Produits Entr'ouvert » Authentic 2

Sur une installation en Debian Buster (3.70-1~eob100+1), on a une erreur 500 à la déconnexion :

Feb 09 11:37:19 demo authentic2[436]: 176.159.32.89 - r:7F7C16F34208 INFO Logged out
Feb 09 11:37:19 demo authentic2[436]: 176.159.32.89 - r:7F7C16F34208 ERROR Internal Server Error: /logout/
                                      Traceback (most recent call last):
                                        File "/usr/lib/python3/dist-packages/django/core/handlers/exception.py", line 41, in inner
                                          response = get_response(request)
                                        File "/usr/lib/python3/dist-packages/django/core/handlers/base.py", line 187, in _get_response
                                          response = self.process_exception_by_middleware(e, request)
                                        File "/usr/lib/python3/dist-packages/django/core/handlers/base.py", line 185, in _get_response
                                          response = wrapped_callback(request, *callback_args, **callback_kwargs)
                                        File "/usr/lib/python3/dist-packages/django/views/decorators/clickjacking.py", line 19, in wrapped_view
                                          resp = view_func(*args, **kwargs)
                                        File "/usr/lib/python3/dist-packages/authentic2/views.py", line 634, in logout
                                          response.set_cookie('a2_just_logged_out', 1, max_age=60, samesite='Lax')
                                      TypeError: set_cookie() got an unexpected keyword argument 'samesite'

Note : Cela semble relatif à #60798. En supprimant le paramètre samesite incriminé, plus d'erreur.

Cela vient potentiellement d'une version inadaptée de Django, mais à priori, on répond bien à ce qui est réclamé par le paquet python3-authentic2. Pour info:

root@demo:~# apt show python3-authentic2
Package: python3-authentic2
Version: 3.70-1~eob100+1
Priority: optional
Section: python
Source: authentic2
Maintainer: Benjamin Dauvergne <bdauvergne@entrouvert.com>
Installed-Size: 4,576 kB
Depends: python3-atomicwrites, python3-attr (>= 17), python3-chardet, python3-cryptography (>= 1.3.4), python3-django (>= 1:1.11), python3-django-filters, python3-django-import-export (>= 1), python3-django-mellon (>= 1.22), python3-django-model-utils (>= 2.4), python3-django-ratelimit, python3-django-select2 (>= 5), python3-django-tables2 (>= 1), python3-djangorestframework (>= 3.3), python3-dnspython (>= 1.10), python3-gadjo (>= 0.53), python3-jwcrypto (>= 0.3.1), python3-ldap (>= 2.4), python3-ldaptools, python3-markdown (>= 2.1), python3-pil, python3-pycryptodome, python3-requests (>= 2.3), python3-requests-oauthlib, python3-tablib, python3-xstatic-jquery, python3-xstatic-jquery-ui, python3-xstatic-select2, python3:any, openssl, python3-django-model-utils (<< 4), python3-lasso (>= 2.4.1.100), python3-django-select2 (<< 6), python3-django-import-export (<< 2.6), python3-djangorestframework (<< 3.13), python3-uwsgidecorators
Conflicts: python-authentic2
Replaces: python-authentic2
Homepage: http://dev.entrouvert.org/projects/authentic/
Download-Size: 956 kB
APT-Manual-Installed: yes
APT-Sources: http://deb.entrouvert.org buster/main amd64 Packages
Description: Versatile identity server
 Authentic is a versatile identity provider aiming to address a broad
 range of needs, from simple to complex setups; it has support for many
 protocols and can bridge between them.
 .
 It has support for ID-FF and SAMLv2 thanks to Lasso, a free (GNU GPL)
 implementation of the Liberty Alliance specifications.

root@demo:~# dpkg -l |grep -i django
ii  python-django-common                         1:1.11.29-1~deb10u1                    all          High-level Python web development framework (common)
ii  python3-django                               1:1.11.29-1~deb10u1                    all          High-level Python web development framework (Python 3 version)
ii  python3-django-appconf                       1.0.2-3                                all          helper class handling configuration defaults of apps - Python 3.x
ii  python3-django-filters                       1.1.0-1                                all          filter Django QuerySets based on user selections (Python3 version)
ii  python3-django-import-export                 1.2.0.post2+gbd7e81a-1~eob100+1        all          Django application and library for importing and exporting data
ii  python3-django-mellon                        1.31-1~eob100+1                        all          SAML authentication for Django
ii  python3-django-model-utils                   3.1.1-1                                all          Django model mixins and utilities — Python 3
ii  python3-django-ratelimit                     2.0.0-1~eob100+1                       all          Cache-based rate-limiting for Django
ii  python3-django-select2                       5.10.0-1~eob100+2                      all          Select2 option fields for Django (Python 3)
ii  python3-django-tables2                       1.21.2-1                               all          Table/data-grid framework for Django (Python 3)
ii  python3-djangorestframework                  3.9.0-1                                all          Web APIs for Django, made easy for Python3