1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
# Copyright (C) 2015 Ipsilon project Contributors, for licensee see COPYING
import sys
sys.stdout = sys.stderr
import cherrypy
import os
import pwd
from openid.consumer import consumer
from openid.extensions import sreg, ax
from openid_teams import teams
class OpenIDApp(object):
def index(self, extensions):
self.extensions = extensions == 'YES'
oidconsumer = consumer.Consumer(dict(), None)
try:
request = oidconsumer.begin('http://127.0.0.10:45080/idp1/')
except Exception as ex:
return 'ERROR: %s' % ex
if request is None:
return 'ERROR: No request'
# Attach extensions here
if self.extensions:
request.addExtension(sreg.SRegRequest(
required=['nickname', 'email', 'timezone']))
ax_req = ax.FetchRequest()
ax_req_name = ax.AttrInfo('http://schema.openid.net/namePerson')
ax_req.add(ax_req_name)
request.addExtension(ax_req)
username = pwd.getpwuid(os.getuid())[0]
request.addExtension(teams.TeamsRequest(requested=[username]))
# Build and send final request
trust_root = cherrypy.url()
return_to = trust_root + 'finish'
if request.shouldSendRedirect():
redirect_url = request.redirectURL(
trust_root, return_to)
raise cherrypy.HTTPRedirect(redirect_url)
else:
return request.htmlMarkup(
trust_root, return_to)
index.exposed = True
def finish(self, **args):
oidconsumer = consumer.Consumer(dict(), None)
info = oidconsumer.complete(cherrypy.request.params, cherrypy.url())
display_identifier = info.getDisplayIdentifier()
if info.status == consumer.FAILURE and display_identifier:
return 'ERROR:Verification of %s failed: %s' % (
display_identifier, info.message)
elif info.status == consumer.CANCEL:
return 'ERROR: Cancelled'
elif info.status == consumer.SUCCESS:
username = pwd.getpwuid(os.getuid())[0]
expected_identifier = 'http://127.0.0.10:45080/idp1/openid/id/%s/'\
% username
if expected_identifier != display_identifier:
return 'ERROR: Wrong id returned: %s != %s' % (
expected_identifier,
display_identifier)
if self.extensions:
sreg_resp = sreg.SRegResponse.fromSuccessResponse(info)
teams_resp = teams.TeamsResponse.fromSuccessResponse(info)
ax_resp = ax.FetchResponse.fromSuccessResponse(info)
if sreg_resp is None:
return 'ERROR: No sreg!'
elif teams_resp is None:
return 'ERROR: No teams!'
elif ax_resp is None:
return 'ERROR: No AX!'
# Check values
expected_name = 'Test User %s' % username
expected_email = '%s@example.com' % username
ax_name = ax_resp.data[
'http://schema.openid.net/namePerson'][0]
sreg_email = sreg_resp.data['email']
if ax_name != expected_name:
return 'ERROR: Wrong name returned: %s != %s' % (
expected_name,
ax_name)
if sreg_email != expected_email:
return 'ERROR: Wrong email returned: %s != %s' % (
expected_email,
sreg_email)
if username not in teams_resp.teams:
return 'ERROR: User not in self-named group (%s not in %s)' %\
(username, teams_resp.teams)
if self.extensions:
return 'SUCCESS, WITH EXTENSIONS'
else:
return 'SUCCESS, WITHOUT EXTENSIONS'
else:
return 'ERROR: Strange error: %s' % info.message
finish.exposed = True
cherrypy.config['environment'] = 'embedded'
application = cherrypy.Application(OpenIDApp(),
script_name=None, config=None)
|
