Synnefo

[

    {

        "model": "aai.PithosUser",

        "pk": 1,

        "fields": {

            "uniq": "test",

            "auth_token": "0000",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 2,

        "fields": {

            "uniq": "verigak",

            "auth_token": "0001",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 3,

        "fields": {

            "uniq": "chazapis",

            "auth_token": "0002",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 4,

        "fields": {

            "uniq": "gtsouk",

            "auth_token": "0003",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 5,

        "fields": {

            "uniq": "papagian",

            "auth_token": "0004",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 6,

        "fields": {

            "uniq": "louridas",

            "auth_token": "0005",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 7,

        "fields": {

            "uniq": "chstath",

            "auth_token": "0006",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 8,

        "fields": {

            "uniq": "pkanavos",

            "auth_token": "0007",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    },

    {

        "model": "aai.PithosUser",

        "pk": 9,

        "fields": {

            "uniq": "mvasilak",

            "auth_token": "0008",

            "auth_token_created": "2011-04-07 09:17:14",

            "auth_token_expires": "2015-04-07 09:17:14",

            "created": "2011-02-06"

   	    }

    }

]

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from time import time, mktime

from django.conf import settings

from django.http import HttpResponse, HttpResponseRedirect

from django.utils.cache import patch_vary_headers

from models import PithosUser

from shibboleth import Tokens, register_shibboleth_user

def login(request):

    return HttpResponse('login')

#     # Special case for testing purposes, delivers the cookie for the

#     # test user on first access

#     if settings.BYPASS_AUTHENTICATION and \

#        request.GET.get('test') is not None:

#         u = PithosUser.objects.get(

#             auth_token='46e427d657b20defe352804f0eb6f8a2')

#         return _redirect_shib_auth_user(user = u)

# 

#     token = None

# 

#     # Try to find token in a cookie

#     token = request.COOKIES.get('X-Auth-Token', None)

# 

#     # Try to find token in request header

#     if not token:

#         token = request.META.get('HTTP_X_AUTH_TOKEN', None)

# 

#     if token:

#         # token was found, retrieve user from backing store

#         try:

#             user = PithosUser.objects.get(auth_token=token)

# 

#         except PithosUser.DoesNotExist:

#             return HttpResponseRedirect(settings.LOGIN_URL)

#         # check user's auth token validity

#         if (time() - mktime(user.auth_token_expires.timetuple())) > 0:

#             # the user's token has expired, prompt to re-login

#             return HttpResponseRedirect(settings.LOGIN_URL)

# 

#         request.user = user

#         return

# 

#     # token was not found but user authenticated by Shibboleth

#     if Tokens.SHIB_EPPN in request.META and \

#        Tokens.SHIB_SESSION_ID in request.META:

#         try:

#             user = PithosUser.objects.get(uniq=request.META[Tokens.SHIB_EPPN])

#             return _redirect_shib_auth_user(user)

#         except PithosUser.DoesNotExist:

#             if register_shibboleth_user(request.META):

#                 user = PithosUser.objects.get(uniq=request.META[Tokens.SHIB_EPPN])

#                 return _redirect_shib_auth_user(user)

#             else:

#                 return HttpResponseRedirect(settings.LOGIN_URL)

# 

#     if settings.TEST and 'TEST-AAI' in request.META:

#         return HttpResponseRedirect(settings.LOGIN_URL)

# 

#     if request.path.endswith(settings.LOGIN_URL):

#         # avoid redirect loops

#         return

#     else:

#         # no authentication info found in headers, redirect back

#         return HttpResponseRedirect(settings.LOGIN_URL)

# 

# def process_response(request, response):

#     # Tell proxies and other interested parties that the request varies

#     # based on X-Auth-Token, to avoid caching of results

#     patch_vary_headers(response, ('X-Auth-Token',))

#     return response

# 

# def _redirect_shib_auth_user(user):

#     expire_fmt = user.auth_token_expires.strftime('%a, %d-%b-%Y %H:%M:%S %Z')

# 

#     response = HttpResponse()

#     response.set_cookie('X-Auth-Token', value=user.auth_token,

#                         expires=expire_fmt, path='/')

#     response['X-Auth-Token'] = user.auth_token

#     response['Location'] = settings.APP_INSTALL_URL

#     response.status_code = 302

#     return response

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from django.db import models

from pithos import settings

class PithosUser(models.Model):

    uniq = models.CharField('Unique ID', max_length=255, null=True)

    realname = models.CharField('Real Name', max_length=255, default='')

    affiliation = models.CharField('Affiliation', max_length=255, default='')

    quota = models.IntegerField('Storage Limit', default=settings.DEFAULT_QUOTA)

    auth_token = models.CharField('Authentication Token', max_length=32, null=True)

    auth_token_created = models.DateTimeField('Time of auth token creation', auto_now_add=True)

    auth_token_expires = models.DateTimeField('Time of auth token expiration', auto_now_add=True)

    created = models.DateTimeField('Time of creation', auto_now_add=True)

    updated = models.DateTimeField('Time of last update', auto_now=True)

    class Meta:

        verbose_name = u'Pithos User'

    def __unicode__(self):

        return self.uniq

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from util import register_user

class Tokens:

    # these are mapped by the Shibboleth SP software

    SHIB_EPPN = "eppn" # eduPersonPrincipalName

    SHIB_NAME = "Shib-InetOrgPerson-givenName"

    SHIB_SURNAME = "Shib-Person-surname"

    SHIB_CN = "Shib-Person-commonName"

    SHIB_DISPLAYNAME = "Shib-InetOrgPerson-displayName"

    SHIB_EP_AFFILIATION = "Shib-EP-Affiliation"

    SHIB_SESSION_ID = "Shib-Session-ID"

class NoUniqueToken(BaseException):

    def __init__(self, msg):

        self.msg = msg

class NoRealName(BaseException):

    def __init__(self, msg):

        self.msg = msg

def register_shibboleth_user(tokens):

    """Registers a Shibboleth user using the input hash as a source for data."""

    try:

        eppn = tokens[Tokens.SHIB_EPPN]

    except KeyError:

        raise NoUniqueToken("Authentication does not return a unique token")

    if Tokens.SHIB_DISPLAYNAME in tokens:

        realname = tokens[Tokens.SHIB_DISPLAYNAME]

    elif Tokens.SHIB_CN in tokens:

        realname = tokens[Tokens.SHIB_CN]

    elif Tokens.SHIB_NAME in tokens and Tokens.SHIB_SURNAME in tokens:

        realname = tokens[Tokens.SHIB_NAME] + ' ' + tokens[Tokens.SHIB_SURNAME]

    else:

        raise NoRealName("Authentication does not return the user's name")

    affiliation = tokens.get(Tokens.SHIB_EP_AFFILIATION, '')

    register_user(eppn, realname, affiliation)

    return True

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

# Business Logic for working with users

from hashlib import md5

from time import asctime

from datetime import datetime, timedelta

from django.conf import settings

from django.db import transaction

from models import PithosUser

@transaction.commit_on_success

def register_user(uniq, realname, affiliation):

    user = PithosUser()

    user.uniq = uniq

    user.realname = realname

    user.affiliation = affiliation

    user.save()

    create_auth_token(user)

    return user

@transaction.commit_on_success

def delete_user(user):

    if user is not None:

        user.delete()

@transaction.commit_on_success

def create_auth_token(user):

    md5 = md5()

    md5.update(user.uniq)

    md5.update(user.realname.encode('ascii', 'ignore'))

    md5.update(asctime())

    user.auth_token = md5.hexdigest()

    user.auth_token_created = datetime.now()

    user.auth_token_expires = user.auth_token_created + \

                              timedelta(hours=settings.AUTH_TOKEN_DURATION)

    user.save()

from log import LoggingConfigMiddleware

from auth import AuthMiddleware

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from time import time, mktime

from django.conf import settings

from pithos.aai.models import PithosUser

class AuthMiddleware(object):

    def process_request(self, request):

        request.user = None

        # Try to find token in a cookie, in a request header, or as a parameter.

        token = request.COOKIES.get('X-Auth-Token', None)

        if not token:

            token = request.META.get('HTTP_X_AUTH_TOKEN', None)

        if not token:

            token = request.REQUEST.get('X-Auth-Token', None)

        if not token:

            return

        # Token was found, retrieve user from backing store.

        try:

            user = PithosUser.objects.get(auth_token=token)

        except:

            return

        # Check if the token has expired.

        if (time() - mktime(user.auth_token_expires.timetuple())) > 0:

            return

        request.user = user.uniq

# Copyright 2011 GRNET S.A. All rights reserved.

# 

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

# 

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

# 

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

# 

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

# 

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from django.conf import settings

from django.core.exceptions import MiddlewareNotUsed

import logging

class LoggingConfigMiddleware:

    def __init__(self):

        '''Initialise the logging setup from settings, called on first request.'''

        if getattr(settings, 'DEBUG', False):

            logging.basicConfig(level = logging.DEBUG, format = '%(asctime)s [%(levelname)s] %(name)s %(message)s', datefmt = '%Y-%m-%d %H:%M:%S')

        else:

            logging.basicConfig(level = logging.INFO, format = '%(asctime)s [%(levelname)s] %(name)s %(message)s', datefmt = '%Y-%m-%d %H:%M:%S')

        raise MiddlewareNotUsed('Logging setup only.')

#    'django.contrib.sessions.middleware.SessionMiddleware',

#    'django.contrib.auth.middleware.AuthenticationMiddleware',

#    'django.contrib.messages.middleware.MessageMiddleware',

    'pithos.middleware.AuthMiddleware'

#    'django.contrib.auth',

#    'django.contrib.contenttypes',

#    'django.contrib.sessions',

#    'django.contrib.sites',

#    'django.contrib.messages',

    'pithos.aai',

# Set the expiration time of newly created auth tokens

# to be this many hours after their creation time.

AUTH_TOKEN_DURATION = 30 * 24

# Default quota for new users.

DEFAULT_QUOTA = 10 * 1024 * 1024 * 1024

    (r'^login(?:$|/)', 'pithos.aai.functions.login')