import logging
logger = logging.getLogger('cas_provider.views')
-import urllib
-from urllib import urlencode
-import urllib2
-import urlparse
+from urllib.error import HTTPError, URLError
+from urllib.parse import parse_qsl, urlencode, urlparse, urlsplit, urlunsplit
+from urllib.request import urlopen
from functools import wraps
-from django.utils.decorators import available_attrs
from django.views.decorators.debug import sensitive_post_parameters
from django.views.decorators.cache import cache_control
from django.utils.cache import patch_cache_control
from django.http import HttpResponse, HttpResponseRedirect
from django.conf import settings
from django.contrib.auth import login as auth_login, logout as auth_logout
-from django.core.urlresolvers import get_callable
-from django.shortcuts import render_to_response
-from django.utils.translation import ugettext as _
+
+from django.shortcuts import render
+from django.utils.translation import gettext as _
from django.template import RequestContext
from django.contrib.auth import authenticate
-from django.core.urlresolvers import reverse
from lxml import etree
from cas_provider.attribute_formatters import NSMAP, CAS
from . import signals
+from django.urls import get_callable, reverse
+
__all__ = ['login', 'validate', 'logout', 'service_validate']
INVALID_TICKET = 'INVALID_TICKET'
INTERNAL_ERROR = 'INTERNAL_ERROR'
ERROR_MESSAGES = (
- (INVALID_TICKET, u'The provided ticket is invalid.'),
- (INVALID_SERVICE, u'Service is invalid'),
- (INVALID_REQUEST, u'Not all required parameters were sent.'),
- (INTERNAL_ERROR, u'An internal error occurred during ticket validation'),
+ (INVALID_TICKET, 'The provided ticket is invalid.'),
+ (INVALID_SERVICE, 'Service is invalid'),
+ (INVALID_REQUEST, 'Not all required parameters were sent.'),
+ (INTERNAL_ERROR, 'An internal error occurred during ticket validation'),
)
Decorator that adds headers to a response so that it will
never be cached.
"""
- @wraps(view_func, assigned=available_attrs(view_func))
+ @wraps(view_func)
def _wrapped_view_func(request, *args, **kwargs):
response = view_func(request, *args, **kwargs)
patch_cache_control(response, no_cache=True,
)
if service is not None:
args['service'] = service
- args = urllib.urlencode(args)
+ args = urlencode(args)
url = '%s?%s' % (base_url, args)
logging.debug('Redirecting to %s', url)
else:
form = LoginForm(initial={'service': service})
- if user is not None and user.is_authenticated():
+ if user is not None and user.is_authenticated:
# We have an authenticated user.
if not user.is_active:
errors.append(_('This account is disabled. Please contact us if you feel it should be enabled again.'))
return HttpResponseRedirect(success_redirect)
else:
if request.GET.get('warn', False):
- return render_to_response(warn_template_name, {
+ return render(request, warn_template_name, {
'service': service,
'warn': False
- }, context_instance=RequestContext(request))
+ })
# Create a service ticket and redirect to the service.
ticket = ServiceTicket.objects.create(service=service, user=user)
return HttpResponseRedirect(url)
logging.debug('Rendering response on %s, merge is %s', template_name, merge)
- return render_to_response(template_name, {'form': form, 'errors': errors}, context_instance=RequestContext(request))
+ return render(request, template_name, {'form': form, 'errors': errors})
@never_cache
def logout(request, template_name='cas/logout.html',
auto_redirect=settings.CAS_AUTO_REDIRECT_AFTER_LOGOUT):
url = request.GET.get('url', None)
- if request.user.is_authenticated():
+ if request.user.is_authenticated:
for ticket in ServiceTicket.objects.filter(user=request.user):
ticket.delete()
auth_logout(request)
if url and auto_redirect:
return HttpResponseRedirect(url)
- return render_to_response(template_name, {'url': url},
- context_instance=RequestContext(request))
+ return render(request, template_name, {'url': url})
@never_cache
return _cas2_error_response(INVALID_TICKET)
pt = ProxyTicket.objects.create(proxyGrantingTicket=proxyGrantingTicket,
- user=proxyGrantingTicket.serviceTicket.user,
+ user=proxyGrantingTicket.user,
service=targetService)
return _cas2_proxy_success(pt.ticket)
except ServiceTicket.DoesNotExist:
return _cas2_error_response(INVALID_TICKET)
- ticketUrl = urlparse.urlparse(ticket.service)
- serviceUrl = urlparse.urlparse(service)
+ ticketUrl = urlparse(ticket.service)
+ serviceUrl = urlparse(service)
if not(ticketUrl.hostname == serviceUrl.hostname and ticketUrl.path == serviceUrl.path and ticketUrl.port == serviceUrl.port):
return _cas2_error_response(INVALID_SERVICE)
if pgt:
pgtIouId = pgt.pgtiou
- if hasattr(ticket, 'proxyticket'):
- pgt = ticket.proxyticket.proxyGrantingTicket
+ try:
+ proxyTicket = ticket.proxyticket
+ except ProxyTicket.DoesNotExist:
+ pass
+ else:
+ pgt = proxyTicket.proxyGrantingTicket
# I am issued by this proxy granting ticket
- if hasattr(pgt.serviceTicket, 'proxyticket'):
- while pgt:
- if hasattr(pgt.serviceTicket, 'proxyticket'):
- proxies += (pgt.serviceTicket.service,)
- pgt = pgt.serviceTicket.proxyticket.proxyGrantingTicket
- else:
- pgt = None
+ while pgt.pgt is not None:
+ proxies += (pgt.service,)
+ pgt = pgt.pgt
user = ticket.user
ticket.delete()
def generate_proxy_granting_ticket(pgt_url, ticket):
proxy_callback_good_status = (200, 202, 301, 302, 304)
- uri = list(urlparse.urlsplit(pgt_url))
+ uri = list(urlsplit(pgt_url))
pgt = ProxyGrantingTicket()
- pgt.serviceTicket = ticket
- pgt.targetService = pgt_url
-
- if hasattr(ticket, 'proxyGrantingTicket'):
- # here we got a proxy ticket! tata!
- pgt.pgt = ticket.proxyGrantingTicket
+ pgt.user = ticket.user
+ pgt.service = ticket.service
+ # Remember if it's a chained PGT.
+ pgt.pgt = getattr(ticket, 'proxyGrantingTicket', None)
params = {'pgtId': pgt.ticket, 'pgtIou': pgt.pgtiou}
- query = dict(urlparse.parse_qsl(uri[4]))
+ query = dict(parse_qsl(uri[4]))
query.update(params)
uri[3] = urlencode(query)
try:
- urllib2.urlopen(urlparse.urlunsplit(uri))
- except urllib2.HTTPError as e:
+ urlopen(urlunsplit(uri))
+ except HTTPError as e:
if not e.code in proxy_callback_good_status:
- logger.debug('Checking Proxy Callback URL {} returned {}. Not issuing PGT.'.format(uri, e.code))
+ logger.debug('Checking Proxy Callback URL {0} returned {1}. Not issuing PGT.'.format(uri, e.code))
return
- except urllib2.URLError as e:
- logger.debug('Checking Proxy Callback URL {} raised URLError. Not issuing PGT.'.format(uri))
+ except URLError as e:
+ logger.debug('Checking Proxy Callback URL {0} raised URLError. Not issuing PGT.'.format(uri))
return
pgt.save()
def _cas2_error_response(code, message=None):
- return HttpResponse(u'''<cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas">
+ return HttpResponse('''<cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas">
<cas:authenticationFailure code="%(code)s">
%(message)s
</cas:authenticationFailure>
proxySuccess = etree.SubElement(response, CAS + 'proxySuccess')
proxyTicket = etree.SubElement(proxySuccess, CAS + 'proxyTicket')
proxyTicket.text = pt
- return unicode(etree.tostring(response, encoding='utf-8'), 'utf-8')
+ return etree.tostring(response, encoding='unicode')
def auth_success_response(user, pgt, proxies):
proxyElement = etree.SubElement(proxiesElement, CAS + "proxy")
proxyElement.text = proxy
- return unicode(etree.tostring(response, encoding='utf-8'), 'utf-8')
+ return etree.tostring(response, encoding='unicode')
fnp / django-cas-provider.git / blobdiff