X-Git-Url: https://git.mdrn.pl/django-cas-provider.git/blobdiff_plain/b012d252975d36d17a2368bd0ee79088a2407bb0..654b8af23c49ae6cc48a3ce826caabddc2b9dc61:/cas_provider/models.py?ds=sidebyside diff --git a/cas_provider/models.py b/cas_provider/models.py index 5d09912..8306d3c 100644 --- a/cas_provider/models.py +++ b/cas_provider/models.py @@ -1,41 +1,99 @@ -from django.db import models from django.contrib.auth.models import User -from django.conf import settings -from django.core.urlresolvers import get_callable +from django.db import models +from django.utils.translation import ugettext_lazy as _ +from random import Random +import string +import urllib +import urlparse -from cas_provider.etree import etree, register_namespace, ElementRoot +if hasattr(urlparse, 'parse_qs'): + parse_qs = urlparse.parse_qs +else: + # Python <2.6 compatibility + from cgi import parse_qs + +__all__ = ['ServiceTicket', 'LoginTicket', 'ProxyGrantingTicket', 'ProxyTicket', 'ProxyGrantingTicketIOU'] + +class BaseTicket(models.Model): + ticket = models.CharField(_('ticket'), max_length=32) + created = models.DateTimeField(_('created'), auto_now=True) + + class Meta: + abstract = True + + def __init__(self, *args, **kwargs): + if 'ticket' not in kwargs: + kwargs['ticket'] = self._generate_ticket() + super(BaseTicket, self).__init__(*args, **kwargs) -class ServiceTicket(models.Model): - user = models.ForeignKey(User) - service = models.URLField(verify_exists=False) - ticket = models.CharField(max_length=256) - created = models.DateTimeField(auto_now=True) - - def __unicode__(self): - return "%s (%s) - %s" % (self.user.username, self.service, self.created) - -class LoginTicket(models.Model): - ticket = models.CharField(max_length=32) - created = models.DateTimeField(auto_now=True) - def __unicode__(self): - return "%s - %s" % (self.ticket, self.created) - -CAS_URI = 'http://www.yale.edu/tp/cas' -register_namespace('cas', CAS_URI) -CAS = '{%s}' % CAS_URI - -def auth_success_response(user): - attrs = {} - if settings.CAS_CUSTOM_ATTRIBUTES_CALLBACK: - callback = get_callable(settings.CAS_CUSTOM_ATTRIBUTES_CALLBACK) - attrs = callback(user) - - response = ElementRoot(CAS + 'serviceResponse') - auth_success = etree.SubElement(response, CAS + 'authenticationSuccess') - username = etree.SubElement(auth_success, CAS + 'user') - username.text = user.username - for name, value in attrs.items(): - element = etree.SubElement(auth_success, name) - element.text = value - return unicode(etree.tostring(response, encoding='utf-8'), 'utf-8') + return self.ticket + + def _generate_ticket(self, length=ticket.max_length, chars=string.ascii_letters + string.digits): + """ Generates a random string of the requested length. Used for creation of tickets. """ + return u"%s-%s" % (self.prefix, ''.join(Random().sample(chars, length - (len(self.prefix) + 1)))) + + +class ServiceTicket(BaseTicket): + user = models.ForeignKey(User, verbose_name=_('user')) + service = models.URLField(_('service'), verify_exists=False) + + prefix = 'ST' + + class Meta: + verbose_name = _('Service Ticket') + verbose_name_plural = _('Service Tickets') + + def get_redirect_url(self): + parsed = urlparse.urlparse(self.service) + query = parse_qs(parsed.query) + query['ticket'] = [self.ticket] + query = [((k, v) if len(v) > 1 else (k, v[0])) for k, v in query.iteritems()] + parsed = urlparse.ParseResult(parsed.scheme, parsed.netloc, + parsed.path, parsed.params, + urllib.urlencode(query), parsed.fragment) + return parsed.geturl() + + +class LoginTicket(BaseTicket): + prefix = 'LT' + + class Meta: + verbose_name = _('Login Ticket') + verbose_name_plural = _('Login Tickets') + + +class ProxyGrantingTicket(BaseTicket): + serviceTicket = models.ForeignKey(ServiceTicket, null=True) + pgtiou = models.CharField(max_length=256, verbose_name=_('PGTiou')) + prefix = 'PGT' + + def __init__(self, *args, **kwargs): + if 'pgtiou' not in kwargs: + kwargs['pgtiou'] = u"PGTIOU-%s" % (''.join(Random().sample(string.ascii_letters + string.digits, 50))) + super(ProxyGrantingTicket, self).__init__(*args, **kwargs) + + class Meta: + verbose_name = _('Proxy Granting Ticket') + verbose_name_plural = _('Proxy Granting Tickets') + + +class ProxyTicket(ServiceTicket): + proxyGrantingTicket = models.ForeignKey(ProxyGrantingTicket, verbose_name=_('Proxy Granting Ticket')) + + prefix = 'PT' + + class Meta: + verbose_name = _('Proxy Ticket') + verbose_name_plural = _('Proxy Tickets') + + +class ProxyGrantingTicketIOU(BaseTicket): + proxyGrantingTicket = models.ForeignKey(ProxyGrantingTicket, verbose_name=_('Proxy Granting Ticket')) + + prefix = 'PGTIOU' + + class Meta: + verbose_name = _('Proxy Granting Ticket IOU') + verbose_name_plural = _('Proxy Granting Tickets IOU') +