dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow choosing a saml entityid

Browse Source 
Allows you to pick an entityid when using federation XML data or an MDQ with many entries.  Pysaml2's MDQ metadata is loaded lazily, after you provide a key, so it's necessary to pass the entityid as a key
This commit is contained in:
Tim Nyborg
2018-02-01 14:04:47 +00:00
committed by GitHub
parent 623f3b9947
commit 76f3384aae
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gluon/contrib/login_methods/saml2_auth.py
+9 -5
View File
@@ -104,11 +104,12 @@ def obj2dict(obj, processed=None):
types.BuiltinFunctionType, types.BuiltinFunctionType,
types.BuiltinMethodType)) types.BuiltinMethodType))
def saml2_handler(session, request, config_filename = None): def saml2_handler(session, request, config_filename = None, entityid = None):
config_filename = config_filename or os.path.join(request.folder,'private','sp_conf') config_filename = config_filename or os.path.join(request.folder,'private','sp_conf')
client = Saml2Client(config_file = config_filename) client = Saml2Client(config_file = config_filename)
idps = client.metadata.with_descriptor("idpsso") if not entityid:
entityid = idps.keys()[0] idps = client.metadata.with_descriptor("idpsso")
entityid = idps.keys()[0]
bindings = [BINDING_HTTP_REDIRECT, BINDING_HTTP_POST] bindings = [BINDING_HTTP_REDIRECT, BINDING_HTTP_POST]
binding, destination = client.pick_binding( binding, destination = client.pick_binding(
"single_sign_on_service", bindings, "idpsso", entity_id=entityid) "single_sign_on_service", bindings, "idpsso", entity_id=entityid)
@@ -145,7 +146,7 @@ class Saml2Auth(object):
username=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0], username=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0],
email=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0], email=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0],
user_id=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0], user_id=lambda v:v['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'][0],
), logout_url=None, change_password_url=None): ), logout_url=None, change_password_url=None, entityid=None):
self.config_file = config_file self.config_file = config_file
self.maps = maps self.maps = maps
@@ -154,9 +155,12 @@ class Saml2Auth(object):
# URL to let users change their password in the IDP system # URL to let users change their password in the IDP system
self.saml_change_password_url = change_password_url self.saml_change_password_url = change_password_url
# URL to specify an IDP if using federation metadata or an MDQ
self.entityid = entityid
def login_url(self, next="/"): def login_url(self, next="/"):
d = saml2_handler(current.session, current.request) d = saml2_handler(current.session, current.request, entityid=self.entityid)
if 'url' in d: if 'url' in d:
redirect(d['url']) redirect(d['url'])
elif 'error' in d: elif 'error' in d: