Produits Entr'ouvert » Authentic 2

    authenticators = AuthenticatorManager()

    type = ''

    manager_view_template_name = 'authentic2/authenticators/authenticator_detail.html'

    unique = False

    protected = False

from django.utils.translation import gettext_lazy as _

from authentic2.apps.journal.utils import form_to_old_new

    @classmethod

    def record(cls, *, user, session, related_object, data=None):

        data = data or {}

        data.update({'related_object': related_object.get_journal_text()})

    @classmethod

    def get_message(cls, event, context):

        related_object = event.get_data('related_object')

        if context != authenticator:

            return _('creation of object "{related_object}" in authenticator "{authenticator}"').format(

            return _('creation of object "%s"') % related_object

    @classmethod

    def record(cls, *, user, session, form):

    @classmethod

    def get_message(cls, event, context):

        related_object = event.get_data('related_object')

        new = event.get_data('new') or {}

        edited_attributes = ', '.join(new) or ''

            )

    @classmethod

    def get_message(cls, event, context):

        related_object = event.get_data('related_object')

        if context != authenticator:

            return _('deletion of object "{related_object}" in authenticator "{authenticator}"').format(

            ],

            options={

                'verbose_name': 'Set an attribute',

                'default_related_name': 'set_attribute_actions',

            },

        ),

            ],

            options={

                'verbose_name': 'Attribute lookup',

                'default_related_name': 'attribute_lookups',

            },

        ),

            ],

            options={

                'verbose_name': 'Rename an attribute',

                'default_related_name': 'rename_attribute_actions',

            },

        ),

            ],

            options={

                'verbose_name': 'Add a role',

                'default_related_name': 'add_role_actions',

            },

        ),

            (_('Advanced'), SAMLAuthenticatorAdvancedForm),

        ]

    def clean(self):

        if not (self.metadata or self.metadata_path or self.metadata_url):

            raise ValidationError(_('One of the metadata fields must be filled.'))

        return views.profile(request, *args, **kwargs)

    authenticator = models.ForeignKey(SAMLAuthenticator, on_delete=models.CASCADE)

    class Meta:

    def get_journal_text(self):

        return '%s (%s)' % (self._meta.verbose_name, self.pk)

    user_field = models.CharField(_('User field'), max_length=256)

    saml_attribute = models.CharField(_('SAML attribute'), max_length=1024)

    ignore_case = models.BooleanField(_('Ignore case'), default=False)

    class Meta:

        default_related_name = 'attribute_lookups'

        verbose_name = _('Attribute lookup')

    def __str__(self):

        label = _('"%(saml_attribute)s" (from "%(user_field)s")') % {

            'ignore-case': self.ignore_case,

        }

    user_field = models.CharField(_('User field'), max_length=256)

    saml_attribute = models.CharField(_('SAML attribute name'), max_length=1024)

    mandatory = models.BooleanField(_('Mandatory'), default=False, help_text=_('Deny login if action fails.'))

    class Meta:

        default_related_name = 'set_attribute_actions'

        verbose_name = _('Set an attribute')

    def __str__(self):

        label = _('"%(attribute)s" from "%(saml_attribute)s"') % {

            label = '%s (%s)' % (label, _('mandatory'))

        return label

    role = models.ForeignKey(Role, verbose_name=_('Role'), on_delete=models.CASCADE)

    condition = models.CharField(_('Condition (unused)'), editable=False, max_length=256, blank=True)

    mandatory = models.BooleanField(_('Mandatory (unused)'), editable=False, default=False)

    class Meta:

        default_related_name = 'add_role_actions'

        verbose_name = _('Add a role')

    def __str__(self):

        return label_from_role(self.role)

{% endblock %}

{% block extra-tab-buttons %}

{% endblock %}

{% block extra-tab-list %}

{% endblock %}

<ul class="objects-list single-links">

  {% for related_object in object_list %}

    <li>

    </li>

  {% endfor %}

</ul>

        path(

            'authenticators/<int:authenticator_pk>/<slug:model_name>/add/',

            views.add_related_object,

        ),

        path(

            'authenticators/<int:authenticator_pk>/<slug:model_name>/<int:pk>/edit/',

            views.edit_related_object,

        ),

        path(

            'authenticators/<int:authenticator_pk>/<slug:model_name>/<int:pk>/delete/',

            views.delete_related_object,

        ),

    ],

)

from django.views.generic import CreateView, DeleteView, UpdateView

from mellon.utils import get_idp

from authentic2.manager.views import MediaMixin, TitleMixin

from authentic2.utils.misc import redirect_to_login

def login(request, authenticator, *args, **kwargs):

    context = kwargs.pop('context', {}).copy()

    return render_to_string('authentic2_auth_saml/profile.html', context, request=request)

    def dispatch(self, request, *args, **kwargs):

        model_name = kwargs.get('model_name')

            raise Http404()

        return super().dispatch(request, *args, **kwargs)

    def get_form_class(self):

    def get_form_kwargs(self):

        kwargs = super().get_form_kwargs()

        return self.model._meta.verbose_name

    template_name = 'authentic2/manager/form.html'

    def form_valid(self, form):

        resp = super().form_valid(form)

        return resp

add_related_object = RelatedObjectAddView.as_view()

    template_name = 'authentic2/manager/form.html'

    def form_valid(self, form):

        resp = super().form_valid(form)

        return resp

edit_related_object = RelatedObjectEditView.as_view()

    template_name = 'authentic2/authenticators/authenticator_delete_form.html'

    title = ''

    def delete(self, *args, **kwargs):

        return super().delete(*args, **kwargs)

    resp.form['user_field'].select(text='Email address (email)')

    resp.form['saml_attribute'] = 'mail'

    resp = resp.form.submit()

    assert '#open:samlattributelookup' in resp.location

    resp = resp.follow()

    resp.form['ignore_case'] = True

    resp = resp.form.submit().follow()

    assert escape('"mail" (from "Email address (email)"), case insensitive') in resp.text

    Attribute.objects.create(kind='string', name='test', label='Test')

    resp = resp.click('mail')

    resp = resp.click('Remove', href='samlattributelookup')

    resp = resp.form.submit().follow()

    assert 'mail' not in resp.text

def test_authenticators_saml_set_attribute(app, superuser):

    make('authenticator.disable', user=agent, session=session2, authenticator=authenticator)

    make('authenticator.deletion', user=agent, session=session2, authenticator=authenticator)

    make(

        user=agent,

        session=session2,

        related_object=set_attribute_action,

    action_edit_form.initial = {'from_name': 'old'}

    action_edit_form.changed_data = ['from_name']

    action_edit_form.cleaned_data = {'from_name': 'new'}

    make(

        user=agent,

        session=session2,

        related_object=set_attribute_action,

            'message': 'creation of object "Set an attribute (%s)" in authenticator "SAML"'

            % set_attribute_action.pk,

            'timestamp': 'Jan. 3, 2020, 8 a.m.',

            'user': 'agent',

        },

        {

            'message': 'edit of object "Set an attribute (%s)" in authenticator "SAML" (from_name)'

            % set_attribute_action.pk,

            'timestamp': 'Jan. 3, 2020, 9 a.m.',

            'user': 'agent',

        },

        {

            'message': 'deletion of object "Set an attribute (%s)" in authenticator "SAML"'

            % set_attribute_action.pk,

            'timestamp': 'Jan. 3, 2020, 10 a.m.',

            'user': 'agent',

        },

        {