Produits Entr'ouvert » w.c.s.

def test_with_user(pub):

    create_superuser(pub)

    resp = get_app(pub).get('/backoffice/', status=302)

def test_with_superuser(pub):

    app = login(get_app(pub))

    from test_saml_auth import setup_environment

    setup_environment(pub)

    resp = resp.click('Identity Providers')

    assert 'http://sso.example.net/' in resp.body

def test_backoffice_unlogged(pub):

    create_superuser(pub)

    resp = get_app(pub).get('/backoffice/', status=302)

def test_backoffice_home(pub):

    create_superuser(pub)

    formdef.store()

    home = get_app(pub).get('/')

    assert home.status_int == 302

def test_home_always_advertise(pub):

    formdef = create_formdef()

    formdata_user.store()

    resp = get_app(pub).get('/test/%s/' % formdata.id)

    resp = get_app(pub).get('/test/%s/' % formdata_user.id)

    resp = login(get_app(pub), username='foo', password='foo').get('/test/%s/' % formdata_user.id)

    assert 'The form has been recorded on' in resp

import os

import sys

import shutil

try:

    import lasso

    pub.write_cfg()

def teardown_module(module):

    shutil.rmtree(pub.APP_DIR)

    body = saml2.assertionConsumerPost()

    assert req.response.status_code == 303

    assert req.session.user is not None

def test_assertion_consumer_existing_federation():

def test_assertion_consumer_redirect_after_url():

    setup_environment(pub)

    req = get_assertion_consumer_request()

    saml2 = Saml2Directory()

    saml_response_body = req.form['SAMLResponse']

    body = saml2.assertionConsumerPost()

def test_saml_login_page():

    setup_environment(pub)

    assert resp.status_int == 302

    assert resp.location.startswith('http://sso.example.net/saml2/sso?SAMLRequest=')

def test_saml_register():

    setup_environment(pub)

    get_app(pub).get('/register/', status=404)

    # if there's no specific registration URL, this initiates a SSO and there

    # should be a registration link on the identity provider

    resp = get_app(pub).get('/register/')

    resp = resp.follow()

    assert resp.location.startswith('http://sso.example.net/saml2/sso?SAMLRequest=')

# You should have received a copy of the GNU General Public License

# along with this program; if not, see <http://www.gnu.org/licenses/>.

import quixote

from quixote.errors import *

from quixote.html import TemplateIO, htmltext

        if request.user:

            return AccessForbiddenError.render(self)

        if self.public_msg:

            session.message = ('error', self.public_msg)

        quixote.redirect(login_url)

class EmailError(Exception):

    lasso = None

from cStringIO import StringIO

import urllib2

import urlparse

                                get_cfg('saml_identities', {}).get('registration-url'),

                                vars)

                return redirect(registration_url)

            ident_methods = get_cfg('identification', {}).get('methods', [])

            if len(ident_methods) > 1:

            else:

        if not get_request().user.anonymous:

            raise errors.AccessForbiddenError()

    def login(self):

        idps = get_cfg('idp', {})

                    get_request().get_scheme(),

                    get_request().get_server(False),

        # there is only one visible IdP, perform login automatically on

        # this one.

        return Directory._q_traverse(self, path)

    def login(self):

        identities_cfg = get_cfg('identities', {})

        if identities_cfg.get('email-as-username', False):

            form.add(StringWidget, 'username', title = _('Email'), size=25, required=True)

        else:

            account.warned_about_unused_account = False

            account.store()

            return redirect(after_url)

        else:

            return redirect(get_publisher().get_root_url() + get_publisher().after_login_url)

        login.request.forceAuthn = False

        login.request.isPassive = get_request().form.get('IsPassive') == 'true'

        login.request.consent = 'urn:oasis:names:tc:SAML:2.0:consent:current-implicit'

        login.buildAuthnRequestMsg()

        return redirect(login.msgUrl)

        relay_state = request.form.get('RelayState', None)

        session = get_session()

        response = get_response()

        else:

        response.content_type = 'text/plain'

        return "Your browser should redirect you"

    _names = 'sessions'

    name_identifier = None

    lasso_session_dump = None

    lasso_session_index = None

    lasso_anonymous_identity_dump = None

        return (time.time() - self.get_access_time()) > duration

    def has_info(self):

            self.lasso_session_dump or self.message or \

            self.lasso_anonymous_identity_dump or \

            self.lasso_manage_name_id_dump or \

import json

import os

import re

try:

    from hobo.scrutiny.wsgi.middleware import VersionMiddleware

        ident_methods = get_cfg('identification', {}).get('methods', [])

        if get_request().form.get('ReturnUrl'):

        if len(ident_methods) == 0:

            get_logger().info('no ident method defined')

            if form.is_submitted() and not form.has_errors():

                method = form.get_widget('method').parse()

                if get_publisher().ident_methods.get(method)().is_interactive():

                else:

                    try:

                        return qommon.ident.login(method)