Produits Entr'ouvert » Authentic 2

    def record(cls, *, user, session, forms):

        data = {k: v for form in forms for k, v in form_to_old_new(form).items()}

        super().record(user=user, session=session, authenticator=forms[0].instance, data=data)

    @property

    def manager_form_classes(self):

        return [(_('General'), self.manager_form_class)]

        for _, form_class in self.manager_form_classes:

            try:

                self.full_clean(exclude=getattr(form_class._meta, 'exclude', None))

            except ValidationError:

                return False

  <div class="section pk-tabs">

    {% if forms|length > 1 %}

      <div class="pk-tabs--tab-list" role="tablist" aria-label="{% trans "Cell Properties" %}">

        {% for form in forms %}

          <button role="tab"

            aria-selected="{{ forloop.first|yesno:"true,false" }}"

            aria-controls="panel-{{ form.tab_slug }}"

            id="tab-{{ form.tab_slug }}"

            tabindex="{{ forloop.first|yesno:"0,-1" }}"

            {% if form.is_not_default %}class="pk-tabs--button-marker"{% endif %}>{{ form.tab_name }}</button>

        {% endfor %}

      </div>

    {% endif %}

    <form method="post" {% if forms|length > 1 %}class="pk-tabs--container"{% endif %} enctype="multipart/form-data">

      {% csrf_token %}

      {% if forms|length > 1 %}

        {% for form in forms %}

          <div id="panel-{{ form.tab_slug }}"

            role="tabpanel" tabindex="0" {% if not forloop.first %}hidden{% endif %}

            data-tab-slug="{{ form.tab_slug }}"

            aria-labelledby="tab-{{ form.tab_slug }}">

            {{ form|with_template }}

          </div>

        {% endfor %}

      {% else %}

        {{ forms.0|with_template }}

      {% endif %}

      <div class="buttons">

        <button>{% trans "Save" %}</button>

        <a class="cancel" href="{% url 'a2-manager-authenticator-detail' pk=object.pk %}">{% trans 'Cancel' %}</a>

      </div>

    </form>

  </div>

from django.utils.text import slugify

def build_tab_is_not_default(form):

    for field_name, field in form.fields.items():

        if field.initial is not None:

            initial_value = field.initial() if callable(field.initial) else field.initial

            if initial_value != form.initial.get(field_name):

                return True

        else:

            if bool(form.initial.get(field_name)):

                return True

    return False

class MultipleFormsUpdateView(UpdateView):

    def get_context_data(self, **kwargs):

        kwargs['object'] = self.object

        kwargs['forms'] = kwargs.get('forms') or self.get_forms()

        return kwargs

class AuthenticatorEditView(AuthenticatorsMixin, MultipleFormsUpdateView):

    def get_forms(self):

        forms = []

        for label, form_class in self.object.manager_form_classes:

            form = form_class(**self.get_form_kwargs())

            form.tab_name = label

            form.tab_slug = slugify(label)

            form.is_not_default = build_tab_is_not_default(form)

            forms.append(form)

        return forms

    def post(self, request, *args, **kwargs):

        self.object = self.get_object()

        forms = self.get_forms()

        all_valid = all(form.is_valid() for form in forms)

        if all_valid:

            for form in forms:

                form.save()

            self.request.journal.record('authenticator.edit', forms=forms)

            return HttpResponseRedirect(self.get_success_url())

        return self.render_to_response(self.get_context_data(forms=forms))

        exclude = (

            'ou',

            'metadata_cache_time',

            'metadata_http_timeout',

            'verify_ssl_certificate',

            'transient_federation_attribute',

            'realm',

            'username_template',

            'name_id_policy_format',

            'name_id_policy_allow_create',

            'force_authn',

            'add_authnrequest_next_url_extension',

            'group_attribute',

            'create_group',

            'error_url',

            'error_redirect_after_timeout',

            'authn_classref',

            'attribute_mapping',

        )

class SAMLAuthenticatorAdvancedForm(forms.ModelForm):

    class Meta:

        model = SAMLAuthenticator

        fields = SAMLAuthenticatorForm.Meta.exclude

    def __init__(self, *args, **kwargs):

        super().__init__(*args, **kwargs)

        if not self.instance.metadata_url:

            del self.fields['metadata_cache_time']

            del self.fields['metadata_http_timeout']

    def manager_form_classes(self):

        from .forms import SAMLAuthenticatorAdvancedForm, SAMLAuthenticatorForm

        return [

            (_('General'), SAMLAuthenticatorForm),

            (_('Advanced'), SAMLAuthenticatorAdvancedForm),

        ]

    assert resp.pyquery('button#tab-general').attr('class') == 'pk-tabs--button-marker'

    assert not resp.pyquery('button#tab-advanced').attr('class')

    resp = resp.click('Enable').follow()

    assert 'Authenticator has been enabled.' in resp.text

    resp = resp.click('Edit')

    resp.form['attribute_mapping'] = '[{"attribute": "email", "saml_attribute": "mail", "mandatory": false}]'

    resp = resp.form.submit().follow()

    resp = resp.click('Edit')

    assert resp.pyquery('button#tab-advanced').attr('class') == 'pk-tabs--button-marker'

def test_authenticators_saml_hide_metadata_url_advanced_fields(app, superuser, ou1, ou2):

    authenticator = SAMLAuthenticator.objects.create(slug='idp1')

    resp = login(app, superuser)

    resp = app.get('/manage/authenticators/%s/edit/' % authenticator.pk)

    assert 'Metadata cache time' not in resp.text

    assert 'Metadata HTTP timeout' not in resp.text

    resp.form['metadata_path'] = ''

    resp.form['metadata_url'] = 'https://example.com/metadata.xml'

    resp = resp.form.submit().follow()

    resp = resp.click('Edit')

    assert 'Metadata cache time' in resp.text

    assert 'Metadata HTTP timeout' in resp.text

    make('authenticator.edit', user=agent, session=session2, forms=[authenticator_edit_form])