Produits Entr'ouvert » Authentic 2

from authentic2.attributes_ng.engine import get_service_attributes

from authentic2.forms.widgets import DatalistTextInput

from authentic2_idp_oidc import app_settings as oidc_app_settings

from authentic2_idp_oidc.models import OIDCClaim, OIDCClient

class OIDCServiceForm(SlugMixin, forms.ModelForm):

    class Meta:

        model = OIDCClient

        fields = oidc_app_settings.MANAGER_FIELDS

class OIDCClaimForm(forms.ModelForm):

    class Meta:

        model = OIDCClaim

        fields = ('name', 'value', 'scopes')

        widgets = {

            'value': DatalistTextInput,

        }

    def __init__(self, *args, **kwargs):

        super().__init__(*args, **kwargs)

        data = dict(get_service_attributes(getattr(self.instance, 'client', None))).keys()

        widget = self.fields['value'].widget

        widget.data = data

        widget.name = 'list__oidcclaim-inline'

        widget.attrs.update({'list': 'list__oidcclaim-inline'})

from django.urls import reverse

from authentic2_idp_oidc import app_settings as oidc_app_settings

from authentic2_idp_oidc.models import OIDCClaim, OIDCClient

    def get_service_data(self, service, fields):

        for field in fields:

            field_value = getattr(service, field)

            if not field_value:

                continue

            if hasattr(service, 'get_%s_display' % field):

                field_value = getattr(service, 'get_%s_display' % field)()

            yield service._meta.get_field(field).verbose_name, field_value

    def get_oidc_service_data(self):

        if not hasattr(self.object, 'oidcclient'):

            return {}

        service = self.object.oidcclient

        self.can_delete = True

        # add client id and secret

        display_fields = ['client_id', 'client_secret'] + oidc_app_settings.MANAGER_FIELDS[1:]

        # but remove name because it's already displayed

        if 'name' in display_fields:

            display_fields.remove('name')

        ctx = {

            'service_fields': self.get_service_data(service, display_fields),

            'claims': service.oidcclaim_set.all(),

            'extra_details_template': 'authentic2/manager/oidc_service_detail.html',

        }

        return ctx

        ctx.update(self.get_oidc_service_data())

service_detail = ServiceView.as_view()

    def get_object(self, queryset=None):

        service = super().get_object(queryset)

        if hasattr(service, 'oidcclient'):

            self.model = OIDCClient

            return service.oidcclient

        return service

    def get_fields(self):

        fields = super().get_fields()

        if hasattr(self.object, 'oidcclient'):

            fields.extend(oidc_app_settings.MANAGER_FIELDS)

        return fields

edit_service = ServiceEditView.as_view()

class ServiceDeleteView(views.BaseDeleteView):

    model = Service

    pk_url_kwarg = 'service_pk'

    permissions = ['authentic2.delete_service']

    title = _('Delete OpenID Service')

delete_service = ServiceDeleteView.as_view()

class OIDCServiceAddView(views.ActionMixin, views.BaseAddView):

    form_class = forms.OIDCServiceForm

    model = OIDCClient

    title = _('Add OIDC service')

    permissions = ['authentic2.add_service']

    action = _('Add')

    def get_success_url(self):

        # add default claims mappings after creating service

        for mapping in oidc_app_settings.DEFAULT_MAPPINGS:

            OIDCClaim.objects.get_or_create(client=self.object, **mapping)

        return reverse('a2-manager-service', kwargs={'service_pk': self.object.pk})

add_oidc_service = OIDCServiceAddView.as_view()

class OIDCClaimAddView(views.ActionMixin, views.BaseAddView):

    form_class = forms.OIDCClaimForm

    model = OIDCClaim

    title = _('Add OIDC Claim')

    action = _('Add')

    def form_valid(self, form):

        obj = form.save(commit=False)

        obj.client = OIDCClient.objects.get(pk=self.kwargs['service_pk'])

        obj.save()

        return super().form_valid(form)

    def get_success_url(self):

        return reverse('a2-manager-service', kwargs={'service_pk': self.object.client.pk})

oidc_claim_add = OIDCClaimAddView.as_view()

class BaseClaimView:

    model = OIDCClaim

    pk_url_kwarg = 'claim_pk'

    def get_queryset(self):

        qs = super().get_queryset()

        return qs.filter(client__pk=self.kwargs['service_pk'])

    def get_success_url(self):

        return reverse('a2-manager-service', kwargs={'service_pk': self.object.client.pk})

class OIDCClaimEditView(BaseClaimView, views.BaseEditView):

    title = _('Edit OpenID Claim')

    form_class = forms.OIDCClaimForm

oidc_claim_edit = OIDCClaimEditView.as_view()

class OIDCClaimDeleteView(BaseClaimView, views.BaseDeleteView):

    title = _('Delete OpenID Claim')

oidc_claim_delete = OIDCClaimDeleteView.as_view()

{% load i18n %}

{% for field, value in service_fields %}

  <p>{{ field|capfirst }}{% trans ":" %}  {% if value == True %}{% trans "yes" %}

  {% elif value == False %}{% trans "no" %}

  {% else %}{{value}}

  {% endif %}</p>

{% endfor %}

  <div class="section">

  <h3>{% trans "OIDC Claims" %}<a href="{% url "a2-manager-oidc-claim-add" service_pk=object.pk %}" class="button" rel="popup">{% trans "Add claim" %}</a></h3>

  {% if claims %}

  <table class="main plaintable objects-table" id="oidc-claims">

    <thead>

      <tr><th>{% trans "Name" %}</th><th>{% trans "Value" %}</th><th>{% trans "Scopes" %}</th><th></th></tr>

    </thead>

    <tbody>

    {% for claim in claims %}

    <tr>

      <td>{{ claim.name }}</td>

      <td>{{ claim.value }}</td>

      <td>{{ claim.scopes }}</td>

      <td class="actions">

        <a class="edit" href="{% url "a2-manager-oidc-claim-edit" service_pk=object.pk claim_pk=claim.pk %}" rel="popup" title="{% trans "Edit" %}">{% trans "Edit" %}</a>

        <a class="delete" href="{% url "a2-manager-oidc-claim-delete" service_pk=object.pk claim_pk=claim.pk %}" rel="popup" title="{% trans "Delete" %}">{% trans "Delete" %}</a>

      </td>

    </tr>

    {% endfor %}

    </tbody>

  </table>

  {% endif %}

</div>

{% extends "authentic2/manager/base.html" %}

{{ block.super }}

  <a href="{% url 'a2-manager-services' %}">{% trans 'Services' %}</a>

{% block buttons %}

{% endblock %}

  {% if view.can_delete %}

  <a rel="popup" href="{% url "a2-manager-service-delete" service_pk=view.kwargs.service_pk %}">{% trans "Delete" %}</a>

  {% endif %}

{% if extra_details_template %}

  {% include extra_details_template %}

{% endif %}

{% block appbar %}

  {{ block.super }}

  <span class="actions">

    {% if view.can_add %}

    <a href="{% url "a2-manager-add-oidc-service" %}">{% trans "Add OIDC service" %}</a>

    {% endif %}

  </span>

{% endblock %}

        url(r'^services/(?P<service_pk>\d+)/$', service_views.service_detail, name='a2-manager-service'),

        url(r'^services/add-oidc/$', service_views.add_oidc_service, name='a2-manager-add-oidc-service'),

        url(

            r'^services/(?P<service_pk>\d+)/edit/$',

            service_views.edit_service,

            name='a2-manager-service-edit',

        ),

        url(

            r'^services/(?P<service_pk>\d+)/delete/$',

            service_views.delete_service,

            name='a2-manager-service-delete',

        ),

        url(

            r'^services/(?P<service_pk>\d+)/claim/add/$',

            service_views.oidc_claim_add,

            name='a2-manager-oidc-claim-add',

        ),

        url(

            r'^services/(?P<service_pk>\d+)/claim/(?P<claim_pk>\d+)/edit/$',

            service_views.oidc_claim_edit,

            name='a2-manager-oidc-claim-edit',

        ),

        url(

            r'^services/(?P<service_pk>\d+)/claim/(?P<claim_pk>\d+)/delete/$',

            service_views.oidc_claim_delete,

            name='a2-manager-oidc-claim-delete',

        ),

    model = None

    @property

    def MANAGER_FIELDS(self):

        return self._setting(

            'MANAGER_FIELDS',

            [

                'name',

                'redirect_uris',

                'post_logout_redirect_uris',

                'sector_identifier_uri',

                'frontchannel_logout_uri',

                'ou',

                'identifier_policy',

                'idtoken_algo',

                'unauthorized_url',

                'authorization_mode',

                'authorization_flow',

                'home_url',

                'colour',

                'logo',

            ],

        )

from authentic2_idp_oidc import app_settings as oidc_app_settings

from authentic2_idp_oidc.models import OIDCClaim, OIDCClient

def test_manager_add_oidc_service(app, superuser):

    resp = login(app, superuser, 'a2-manager-services')

    assert 'Add OIDC service' in resp.text

    assert OIDCClient.objects.count() == 0

    assert OIDCClaim.objects.count() == 0

    resp = resp.click('Add OIDC service')

    form = resp.form

    for field in oidc_app_settings.MANAGER_FIELDS:

        assert field in form.fields

    form['name'] = 'Test'

    form['redirect_uris'] = 'http://example.com'

    resp = form.submit()

    assert OIDCClient.objects.count() == 1

    assert OIDCClaim.objects.count() == len(oidc_app_settings.DEFAULT_MAPPINGS)

    assert resp.location == reverse('a2-manager-service', kwargs={'service_pk': OIDCClient.objects.get().pk})

    resp = resp.follow()

    assert "<h3>OIDC Claims" in resp.text

    assert "Add claim" in resp.text

    assert resp.pyquery.remove_namespaces()('#oidc-claims tbody tr').length == len(

        oidc_app_settings.DEFAULT_MAPPINGS

    )

def test_manager_edit_oidc_service(app, superuser):

    OIDCClient.objects.create(name='Test', slug='test', redirect_uris='http://example.com')

    resp = login(app, superuser, 'a2-manager-services')

    resp = resp.click('Test')

    resp = resp.click('Edit')

    form = resp.form

    form['name'] = 'New Test'

    form['colour'] = '#ff00ff'

    resp = form.submit()

    assert resp.location == '..'

    resp = resp.follow()

    assert "New Test" in resp.text

    assert "#ff00ff" in resp.text

def test_manager_delete_oidc_service(app, superuser):

    OIDCClient.objects.create(name='Test', slug='test', redirect_uris='http://example.com')

    resp = login(app, superuser, 'a2-manager-services')

    resp = resp.click('Test')

    resp = resp.click('Delete')

    resp = resp.form.submit().follow()

    assert OIDCClient.objects.count() == 0

def test_manager_add_oidc_claim(app, superuser):

    client = OIDCClient.objects.create(name='Test', slug='test', redirect_uris='http://example.com')

    resp = login(app, superuser, reverse('a2-manager-service', kwargs={'service_pk': client.pk}))

    resp = resp.click('Add claim')

    form = resp.form

    form['name'] = 'claim'

    form['value'] = 'value'

    form['scopes'] = 'profile'

    resp = form.submit()

    assert resp.location == reverse('a2-manager-service', kwargs={'service_pk': client.pk})

    assert OIDCClaim.objects.filter(client=client, name='claim', value='value', scopes='profile').exists()

def test_manager_edit_oidc_claim(app, superuser):

    client = OIDCClient.objects.create(name='Test', slug='test', redirect_uris='http://example.com')

    OIDCClaim.objects.create(client=client, name='claim', value='value', scopes='profile')

    resp = login(app, superuser, reverse('a2-manager-service', kwargs={'service_pk': client.pk}))

    assert "claim" in resp.text

    resp = resp.click('Edit', index=1)

    form = resp.form

    form['value'] = 'new value'

    resp = form.submit()

    assert resp.location == reverse('a2-manager-service', kwargs={'service_pk': client.pk})

    assert not OIDCClaim.objects.filter(client=client, name='claim', value='value', scopes='profile').exists()

    assert OIDCClaim.objects.filter(client=client, name='claim', value='new value', scopes='profile').exists()

def test_manager_delete_oidc_claim(app, superuser):

    client = OIDCClient.objects.create(name='Test', slug='test', redirect_uris='http://example.com')

    OIDCClaim.objects.create(client=client, name='claim', value='value', scopes='profile')

    resp = login(app, superuser, reverse('a2-manager-service', kwargs={'service_pk': client.pk}))

    assert "claim" in resp.text

    resp = resp.click('Delete', index=1)

    form = resp.form

    resp = form.submit()

    assert resp.location == reverse('a2-manager-service', kwargs={'service_pk': client.pk})

    assert not OIDCClaim.objects.filter(client=client, name='claim', value='value', scopes='profile').exists()