From a646a755cf82722c6c2c21cc2ae8e24e53d78892 Mon Sep 17 00:00:00 2001
From: Massimo Di Pierro <massimo.dipierro@gmail.com>
Date: Sat, 4 Feb 2012 10:13:36 -0600
Subject: [PATCH] gluon/contrib/login_methods/browserid_account.py, thanks Pai

---
 VERSION                                       |  2 +-
 .../login_methods/browserid_account.py        | 90 +++++++++++++++++++
 2 files changed, 91 insertions(+), 1 deletion(-)
 create mode 100644 gluon/contrib/login_methods/browserid_account.py

diff --git a/VERSION b/VERSION
index 087aea73..fcddf5cf 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-Version 1.99.4 (2012-02-04 10:07:28) stable
+Version 1.99.4 (2012-02-04 10:13:29) stable
diff --git a/gluon/contrib/login_methods/browserid_account.py b/gluon/contrib/login_methods/browserid_account.py
new file mode 100644
index 00000000..519119ba
--- /dev/null
+++ b/gluon/contrib/login_methods/browserid_account.py
@@ -0,0 +1,90 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+"""
+    BrowserID Authentication for web2py
+    developed by Madhukar R Pai (Copyright © 2011)
+    Email <madspai@gmail.com>
+    License : LGPL
+    
+    thanks and credits to the web2py community
+    
+    This custom authenticator allows web2py to authenticate using browserid (https://browserid.org/)
+    BrowserID is a project by Mozilla Labs (http://mozillalabs.com/)
+    to Know how browserid works please visit http://identity.mozilla.com/post/7616727542/introducing-browserid-a-better-way-to-sign-in
+    
+    bottom line BrowserID provides a free, secure, de-centralized, easy to use(for users and developers) login solution.
+    You can use any email id as your login id. Browserid just verifys the email id and lets you login with that id.
+    
+    credits for the doPost jquery function - itsadok (http://stackoverflow.com/users/7581/itsadok)
+    
+"""
+import time
+from gluon import *
+from gluon.storage import Storage
+from gluon.tools import fetch
+import gluon.contrib.simplejson as json
+
+class BrowserID(object):
+    """
+    from gluon.contrib.login_methods.browserid_account import BrowserID
+    auth.settings.login_form = BrowserID(request,
+        audience = "http://127.0.0.1:8000"
+        assertion_post_url = "http://127.0.0.1:8000/%s/default/user/login" % request.application)
+    """
+    
+    def __init__(self,
+                request,
+                audience = "",
+                assertion_post_url = "",
+                prompt = "BrowserID Login",
+                issuer = "browserid.org",
+                verify_url = "https://browserid.org/verify",
+                browserid_js = "https://browserid.org/include.js",
+                browserid_button = "http://browserid.org.cn/css/sign_in_red.png",
+                crypto_js = "https://crypto-js.googlecode.com/files/2.2.0-crypto-md5.js",
+                on_login_failure = None,
+                ):
+                
+        self.request = request
+        self.audience = audience
+        self.assertion_post_url = assertion_post_url
+        self.prompt = prompt
+        self.issuer = issuer
+        self.verify_url = verify_url
+        self.browserid_js = browserid_js
+        self.browserid_button = browserid_button
+        self.crypto_js = crypto_js
+        self.on_login_failure = on_login_failure
+        self.asertion_js = """
+            (function($){$.extend({doPost:function(url,params){var $form=$("<form method='POST'>").attr("action",url);
+            $.each(params,function(name,value){$("<input type='hidden'>").attr("name",name).attr("value",value).appendTo($form)});
+            $form.appendTo("body");$form.submit()}})})(jQuery);
+            function gotVerifiedEmail(assertion){if(assertion !== null){$.doPost('%s',{'assertion':assertion});}}""" % self.assertion_post_url
+
+    def get_user(self):
+        request = self.request
+        if request.vars.assertion: 
+            audience = self.audience
+            issuer = self.issuer
+            assertion = XML(request.vars.assertion,sanitize=True)
+            verify_data = {'assertion':assertion,'audience':audience}
+            auth_info_json = fetch(self.verify_url,data=verify_data)
+            j = json.loads(auth_info_json) 
+            epoch_time = int(time.time()*1000) # we need 13 digit epoch time
+            if j["status"] == "okay" and j["audience"] == audience and j['issuer'] == issuer and j['expires'] >= epoch_time:
+                return dict(email = j['email'])
+            elif self.on_login_failure:
+                redirect('http://google.com')
+            else:
+                redirect('http://google.com')
+        return None
+
+    def login_form(self):
+        request = self.request
+        onclick = "javascript:navigator.id.getVerifiedEmail(gotVerifiedEmail) ; return false"
+        form = DIV(SCRIPT(_src=self.browserid_js,_type="text/javascript"),
+            SCRIPT(_src=self.crypto_js,_type="text/javascript"),
+            A(IMG(_src=self.browserid_button,_alt=self.prompt),_href="#",_onclick=onclick,_class="browserid",_title="Login With BrowserID"),
+            SCRIPT(self.asertion_js))
+        return form