Produits Entr'ouvert » Authentic 2

        default=250,

        definition='Maximum number of mails to send per period',

    ),

)

app_settings = AppSettings(default_settings)

        sub = smart_bytes(view.kwargs[lookup_url_kwarg])

        decrypted = utils.reverse_pairwise_sub(client, sub)

        if decrypted:

    def a2_hook_api_modify_serializer_after_validation(self, view, serializer):

        import uuid

        for u in serializer.validated_data['known_uuids']:

            decrypted = utils.reverse_pairwise_sub(client, smart_bytes(u))

            if decrypted:

                new_known_uuids.append(new_known_uuid)

                uuid_map[new_known_uuid] = u

            else:

    uuid = models.CharField(max_length=128, verbose_name=_('uuid'), default=generate_uuid)

    client = models.ForeignKey(to=OIDCClient, verbose_name=_('client'), on_delete=models.CASCADE)

    user = models.ForeignKey(to=settings.AUTH_USER_MODEL, verbose_name=_('user'), on_delete=models.CASCADE)

    scopes = models.TextField(verbose_name=_('scopes'))

    state = models.TextField(null=True, verbose_name=_('state'))

    nonce = models.TextField(null=True, verbose_name=_('nonce'))

        {% endfor %}

      </ul>

    {% endif %}

    {% csrf_token %}

    <p class="a2-oidc-authorization-form--do-not-ask-again">

      <label for="id_do_not_ask_again"><input id="id_do_not_ask_again" type="checkbox" name="do_not_ask_again" value="on"/><span>{% trans "Do not ask again" %}</span></label>

    return urllib.parse.urlparse(url).netloc.split(':')[0]

    if client.identifier_policy in (client.POLICY_PAIRWISE, client.POLICY_PAIRWISE_REVERSIBLE):

    elif client.identifier_policy == client.POLICY_UUID:

        return force_text(user.uuid)

    elif client.identifier_policy == client.POLICY_EMAIL:

        raise NotImplementedError

    '''Make a pairwise sub'''

    if client.identifier_policy == client.POLICY_PAIRWISE:

    elif client.identifier_policy == client.POLICY_PAIRWISE_REVERSIBLE:

    else:

        raise NotImplementedError('unknown pairwise client.identifier_policy %s' % client.identifier_policy)

    sector_identifier = client.get_sector_identifier()

    sub = sector_identifier + str(user.uuid) + settings.SECRET_KEY

    sub = base64.b64encode(hashlib.sha256(sub.encode('utf-8')).digest())

    return sub.decode('utf-8')

    try:

        identifier = uuid.UUID(user_uuid).bytes

    except ValueError:

        return None

    sector_identifier = client.get_sector_identifier()

def reverse_pairwise_sub(client, sub):

    return str(value)

    '''Create user info dictionary'''

    user_info = {}

    if 'openid' in scope_set:

    attributes = get_attributes(

        {

            'user': user,

from authentic2 import app_settings as a2_app_settings

from authentic2 import hooks

from authentic2.a2_rbac.models import OrganizationalUnit

from authentic2.decorators import setting_enabled

from authentic2.exponential_retry_timeout import ExponentialRetryTimeout

from authentic2.utils.misc import last_authentication_event, login_require, make_url, redirect

    iat = now()  # iat = issued at

    if client.authorization_mode != client.AUTHORIZATION_MODE_NONE or 'consent' in prompt:

        # authorization by user is mandatory, as per local configuration or per explicit request by

        # the RP

        authorized_scopes = set()

        for authorization in qs:

            authorized_scopes |= authorization.scope_set()

            if 'none' in prompt:

                raise ConsentRequired(_('Consent is required but prompt parameter is "none"'))

            if request.method == 'POST':

                if 'accept' in request.POST:

                    if 'do_not_ask_again' in request.POST:

                        pk_to_deletes = []

                    request,

                    'authentic2_idp_oidc/authorization.html',

                    {

                        'client': client,

                        'scopes': scopes - {'openid'},

                    },

        code = models.OIDCCode.objects.create(

            client=client,

            user=request.user,

            scopes=' '.join(scopes),

            state=state,

            nonce=nonce,

    ):

        acr = '1'

    # prefill id_token with user info

    exp = start + idtoken_duration(client)

    id_token.update(

        {