Synnefo

    auth_key   = "X-Auth-Key"

    def process_request(self, request):

        if self.auth_token in request.META:

            user = None

            #Retrieve user from DB or other caching mechanism

            try:

                user = SynnefoUser.objects.get(auth_token = request.META[self.auth_token])

            except SynnefoUser.DoesNotExist:

            #Check user's auth token

            if (time.time() -

                time.mktime(user.auth_token_created.timetuple()) +

                settings.AUTH_TOKEN_DURATION * 3600) > 0:

                #The user's token has expired, re-login

            request.user = user

            return

        #A user authenticated by Shibboleth, must include a uniq id

            #We must somehow make sure that we only process

            #SIB headers when coming from a URL whitelist,

            #or a similar form of restriction

            user = None

            try:

                user = SynnefoUser.objects.get(

            except SynnefoUser.DoesNotExist:

                pass

                #Attempt to register the incoming user

                if register_shibboleth_user(request.META):

                    user = SynnefoUser.objects.get(

                    response = HttpResponse()

                    response[self.auth_token] = user.auth_token

                    response.status_code = 302

                    return response

                else:

            #User and authentication token valid, user allowed to proceed

            return

        if settings.TEST:

            if 'TEST-AAI' in request.META:

        else:

            #Avoid redirect loops

            else :

                #No authentication info found in headers, redirect to Shibboleth

    def process_response(self, request, response):

        #Tell proxies and other interested parties that the

        #caching of results

        response['Vary'] = self.auth_token

        return response

from synnefo.logic import users

class Tokens:

    SIB_DISPLAY_NAME = "displayName"

    SIB_EDU_PERSON_AFFILIATION = "shib_ep_primaryaffiliation"

    SIB_SCHAC_PERSONAL_UNIQUE_CODE = "schacPersonalUniqueCode"

    SIB_GR_EDU_PERSON_UNDERGRADUATE_BRANCH = "grEduPersonUndergraduateBranch"

       http://aai.grnet.gr/policy

    """

    realname = None

    is_student = Tokens.SIB_SCHAC_PERSONAL_UNIQUE_CODE in tokens or \

                 Tokens.SIB_GR_EDU_PERSON_UNDERGRADUATE_BRANCH in tokens

    if unq is None:

        raise NoUniqueToken("Authentication does not return a unique token")

    else:

        users.register_professor(realname, '' ,unq)

# to its resources. Thus, it needs to know its public URL.

API_ROOT_URL = 'http://127.0.0.1:8000/api/'

SHIBBOLETH_WHITELIST = {

    'localhost' : '127.0.0.1',