Add tests for double ticket validation.

[django-cas-provider.git] / cas_provider / models.py

diff --git a/cas_provider/models.py b/cas_provider/models.py
index eae9cf6..43463d5 100644 (file)
--- a/cas_provider/models.py
+++ b/cas_provider/models.py
@@ -1,41 +1,100 @@
-from django.db import models
-from django.contrib.auth.models import User
 from django.conf import settings
-from django.core.urlresolvers import get_callable
+from django.db import models
+from django.utils.translation import ugettext_lazy as _
+from random import Random
+import string
+try:
+    from urllib.parse import urlencode, urlparse, parse_qs, ParseResult
+except ImportError:
+    from urllib import urlencode
+    from urlparse import urlparse, ParseResult
+    try:
+        from urlparse import parse_qs
+    except: # Python <2.6 compatibility
+        from cgi import parse_qs
 
-from cas_provider.xml import etree, register_namespace, ElementRoot
+__all__ = ['ServiceTicket', 'LoginTicket', 'ProxyGrantingTicket', 'ProxyTicket', 'ProxyGrantingTicketIOU']
+
+class BaseTicket(models.Model):
+    ticket = models.CharField(_('ticket'), max_length=32)
+    created = models.DateTimeField(_('created'), auto_now=True)
+
+    class Meta:
+        abstract = True
+
+    def __init__(self, *args, **kwargs):
+        if 'ticket' not in kwargs:
+            kwargs['ticket'] = self._generate_ticket()
+        super(BaseTicket, self).__init__(*args, **kwargs)
 
-class ServiceTicket(models.Model):
-    user = models.ForeignKey(User)
-    service = models.URLField(verify_exists=False)
-    ticket = models.CharField(max_length=256)
-    created = models.DateTimeField(auto_now=True)
-    
-    def __unicode__(self):
-        return "%s (%s) - %s" % (self.user.username, self.service, self.created)
-        
-class LoginTicket(models.Model):
-    ticket = models.CharField(max_length=32)
-    created = models.DateTimeField(auto_now=True)
-    
     def __unicode__(self):
-        return "%s - %s" % (self.ticket, self.created)
-
-CAS_URI = 'http://www.yale.edu/tp/cas'
-register_namespace('cas', CAS_URI)
-CAS = '{%s}' % CAS_URI
-
-def auth_success_response(user):
-    attrs = {}
-    if settings.CAS_CUSTOM_ATTRIBUTES_CALLBACK:
-        callback = get_callable(settings.CAS_CUSTOM_ATTRIBUTES_CALLBACK)
-        attrs = callback(user)
-    
-    response = ElementRoot(CAS + 'serviceResponse')
-    auth_success = etree.SubElement(response, CAS + 'authenticationSuccess')
-    username = etree.SubElement(auth_success, CAS + 'user')
-    username.text = user.username
-    for name, value in attrs.items():
-        element = etree.SubElement(auth_success, name)
-        element.text = value
-    return unicode(etree.tostring(response, encoding='utf-8'), 'utf-8')
+        return self.ticket
+
+    def _generate_ticket(self, length=ticket.max_length, chars=string.ascii_letters + string.digits):
+        """ Generates a random string of the requested length. Used for creation of tickets. """
+        return u"%s-%s" % (self.prefix, ''.join(Random().sample(chars, length - (len(self.prefix) + 1))))
+
+
+class ServiceTicket(BaseTicket):
+    user = models.ForeignKey(settings.AUTH_USER_MODEL, verbose_name=_('user'))
+    service = models.URLField(_('service'))
+
+    prefix = 'ST'
+
+    class Meta:
+        verbose_name = _('Service Ticket')
+        verbose_name_plural = _('Service Tickets')
+
+    def get_redirect_url(self):
+        parsed = urlparse(self.service)
+        query = parse_qs(parsed.query)
+        query['ticket'] = [self.ticket]
+        query = [((k, v) if len(v) > 1 else (k, v[0])) for k, v in query.items()]
+        parsed = ParseResult(parsed.scheme, parsed.netloc,
+                                      parsed.path, parsed.params,
+                                      urlencode(query), parsed.fragment)
+        return parsed.geturl()
+
+
+class LoginTicket(BaseTicket):
+    prefix = 'LT'
+
+    class Meta:
+        verbose_name = _('Login Ticket')
+        verbose_name_plural = _('Login Tickets')
+
+
+class ProxyGrantingTicket(BaseTicket):
+    serviceTicket = models.ForeignKey(ServiceTicket, null=True)
+    pgtiou = models.CharField(max_length=256, verbose_name=_('PGTiou'))
+    prefix = 'PGT'
+
+    def __init__(self, *args, **kwargs):
+        if 'pgtiou' not in kwargs:
+            kwargs['pgtiou'] = u"PGTIOU-%s" % (''.join(Random().sample(string.ascii_letters + string.digits, 50)))
+        super(ProxyGrantingTicket, self).__init__(*args, **kwargs)
+
+    class Meta:
+        verbose_name = _('Proxy Granting Ticket')
+        verbose_name_plural = _('Proxy Granting Tickets')
+
+
+class ProxyTicket(ServiceTicket):
+    proxyGrantingTicket = models.ForeignKey(ProxyGrantingTicket, verbose_name=_('Proxy Granting Ticket'))
+
+    prefix = 'PT'
+
+    class Meta:
+        verbose_name = _('Proxy Ticket')
+        verbose_name_plural = _('Proxy Tickets')
+
+
+class ProxyGrantingTicketIOU(BaseTicket):
+    proxyGrantingTicket = models.ForeignKey(ProxyGrantingTicket, verbose_name=_('Proxy Granting Ticket'))
+
+    prefix = 'PGTIOU'
+
+    class Meta:
+        verbose_name = _('Proxy Granting Ticket IOU')
+        verbose_name_plural = _('Proxy Granting Tickets IOU')
+