UnivNautes

# -*- coding: utf-8 -*-

#

# UnivNautes

# Copyright (C) 2014  Entr'ouvert

#

# This program is free software: you can redistribute it and/or modify it under

# the terms of the GNU Affero General Public License as published by the Free

# Software Foundation, either version 3 of the License, or (at your option) any

# later version.

#

# This program is distributed in the hope that it will be useful, but WITHOUT

# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS

# FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more

# details.

#

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import os

import sys

import re

import xml.etree.ElementTree as ET

from operator import itemgetter

from django.conf import settings

def root():

    with open(settings.CONFIG_XML,'r') as f:

        x = ET.fromstring(f.read())

    return x

def laxint(s):

    try:

        return int(s)

    except:

        return 0

def get_ca(caref):

    for ca in root().findall('ca'):

        if ca.find('refid').text == caref:

            crt = ca.find('crt')

            if crt is not None:

                crt = crt.text.decode('base64')

            prv = ca.find('prv')

            if prv is not None:

                prv = prv.text.decode('base64')

            return {

                    'caref': caref,

                    'crt': crt,

                    'prv': prv,

                    }

    return None

def get_cert(certref):

    for cert in root().findall('cert'):

        if cert.find('refid').text == certref:

            crt = cert.find('crt')

            if crt is not None:

                crt = crt.text.decode('base64')

            prv = cert.find('prv')

            if prv is not None:

                prv = prv.text.decode('base64')

            caref = cert.find('caref')

            if caref is not None:

                caref = caref.text

            descr = cert.find('descr')

            if descr is not None:

                descr = descr.text

            return {

                    'certref': caref,

                    'descr': descr,

                    'caref': caref,

                    'crt': crt,

                    'prv': prv,

                    }

    return None

def get_saml_cps():

    '''

    returns a list of captive portal with SAML auth_method

    '''

    xml_cps = root().find('captiveportal')

    if xml_cps is None:

        return []

    cps = []

    for xml_cp in xml_cps:

        name = xml_cp.tag

        if xml_cp.find('enable') is None:

            continue

        auth = xml_cp.find('auth_method')

        if auth is None or auth.text != 'saml':

            continue

        auth = auth.text

        timeout = xml_cp.find('timeout')

        if timeout is not None:

            timeout = laxint(timeout.text)

        else:

            timeout = 0

        idletimeout = xml_cp.find('idletimeout')

        if idletimeout is not None:

            idletimeout = laxint(idletimeout.text)

        else:

            idletimeout = 0

        httpsname = xml_cp.find('httpsname')

        if httpsname is not None:

            httpsname = httpsname.text

        cps.append({

            'name': name,

            'httpsname': httpsname,

            'auth_method': auth,

            'timeout': timeout,

            'idletimeout': idletimeout,

            })

        cps.sort(cps, key=itemgetter('name'))

    return cps

def get_sp():

    sp = root().find('univnautes/sp')

    if sp is None:

        return None

    certref = sp.find('certref')

    if certref is not None:

        saml_cert = get_cert(certref.text)

    else:

        saml_cert = None

    defaultidps = sp.find('defaultidps')

    if defaultidps is None:

        defaultidps = []

    else:

        defaultidps = defaultidps.text or ''

        defaultidps = defaultidps.decode('base64').decode('iso-8859-1').splitlines()

        defaultidps = [ l for l in defaultidps if not re.match('^\s*$', l) ]

    geolocations = sp.find('geolocations')

    if geolocations is None:

        geolocations = []

    else:

        geolocations = geolocations.text or ''

        geolocations = geolocations.decode('base64').decode('iso-8859-1').splitlines()

        geolocations = [ l for l in geolocations if not re.match('^\s*$', l) ]

    geoinitialbounds = sp.find('geoinitialbounds')

    if geoinitialbounds is not None:

        geoinitialbounds = geoinitialbounds.text

    cps = get_saml_cps()

    if cps:

        cp = cps[0]

    else:

        cp = {}

    return { 'saml_cert': saml_cert,

            'cp': cp,

            'ui': {

                'defaultidps': defaultidps,

                'geolocations': geolocations,

                'geoinitialbounds': geoinitialbounds,

                },

            }