                service_types = (lasso.PP11_HREF,), address = spSoapEndpoint,

            abstract = 'My first PP service', services_map = service_maps)

        service_associations = {}

        self.addAssociation(wsp, idp, wsp_session_dump, svcMDID, service_maps,

                federations, service_associations)

        # Start a query

        wsp_disco = lasso.IdWsf2Discovery(wsp)

        wsp_disco.setEpr(wsp_dst_epr)

        wsp_disco.initMetadataAssociationQuery()

        wsp_disco.buildRequestMsg()

        #

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.processRequestMsg(wsp_disco.msgBody)

        idp_disco.checkSecurityMechanism()

        self.failUnlessEqual(idp_disco.svcmdids, ())

        f = self.nid2tuple(idp_disco.getNameIdentifier())

        uid = federations[f]

        result = []

        for svcmdid in service_associations[uid]:

            result.append(svcmdid)

        idp_disco.svcmdids = tuple(result)

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsp_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnlessEqual(wsp_disco.svcmdids, (svcMDID,))

    def test03(self):

        """Metadata association delete"""

        pass

class QueryTestCase(IdWsf2TestCase):

    def test01(self):

        """Discovery Service Query"""

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsc = self.getWscServer()

        federations = {}

        # Register the service, add an association

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, idp_session_dump, wsp_dst_epr = self.login(wsp, idp, 1, federations)

        service_maps = {}

        svcMDID = self.metadataRegister(wsp, idp, wsp_session_dump, service_types =

            (lasso.PP11_HREF,), address = spSoapEndpoint,

            abstract = 'My first PP service', services_map = service_maps)

        service_associations = {}

        self.addAssociation(wsp, idp, wsp_session_dump, svcMDID, service_maps, federations, service_associations)

        # Try to find the service

        wsc_identity_dump, wsc_session_dump, idp_identity_dump, idp_session_dump, wsc_dst_epr = self.login(wsc, idp, 1, federations, idp_identity_dump = idp_identity_dump, idp_session_dump = idp_session_dump)

        wsc_disco = lasso.IdWsf2Discovery(wsc)

        wsc_disco.setEpr(wsc_dst_epr)

        wsc_disco.initQuery()

        wsc_disco.addRequestedService(service_types = (lasso.PP11_HREF,))

        wsc_disco.buildRequestMsg()

        idp_disco = lasso.IdWsf2Discovery(idp)

        idp_disco.setIdentityFromDump(idp_identity_dump)

        idp_disco.processRequestMsg(wsc_disco.msgBody)

        f = self.nid2tuple(idp_disco.getNameIdentifier())

        uid = federations[f]

        for id in service_associations[uid]:

            idp_disco.addServiceMetadata(service_maps[id])

        idp_disco.validateRequest()

        idp_disco.buildResponseMsg()

        wsc_disco.processResponseMsg(idp_disco.msgBody)

        self.failUnlessEqual(len(wsc_disco.endpointReferences), 1)

class DstTestCase(IdWsf2TestCase):

    def test01(self):

        """Data Service Template Query"""

        content = '<pp:PP xmlns:pp="%s">Coin</pp:PP>' % lasso.PP11_HREF

        idp = self.getIdpServer()

        wsp = self.getWspServer()

        wsc = self.getWscServer()

        federations = {}

        # Register the service, add an association

        wsp_identity_dump, wsp_session_dump, idp_identity_dump, \

            idp_session_dump, wsp_dst_epr = self.login(wsp, idp, 1,

                    federations)

        service_maps = {}

        svcMDID = self.metadataRegister(wsp, idp, wsp_session_dump,

                service_types = (lasso.PP11_HREF,), address =

                spSoapEndpoint, abstract = 'My first PP service',

                services_map = service_maps)

        service_associations = {}

        self.addAssociation(wsp, idp, wsp_session_dump, svcMDID,

                service_maps, federations, service_associations)

        wsc_identity_dump, wsc_session_dump, idp_identity_dump, \

        idp_session_dump, wsc_dst_epr = self.login(wsc, idp, 1, federations,

                idp_identity_dump = idp_identity_dump, idp_session_dump =

                idp_session_dump)

        eprs = self.query(wsc, idp, idp_identity_dump, wsc_session_dump, 1,

                federations, service_maps, service_associations,

                service_types = (lasso.PP11_HREF,))

        self.failUnless(len(eprs), 1)

        lasso.registerIdwsf2DstService(lasso.PP11_PREFIX, lasso.PP11_HREF)

        wsc_dst = lasso.IdWsf2DataService(wsc)

        wsc_dst.setEpr(eprs[0])

        wsc_dst.initQuery()

        wsc_dst.setServiceType(lasso.PP11_PREFIX, lasso.PP11_HREF)

        wsc_dst.addQueryItem('/%s:PP' % lasso.PP11_PREFIX, 'xxx')

        wsc_dst.buildRequestMsg()

        wsp_dst = lasso.IdWsf2DataService(wsp)

        wsp_dst.processRequestMsg(wsc_dst.msgBody)

        self.failUnlessEqual(wsp_dst.requestType, lasso.IDWSF2_DATA_SERVICE_REQUEST_TYPE_QUERY)

        wsp_dst.checkSecurityMechanism()

        data = ET.parse(StringIO(content))

        for item in wsp_dst.items:

            result = data.xpath(item.select, namespaces = { lasso.PP11_PREFIX: lasso.PP11_HREF })

            for found in result:

                wsp_dst.setQueryItemResult(item.itemId, ET.tostring(found), True)

        wsp_dst.setServiceType(lasso.PP11_PREFIX, lasso.PP11_HREF)

        wsp_dst.validateRequest()

        wsp_dst.buildResponseMsg()

        wsc_dst.processResponseMsg(wsp_dst.msgBody)

metadataSuite = unittest.makeSuite(MetadataTestCase, 'test')

metadataAssociationSuite = unittest.makeSuite(MetadataAssociationTestCase, 'test')

querySuite = unittest.makeSuite(QueryTestCase, 'test')

dstSuite = unittest.makeSuite(DstTestCase, 'test')

allTests = unittest.TestSuite((metadataSuite,

    metadataAssociationSuite,querySuite,dstSuite)) 

if __name__ == '__main__':

    sys.exit(not unittest.TextTestRunner(verbosity = 2).run(allTests).wasSuccessful())

dnl Check if wsf is explicitly disabled.

AC_ARG_ENABLE(wsf, [  --enable-wsf            enable experimental ID-WSF],

		enable_wsf="yes", enable_wsf="no")

AM_CONDITIONAL([WSF_ENABLED],[test "x$enable_wsf" = "xyes"])

LASSO_WSF_SUPPORT=0

if test "x$enable_wsf" = "xyes"; then

	AC_DEFINE(LASSO_WSF_ENABLED, [], [Define if ID-WSF support is enabled])

	LASSO_WSF_SUPPORT=1

fi

AC_SUBST(LASSO_WSF_SUPPORT)

AC_ARG_WITH(sasl2, [  --with-sasl2[=PFX]         Use Cyrus SASL library version 2 for WSF-Auth])

if test "x$enable_wsf" = "xyes"; then

	if test "$with_sasl2" != "no" && test "$with_sasl2" != "yes"

	then

		CPPFLAGS="$CPPFLAGS -I$with_sasl2/include"

		LDFLAGS="$LDFLAGS -L$with_sasl2/lib"

	fi

	saved_LIBS="$LIBS"

	AC_CHECK_LIB(sasl2, sasl_server_init,,

		AC_MSG_ERROR([libsasl must be installed for WSF support]),)

	LIBS="$saved_LIBS"

	LASSO_LIBS="$LASSO_LIBS -lsasl2"

fi

lasso/id-wsf/Makefile

lasso/id-wsf-2.0/Makefile

lasso/xml/id-wsf-2.0/Makefile

lasso/xml/ws/Makefile

Experimental ID-WSF:     $enable_wsf

wsf_profile_private.h private.h saml_2_0_loginprivate.h \

registry-private.h id_wsf_2_0_sessionprivate.h id_wsf_2_0_serverprivate.h \

saml2_login_private.h id_wsf_2_0_private.h \

backward_comp.h id_wsf_2.h id_wsf.h lasso_config.h utils.h debug.h

# Generate lasso.types depending on the WSF_ENABLED flag

if WSF_ENABLED

lasso.types: lasso.types.in

	sed -e 's/#WSF# //g' < $(srcdir)/lasso.types.in > lasso.types

else

lasso.types: lasso.types.in

	grep -v '#WSF#' $(srcdir)/lasso.types.in > lasso.types

endif

  <chapter id="idwsf">

    <title>Identity Web Services Framework 1.0</title>

    <xi:include href="xml/discovery.xml"/>

    <xi:include href="xml/data_service.xml"/>

    <xi:include href="xml/personal_profile_service.xml"/>

    <xi:include href="xml/authentication.xml"/>

    <xi:include href="xml/wsf_profile.xml"/>

    <xi:include href="xml/interaction_profile_service.xml"/>

    <xi:include href="xml/id_wsf_utils.xml"/>

  </chapter>

  <chapter id="xml-idwsf">

      <title>Objects from ID-WSF 1.0 schemas</title>

    <xi:include href="xml/id_wsf_strings.xml"/>

    <xi:include href="xml/disco_authenticate_requester.xml"/>

    <xi:include href="xml/disco_authenticate_session_context.xml"/>

    <xi:include href="xml/disco_authorize_requester.xml"/>

    <xi:include href="xml/disco_credentials.xml"/>

    <xi:include href="xml/disco_description.xml"/>

    <xi:include href="xml/disco_encrypted_resource_id.xml"/>

    <xi:include href="xml/disco_encrypt_resource_id.xml"/>

    <xi:include href="xml/disco_generate_bearer_token.xml"/>

    <xi:include href="xml/disco_insert_entry.xml"/>

    <xi:include href="xml/disco_modify_response.xml"/>

    <xi:include href="xml/disco_modify.xml"/>

    <xi:include href="xml/disco_options.xml"/>

    <xi:include href="xml/disco_query_response.xml"/>

    <xi:include href="xml/disco_query.xml"/>

    <xi:include href="xml/disco_remove_entry.xml"/>

    <xi:include href="xml/disco_requested_service_type.xml"/>

    <xi:include href="xml/disco_resource_id.xml"/>

    <xi:include href="xml/disco_resource_offering.xml"/>

    <xi:include href="xml/disco_send_single_logout.xml"/>

    <xi:include href="xml/disco_service_instance.xml"/>

    <xi:include href="xml/dst_data.xml"/>

    <xi:include href="xml/dst_modification.xml"/>

    <xi:include href="xml/dst_modify_response.xml"/>

    <xi:include href="xml/dst_modify.xml"/>

    <xi:include href="xml/dst_new_data.xml"/>

    <xi:include href="xml/dst_query_item.xml"/>

    <xi:include href="xml/dst_query_response.xml"/>

    <xi:include href="xml/dst_query.xml"/>

    <xi:include href="xml/is_redirect_request.xml"/>

    <xi:include href="xml/is_user_interaction.xml"/>

    <xi:include href="xml/sa_credentials.xml"/>

    <xi:include href="xml/sa_parameter.xml"/>

    <xi:include href="xml/sa_password_transforms.xml"/>

    <xi:include href="xml/sa_sasl_request.xml"/>

    <xi:include href="xml/sa_sasl_response.xml"/>

    <xi:include href="xml/sa_transform.xml"/>

    <xi:include href="xml/sec_resource_access_statement.xml"/>

    <xi:include href="xml/soap_binding_consent.xml"/>

    <xi:include href="xml/soap_binding_correlation.xml"/>

    <xi:include href="xml/soap_binding_ext_credentials_context.xml"/>

    <xi:include href="xml/soap_binding_ext_credential.xml"/>

    <xi:include href="xml/soap_binding_ext_service_instance_update.xml"/>

    <xi:include href="xml/soap_binding_ext_timeout.xml"/>

    <xi:include href="xml/soap_binding_processing_context.xml"/>

    <xi:include href="xml/soap_binding_provider.xml"/>

    <xi:include href="xml/soap_binding_usage_directive.xml"/>

    <xi:include href="xml/utility_status.xml"/>

  </chapter>

  <chapter id="idwsf2">

    <title>ID-WSF 2.0</title>

    <xi:include href="xml/soap_binding2.xml"/>

    <xi:include href="xml/id_wsf_2_0_discovery.xml"/>

    <xi:include href="xml/id_wsf_2_0_data_service.xml"/>

    <xi:include href="xml/id_wsf_2_0_profile.xml"/>

    <xi:include href="xml/id_wsf_2_0_login.xml"/>

  </chapter>

  <chapter id="xml-idwsf2">

    <title>Objects from ID-WSF 2.0 schemas</title>

    <xi:include href="xml/id_wsf2_strings.xml"/>

    <xi:include href="xml/disco_service_type.xml"/>

    <xi:include href="xml/disco_abstract.xml"/>

    <xi:include href="xml/disco_endpoint_context.xml"/>

    <xi:include href="xml/disco_keys.xml"/>

    <xi:include href="xml/disco_provider_id.xml"/>

    <xi:include href="xml/disco_requested_service.xml"/>

    <xi:include href="xml/disco_security_context.xml"/>

    <xi:include href="xml/disco_service_context.xml"/>

    <xi:include href="xml/disco_svc_md_association_add_response.xml"/>

    <xi:include href="xml/disco_svc_md_association_add.xml"/>

    <xi:include href="xml/disco_svc_md_association_delete_response.xml"/>

    <xi:include href="xml/disco_svc_md_association_delete.xml"/>

    <xi:include href="xml/disco_svc_md_association_query_response.xml"/>

    <xi:include href="xml/disco_svc_md_association_query.xml"/>

    <xi:include href="xml/disco_svc_md_delete_response.xml"/>

    <xi:include href="xml/disco_svc_md_delete.xml"/>

    <xi:include href="xml/disco_svc_md_query_response.xml"/>

    <xi:include href="xml/disco_svc_md_query.xml"/>

    <xi:include href="xml/disco_svc_md_register_response.xml"/>

    <xi:include href="xml/disco_svc_md_register.xml"/>

    <xi:include href="xml/disco_svc_md_replace_response.xml"/>

    <xi:include href="xml/disco_svc_md_replace.xml"/>

    <xi:include href="xml/disco_svc_metadata.xml"/>

    <xi:include href="xml/dst_data_response_base.xml"/>

    <xi:include href="xml/dst_delete_item_base.xml"/>

    <xi:include href="xml/dst_delete_response.xml"/>

    <xi:include href="xml/dstref_app_data.xml"/>

    <xi:include href="xml/dstref_create_item.xml"/>

    <xi:include href="xml/dstref_create_response.xml"/>

    <xi:include href="xml/dstref_create.xml"/>

    <xi:include href="xml/dstref_data_response.xml"/>

    <xi:include href="xml/dstref_data.xml"/>

    <xi:include href="xml/dstref_delete_item.xml"/>

    <xi:include href="xml/dstref_delete_response.xml"/>

    <xi:include href="xml/dstref_delete.xml"/>

    <xi:include href="xml/dstref_item_data.xml"/>

    <xi:include href="xml/dstref_modify_item.xml"/>

    <xi:include href="xml/dstref_modify_response.xml"/>

    <xi:include href="xml/dstref_modify.xml"/>

    <xi:include href="xml/dstref_query_item.xml"/>

    <xi:include href="xml/dstref_query_response.xml"/>

    <xi:include href="xml/dstref_query.xml"/>

    <xi:include href="xml/dstref_result_query.xml"/>

    <xi:include href="xml/dstref_test_item.xml"/>

    <xi:include href="xml/dst_request.xml"/>

    <xi:include href="xml/dst_result_query_base.xml"/>

    <xi:include href="xml/dst_test_item_base.xml"/>

    <xi:include href="xml/ims_identity_mapping_request.xml"/>

    <xi:include href="xml/ims_identity_mapping_response.xml"/>

    <xi:include href="xml/ims_mapping_input.xml"/>

    <xi:include href="xml/ims_mapping_output.xml"/>

    <xi:include href="xml/is_help.xml"/>

    <xi:include href="xml/is_inquiry_element.xml"/>

    <xi:include href="xml/is_inquiry.xml"/>

    <xi:include href="xml/is_interaction_request.xml"/>

    <xi:include href="xml/is_interaction_response.xml"/>

    <xi:include href="xml/is_interaction_statement.xml"/>

    <xi:include href="xml/is_item.xml"/>

    <xi:include href="xml/is_parameter.xml"/>

    <xi:include href="xml/is_select.xml"/>

    <xi:include href="xml/is_text.xml"/>

    <xi:include href="xml/ps_add_collection_request.xml"/>

    <xi:include href="xml/ps_add_collection_response.xml"/>

    <xi:include href="xml/ps_add_entity_request.xml"/>

    <xi:include href="xml/ps_add_entity_response.xml"/>

    <xi:include href="xml/ps_add_known_entity_request.xml"/>

    <xi:include href="xml/ps_add_known_entity_response.xml"/>

    <xi:include href="xml/ps_add_to_collection_request.xml"/>

    <xi:include href="xml/ps_get_object_info_request.xml"/>

    <xi:include href="xml/ps_get_object_info_response.xml"/>

    <xi:include href="xml/ps_item_data.xml"/>

    <xi:include href="xml/ps_list_members_request.xml"/>

    <xi:include href="xml/ps_list_members_response.xml"/>

    <xi:include href="xml/ps_notification.xml"/>

    <xi:include href="xml/ps_notify.xml"/>

    <xi:include href="xml/ps_object.xml"/>

    <xi:include href="xml/ps_query_objects_request.xml"/>

    <xi:include href="xml/ps_query_objects_response.xml"/>

    <xi:include href="xml/ps_remove_collection_request.xml"/>

    <xi:include href="xml/ps_remove_entity_request.xml"/>

    <xi:include href="xml/ps_remove_from_collection_request.xml"/>

    <xi:include href="xml/ps_request_abstract.xml"/>

    <xi:include href="xml/ps_resolve_identifier_request.xml"/>

    <xi:include href="xml/ps_resolve_identifier_response.xml"/>

    <xi:include href="xml/ps_resolve_input.xml"/>

    <xi:include href="xml/ps_response_abstract.xml"/>

    <xi:include href="xml/ps_set_object_info_request.xml"/>

    <xi:include href="xml/ps_test_membership_request.xml"/>

    <xi:include href="xml/ps_test_membership_response.xml"/>

    <xi:include href="xml/sb2_consent.xml"/>

    <xi:include href="xml/sb2_credentials_context.xml"/>

    <xi:include href="xml/sb2_endpoint_update.xml"/>

    <xi:include href="xml/sb2_redirect_request.xml"/>

    <xi:include href="xml/sb2_sender.xml"/>

    <xi:include href="xml/sb2_target_identity.xml"/>

    <xi:include href="xml/sb2_timeout.xml"/>

    <xi:include href="xml/sb2_usage_directive.xml"/>

    <xi:include href="xml/sb2_user_interaction_header.xml"/>

    <xi:include href="xml/sbf_framework.xml"/>

    <xi:include href="xml/sec_token_policy.xml"/>

    <xi:include href="xml/sec_token.xml"/>

    <xi:include href="xml/sec_transited_provider_path.xml"/>

    <xi:include href="xml/subs_notification.xml"/>

    <xi:include href="xml/subs_notify_response.xml"/>

    <xi:include href="xml/subsref_app_data.xml"/>

    <xi:include href="xml/subsref_create_item.xml"/>

    <xi:include href="xml/subsref_create_response.xml"/>

    <xi:include href="xml/subsref_create.xml"/>

    <xi:include href="xml/subsref_data_response.xml"/>

    <xi:include href="xml/subsref_data.xml"/>

    <xi:include href="xml/subsref_delete_item.xml"/>

    <xi:include href="xml/subsref_delete_response.xml"/>

    <xi:include href="xml/subsref_delete.xml"/>

    <xi:include href="xml/subsref_item_data.xml"/>

    <xi:include href="xml/subs_ref_item.xml"/>

    <xi:include href="xml/subsref_modify_item.xml"/>

    <xi:include href="xml/subsref_modify_response.xml"/>

    <xi:include href="xml/subsref_modify.xml"/>

    <xi:include href="xml/subsref_notification.xml"/>

    <xi:include href="xml/subsref_notify_response.xml"/>

    <xi:include href="xml/subsref_notify.xml"/>

    <xi:include href="xml/subsref_query_item.xml"/>

    <xi:include href="xml/subsref_query_response.xml"/>

    <xi:include href="xml/subsref_query.xml"/>

    <xi:include href="xml/subsref_result_query.xml"/>

    <xi:include href="xml/subsref_subscription.xml"/>

    <xi:include href="xml/subsref_test_item.xml"/>

    <xi:include href="xml/subs_subscription.xml"/>

    <xi:include href="xml/util_empty.xml"/>

    <xi:include href="xml/util_extension.xml"/>

    <xi:include href="xml/util_response.xml"/>

    <xi:include href="xml/util_status.xml"/>

  </chapter>

  <chapter id="ws-addr">

    <title>Object from the WS-* schemas</title>

    <xi:include href="xml/wsa_attributed_any.xml"/>

    <xi:include href="xml/wsa_attributed_qname.xml"/>

    <xi:include href="xml/wsa_attributed_unsigned_long.xml"/>

    <xi:include href="xml/wsa_attributed_uri.xml"/>

    <xi:include href="xml/wsa_endpoint_reference.xml"/>

    <xi:include href="xml/wsa_metadata.xml"/>

    <xi:include href="xml/wsa_problem_action.xml"/>

    <xi:include href="xml/wsa_reference_parameters.xml"/>

    <xi:include href="xml/wsa_relates_to.xml"/>

    <xi:include href="xml/wsse_embedded.xml"/>

    <xi:include href="xml/wsse_reference.xml"/>

    <xi:include href="xml/wsse_security_header.xml"/>

    <xi:include href="xml/wsse_security_token_reference.xml"/>

    <xi:include href="xml/wsse_transformation_parameters.xml"/>

    <xi:include href="xml/wsse_username_token.xml"/>

    <xi:include href="xml/wsu_timestamp.xml"/>

    <xi:include href="xml/ws_strings.xml"/>

  </chapter>

<SECTION>

<FILE>wsf_profile</FILE>

<TITLE>LassoWsfProfile</TITLE>

LassoWsfProfile

lasso_wsf_profile_get_identity

lasso_wsf_profile_get_session

lasso_wsf_profile_is_identity_dirty

lasso_wsf_profile_is_session_dirty

lasso_wsf_profile_set_identity_from_dump

lasso_wsf_profile_set_session_from_dump

lasso_wsf_profile_build_soap_request_msg

lasso_wsf_profile_build_soap_response_msg

lasso_wsf_profile_init_soap_request

lasso_wsf_profile_init_soap_response

lasso_wsf_profile_process_soap_request_msg

lasso_wsf_profile_process_soap_response_msg

lasso_wsf_profile_new

lasso_wsf_profile_new_full

lasso_wsf_profile_set_description_from_offering

lasso_wsf_profile_set_description

lasso_wsf_profile_get_description

lasso_wsf_profile_get_resource_offering

lasso_wsf_profile_set_security_mech_id

lasso_wsf_profile_get_security_mech_id

lasso_wsf_profile_init

lasso_wsf_profile_get_remote_provider

lasso_wsf_profile_get_remote_provider_id

lasso_wsf_profile_get_soap_fault

lasso_wsf_profile_set_soap_fault

lasso_wsf_profile_set_status_code

lasso_wsf_profile_get_status_code

lasso_wsf_profile_set_msg_url_from_description

lasso_wsf_profile_set_resource_offering

lasso_wsf_profile_init_interaction_service_redirect

<SUBSECTION Standard>

LASSO_WSF_PROFILE

LASSO_IS_WSF_PROFILE

LASSO_TYPE_WSF_PROFILE

lasso_wsf_profile_get_type

LASSO_WSF_PROFILE_CLASS

LASSO_IS_WSF_PROFILE_CLASS

LASSO_WSF_PROFILE_GET_CLASS

</SECTION>

<SECTION>

<FILE>sa_sasl_request</FILE>

<TITLE>LassoSaSASLRequest</TITLE>

LassoSaSASLRequest

lasso_sa_sasl_request_new

<SUBSECTION Standard>

LASSO_SA_SASL_REQUEST

LASSO_IS_SA_SASL_REQUEST

LASSO_TYPE_SA_SASL_REQUEST

lasso_sa_sasl_request_get_type

LASSO_SA_SASL_REQUEST_CLASS

LASSO_IS_SA_SASL_REQUEST_CLASS

LASSO_SA_SASL_REQUEST_GET_CLASS

</SECTION>

<SECTION>

<FILE>dst_modify</FILE>

<TITLE>LassoDstModify</TITLE>

LassoDstModify

lasso_dst_modify_new

<SUBSECTION Standard>

LASSO_DST_MODIFY

LASSO_IS_DST_MODIFY

LASSO_TYPE_DST_MODIFY

lasso_dst_modify_get_type

LASSO_DST_MODIFY_CLASS

LASSO_IS_DST_MODIFY_CLASS

LASSO_DST_MODIFY_GET_CLASS

</SECTION>

<SECTION>

<FILE>dst_query</FILE>

<TITLE>LassoDstQuery</TITLE>

LassoDstQuery

lasso_dst_query_new

<SUBSECTION Standard>

LASSO_DST_QUERY

LASSO_IS_DST_QUERY

LASSO_TYPE_DST_QUERY

lasso_dst_query_get_type

LASSO_DST_QUERY_CLASS

LASSO_IS_DST_QUERY_CLASS

LASSO_DST_QUERY_GET_CLASS

</SECTION>

<SECTION>

<FILE>id_wsf_strings</FILE>

<TITLE>ID-WSF 1.0 Strings</TITLE>

<SUBSECTION Namespaces>

LASSO_DISCO_HREF

LASSO_DISCO_PREFIX

LASSO_EP_HREF

LASSO_EP_PREFIX

LASSO_IS_HREF

LASSO_IS_PREFIX

LASSO_PP10_HREF

LASSO_PP10_PREFIX

LASSO_SA_HREF

LASSO_SA_PREFIX

LASSO_SEC_HREF

LASSO_SEC_PREFIX

LASSO_SOAP_BINDING_EXT_HREF

LASSO_SOAP_BINDING_EXT_PREFIX

LASSO_SOAP_BINDING_HREF

LASSO_SOAP_BINDING_PREFIX

<SUBSECTION Security Mechanisms>

LASSO_SECURITY_MECH_NULL

LASSO_SECURITY_MECH_X509

LASSO_SECURITY_MECH_SAML

LASSO_SECURITY_MECH_BEARER

LASSO_SECURITY_MECH_TLS

LASSO_SECURITY_MECH_TLS_X509

LASSO_SECURITY_MECH_TLS_SAML

LASSO_SECURITY_MECH_TLS_BEARER

LASSO_SECURITY_MECH_CLIENT_TLS

LASSO_SECURITY_MECH_CLIENT_TLS_X509

LASSO_SECURITY_MECH_CLIENT_TLS_SAML

LASSO_SECURITY_MECH_CLIENT_TLS_BEARER

LASSO_SECURITY11_MECH_X509

LASSO_SECURITY11_MECH_SAML

LASSO_SECURITY11_MECH_BEARER

LASSO_SECURITY11_MECH_TLS_X509

LASSO_SECURITY11_MECH_TLS_SAML

LASSO_SECURITY11_MECH_TLS_BEARER

LASSO_SA_SASL_SERVICE_NAME

<SUBSECTION Interaction Service Strings>

LASSO_IS_INTERACT_ATTR_INTERACT_IF_NEEDED

LASSO_IS_INTERACT_ATTR_DO_NOT_INTERACT

LASSO_IS_INTERACT_ATTR_DO_NOT_INTERACT_FOR_DATA

<SUBSECTION Discovery Service Status Codes>

LASSO_DISCO_STATUS_CODE_OK

LASSO_DISCO_STATUS_CODE_DISCO_OK

LASSO_DISCO_STATUS_CODE_FAILED

LASSO_DISCO_STATUS_CODE_REMOVE_ENTRY

LASSO_DISCO_STATUS_CODE_FORBIDDEN

LASSO_DISCO_STATUS_CODE_NO_RESULTS

LASSO_DISCO_STATUS_CODE_DIRECTIVES

<SUBSECTION DST Service Status Codes>

LASSO_DST_STATUS_CODE_OK

LASSO_DST_STATUS_CODE_FAILED

LASSO_DST_STATUS_CODE_PARTIAL

LASSO_DST_STATUS_CODE_ACTION_NOT_AUTHORIZED

LASSO_DST_STATUS_CODE_ACTION_NOT_SUPPORTED

LASSO_DST_STATUS_CODE_ALL_RETURNED

LASSO_DST_STATUS_CODE_CHANGE_HISTORY_NOT_SUPPORTED

LASSO_DST_STATUS_CODE_CHANGED_SINCE_RETURNS_ALL

LASSO_DST_STATUS_CODE_DATA_TOO_LONG

LASSO_DST_STATUS_CODE_EXISTS_ALREADY

LASSO_DST_STATUS_CODE_EXTENSION_NOT_SUPPORTED

LASSO_DST_STATUS_CODE_INVALID_DATA

LASSO_DST_STATUS_CODE_INVALID_RESOURCE_ID

LASSO_DST_STATUS_CODE_INVALID_SELECT

LASSO_DST_STATUS_CODE_MISSING_NEW_DATA_ELEMENT

LASSO_DST_STATUS_CODE_MISSING_RESOURCE_ID_ELEMENT

LASSO_DST_STATUS_CODE_MISSING_SELECT

LASSO_DST_STATUS_CODE_MODIFIED_SINCE

LASSO_DST_STATUS_CODE_NO_MORE_ELEMENTS

LASSO_DST_STATUS_CODE_NO_MULTIPLE_ALLOWED

LASSO_DST_STATUS_CODE_NO_MULTIPLE_RESOURCES

LASSO_DST_STATUS_CODE_TIME_OUT

LASSO_DST_STATUS_CODE_UNEXPECTED_ERROR

<SUBSECTION Authentication Service Status Codes>

LASSO_SA_STATUS_CODE_OK

LASSO_SA_STATUS_CODE_CONTINUE

LASSO_SA_STATUS_CODE_ABORT

<SUBSECTION SOAP Binding Processing Context Values>

LASSO_SOAP_BINDING_PROCESS_CONTEXT_PRINCIPAL_OFFLINE

LASSO_SOAP_BINDING_PROCESS_CONTEXT_PRINCIPAL_ONLINE

LASSO_SOAP_BINDING_PROCESS_CONTEXT_SIMULATE

</SECTION>

<SECTION>

<FILE>id_wsf2_strings</FILE>

<TITLE>Strings for ID-WSF 2.0</TITLE>

<SUBSECTION Namespaces>

LASSO_IDWSF2_SB2_HREF

LASSO_IDWSF2_SB2_PREFIX

LASSO_IDWSF2_SBF_HREF

LASSO_IDWSF2_SBF_PREFIX

LASSO_IDWSF2_DISCOVERY_HREF

LASSO_IDWSF2_DISCOVERY_PREFIX