Produits Entr'ouvert » Larpe

import sys

from quixote import get_response, redirect

from quixote.directory import Directory

from quixote.errors import TraversalError

import admin

import liberty

import saml2

import errors

import logger

import misc

import template

from form import *

from users import User

class LibertySite(Directory):

    _q_exports = ["", "login", "logout", "liberty"]

    liberty = liberty.Liberty()

    def __init__(self, component):

        self.name = component

    def _q_index(self):

        return 'todo'

    def login [html] (self):

        logger.info('login')

        idps = misc.cfg.get('idp', {})

#        if len(idps) == 0:

        return template.error_page(_('SSO support is not yet configured'))

        if len(idps) == 1 or len([x for x in idps.values() if not x.get('hide', False)]) == 1:

            # if there is only one visible IdP, perform login automatically on

            # this one.

            server = misc.get_lasso_server('liberty')

            if (server is None):

                # Get a templated page instead

                return _("This site doesn't exist or doesn't have SSO support")

            for x in server.providerIds:

                key_provider_id = x.replace(str('://'), str('-')).replace(str('/'), str('-'))

                if not idps.get(key_provider_id, {}).get('hide', False):

                    return self.liberty.perform_login(x)

            server = misc.get_lasso_server('saml2')

            for x in server.providerIds:

                key_provider_id = x.replace(str('://'), str('-')).replace(str('/'), str('-'))

                if not idps.get(key_provider_id, {}).get('hide', False):

                    return self.saml.perform_login(x)

        form = Form(enctype='multipart/form-data')

        options = []

        # XXX: use intro cookie to get preferred value

        value = None

        providers = {}

        for kidp, idp in misc.cfg.get('idp', {}).items():

            if idp.get('hide'):

                continue

            p = lasso.Provider(lasso.PROVIDER_ROLE_IDP,

                    misc.get_abs_path(idp['metadata']),

                    misc.get_abs_path(idp['publickey']), None)

            providers[p.providerId] = p

        include_protocol = True

        if len([x for x in providers.values() if 

                x.getProtocolConformance() == lasso.PROTOCOL_SAML_2_0]) in (0, len(providers)):

            include_protocol = False

        for p in providers.values():

            label = misc.get_provider_label(p)

            if include_protocol:

                if p.getProtocolConformance() == lasso.PROTOCOL_SAML_2_0:

                    label = '%s (SAML 2.0)' % label

                else:

                    label = '%s (Liberty ID-FF 1.2)' % label

            options.append((p.providerId, label))

            if not value:

                value = p.providerId

        form.add(RadiobuttonsWidget, 'idp', value = value, options = options, delim = '<br/>')

        form.add_submit('submit', _('Submit'))

        if form.is_submitted() and not form.has_errors():

            idp = form.get_widget('idp').parse()

            p = providers[form.get_widget('idp').parse()]

            if p.getProtocolConformance() == lasso.PROTOCOL_SAML_2_0:

                return self.saml.perform_login(idp)

            else:

                return self.liberty.perform_login(idp)

        template.html_top(_('Login'))

        '<p>%s</p>' % _('Select the identity provider you want to use.')

        form.render()

    def logout(self):

        logger.info('logout')

        session = get_session()

        if not session:

            return redirect('/')

        # add settings to disable single logout?

        #   (and to set it as none/get/soap?)

        return self.liberty.singleLogout()

    def defederate(self):

        logger.info('defederate')

        session = get_session()

        if not session:

            return redirect('/')

        idps = misc.cfg.get('idp', {})

        if len(idps) == 0:

            return template.error_page(_('SSO support is not yet configured'))

        if len(idps) == 1 or len([x for x in idps.values() if not x.get('hide', False)]) == 1:

            # if there is only one visible IdP, perform login automatically on

            # this one.

            server = misc.get_lasso_server('liberty')

            if (server is None):

                # Get a templated page instead

                return _("This site doesn't exist or doesn't have SSO support")

            for x in server.providerIds:

                key_provider_id = x.replace(str('://'), str('-')).replace(str('/'), str('-'))

                if not idps.get(key_provider_id, {}).get('hide', False):

                    return self.liberty.defederate(x)