70 lines
2.4 KiB
Python
70 lines
2.4 KiB
Python
# ⁻*- coding: utf-8 -*-
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT
|
|
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
# FOR A PARTICULAR PURPOSE. See the GNU General Public License version 3 for
|
|
# more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License version 3
|
|
# along with this program; if not, write to the Free Software Foundation, Inc., 51
|
|
# Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
#
|
|
# (c) 2015 Valentin Samir
|
|
from .default_settings import settings
|
|
|
|
from .cas import CASClient
|
|
from .models import FederatedUser
|
|
|
|
|
|
class CASFederateValidateUser(object):
|
|
username = None
|
|
attributs = {}
|
|
client = None
|
|
|
|
def __init__(self, provider, service_url):
|
|
self.provider = provider
|
|
|
|
if provider in settings.CAS_FEDERATE_PROVIDERS:
|
|
(server_url, version) = settings.CAS_FEDERATE_PROVIDERS[provider]
|
|
self.client = CASClient(
|
|
service_url=service_url,
|
|
version=version,
|
|
server_url=server_url,
|
|
extra_login_params={"provider": provider},
|
|
renew=False,
|
|
)
|
|
|
|
def get_login_url(self):
|
|
return self.client.get_login_url() if self.client is not None else False
|
|
|
|
def get_logout_url(self, redirect_url=None):
|
|
return self.client.get_logout_url(redirect_url) if self.client is not None else False
|
|
|
|
def verify_ticket(self, ticket):
|
|
"""test `password` agains the user"""
|
|
if self.client is None:
|
|
return False
|
|
username, attributs, pgtiou = self.client.verify_ticket(ticket)
|
|
if username is not None:
|
|
attributs["provider"] = self.provider
|
|
self.username = username
|
|
self.attributs = attributs
|
|
try:
|
|
user = FederatedUser.objects.get(
|
|
username=username,
|
|
provider=self.provider
|
|
)
|
|
user.attributs = attributs
|
|
user.ticket = ticket
|
|
user.save()
|
|
except FederatedUser.DoesNotExist:
|
|
user = FederatedUser.objects.create(
|
|
username=username,
|
|
provider=self.provider,
|
|
attributs=attributs,
|
|
ticket=ticket
|
|
)
|
|
user.save()
|
|
return True
|
|
else:
|
|
return False
|