Statistics
| Branch: | Tag: | Revision:

root / snf-astakos-app / astakos / im / target / shibboleth.py @ dda2e499

History | View | Annotate | Download (4.9 kB)

1
# Copyright 2011-2012 GRNET S.A. All rights reserved.
2
# 
3
# Redistribution and use in source and binary forms, with or
4
# without modification, are permitted provided that the following
5
# conditions are met:
6
# 
7
#   1. Redistributions of source code must retain the above
8
#      copyright notice, this list of conditions and the following
9
#      disclaimer.
10
# 
11
#   2. Redistributions in binary form must reproduce the above
12
#      copyright notice, this list of conditions and the following
13
#      disclaimer in the documentation and/or other materials
14
#      provided with the distribution.
15
# 
16
# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS
17
# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
19
# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR
20
# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
21
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
22
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
23
# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
24
# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
26
# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
27
# POSSIBILITY OF SUCH DAMAGE.
28
# 
29
# The views and conclusions contained in the software and
30
# documentation are those of the authors and should not be
31
# interpreted as representing official policies, either expressed
32
# or implied, of GRNET S.A.
33

    
34
from django.http import HttpResponseBadRequest
35
from django.utils.translation import ugettext as _
36
from django.contrib import messages
37
from django.template import RequestContext
38
from django.forms.models import inlineformset_factory
39
from django.views.decorators.http import require_http_methods
40

    
41
from astakos.im.util import prepare_response, get_context, get_invitation
42
from astakos.im.views import requires_anonymous, render_response
43
from astakos.im.settings import DEFAULT_USER_LEVEL
44
from astakos.im.models import AstakosUser, Invitation, AdditionalMail
45
from astakos.im.forms import LoginForm
46
from astakos.im.activation_backends import get_backend, SimpleBackend
47

    
48
class Tokens:
49
    # these are mapped by the Shibboleth SP software
50
    SHIB_EPPN = "HTTP_EPPN" # eduPersonPrincipalName
51
    SHIB_NAME = "HTTP_SHIB_INETORGPERSON_GIVENNAME"
52
    SHIB_SURNAME = "HTTP_SHIB_PERSON_SURNAME"
53
    SHIB_CN = "HTTP_SHIB_PERSON_COMMONNAME"
54
    SHIB_DISPLAYNAME = "HTTP_SHIB_INETORGPERSON_DISPLAYNAME"
55
    SHIB_EP_AFFILIATION = "HTTP_SHIB_EP_AFFILIATION"
56
    SHIB_SESSION_ID = "HTTP_SHIB_SESSION_ID"
57
    SHIB_MAIL = "HTTP_SHIB_MAIL"
58

    
59
@require_http_methods(["GET", "POST"])
60
@requires_anonymous
61
def login(request,  backend=None, on_login_template='im/login.html', on_creation_template='im/third_party_registration.html', extra_context={}):
62
    tokens = request.META
63
    
64
    try:
65
        eppn = tokens[Tokens.SHIB_EPPN]
66
    except KeyError:
67
        return HttpResponseBadRequest("Missing unique token in request")
68
    
69
    if Tokens.SHIB_DISPLAYNAME in tokens:
70
        realname = tokens[Tokens.SHIB_DISPLAYNAME]
71
    elif Tokens.SHIB_CN in tokens:
72
        realname = tokens[Tokens.SHIB_CN]
73
    elif Tokens.SHIB_NAME in tokens and Tokens.SHIB_SURNAME in tokens:
74
        realname = tokens[Tokens.SHIB_NAME] + ' ' + tokens[Tokens.SHIB_SURNAME]
75
    else:
76
        return HttpResponseBadRequest("Missing user name in request")
77
    
78
    affiliation = tokens.get(Tokens.SHIB_EP_AFFILIATION, '')
79
    email = tokens.get(Tokens.SHIB_MAIL, None)
80
    
81
    try:
82
        user = AstakosUser.objects.get(provider='shibboleth', third_party_identifier=eppn)
83
        if user.is_active:
84
            return prepare_response(request,
85
                                    user,
86
                                    request.GET.get('next'),
87
                                    'renew' in request.GET)
88
        else:
89
            message = _('Inactive account')
90
            messages.add_message(request, messages.ERROR, message)
91
            return render_response(on_login_template,
92
                                   login_form = LoginForm(request=request),
93
                                   context_instance=RequestContext(request))
94
    except AstakosUser.DoesNotExist, e:
95
        user = AstakosUser(third_party_identifier=eppn, realname=realname,
96
                           affiliation=affiliation, provider='shibboleth',
97
                           email=email)
98
        try:
99
            if not backend:
100
                backend = get_backend(request)
101
            form = backend.get_signup_form(provider='shibboleth', instance=user)
102
        except Exception, e:
103
            form = SimpleBackend(request).get_signup_form(provider='shibboleth', instance=user)
104
            messages.add_message(request, messages.ERROR, e)
105
        return render_response(on_creation_template,
106
                               signup_form = form,
107
                               provider = 'shibboleth',
108
                               context_instance=get_context(request, extra_context))