PageRenderTime 52ms CodeModel.GetById 17ms RepoModel.GetById 1ms app.codeStats 0ms

/djangosaml2/tests/__init__.py

https://bitbucket.org/Lundberg/djangosaml2
Python | 337 lines | 305 code | 17 blank | 15 comment | 0 complexity | 870b1c1e9e078878088a1df3515f607e MD5 | raw file
Possible License(s): Apache-2.0 
    

  1. # Copyright (C) 2011 Yaco Sistemas (http://www.yaco.es)
    2. 

  2. # Copyright (C) 2010 Lorenzo Gil Sanchez <lorenzo.gil.sanchez@gmail.com>
    3. 

  3. #
    4. 

  4. # Licensed under the Apache License, Version 2.0 (the "License");
    5. 

  5. # you may not use this file except in compliance with the License.
    6. 

  6. # You may obtain a copy of the License at
    7. 

  7. #
    8. 

  8. #            http://www.apache.org/licenses/LICENSE-2.0
    9. 

  9. #
    10. 

  10. # Unless required by applicable law or agreed to in writing, software
    11. 

  11. # distributed under the License is distributed on an "AS IS" BASIS,
    12. 

  12. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13. 

  13. # See the License for the specific language governing permissions and
    14. 

  14. # limitations under the License.
    15. 

  15. 

  16. import datetime
    17. 

  17. import base64
    18. 

  18. import re
    19. 

  19. import urlparse
    20. 

  20. 

  21. from django.conf import settings
    22. 

  22. from django.contrib.auth import SESSION_KEY
    23. 

  23. from django.contrib.auth.models import User
    24. 

  24. from django.test import TestCase
    25. 

  25. 

  26. from saml2.s_utils import decode_base64_and_inflate, deflate_and_base64_encode
    27. 

  27. 

  28. from djangosaml2 import views
    29. 

  29. from djangosaml2.cache import OutstandingQueriesCache
    30. 

  30. from djangosaml2.tests import conf
    31. 

  31. from djangosaml2.tests.auth_response import auth_response
    32. 

  32. from djangosaml2.signals import post_authenticated
    33. 

  33. 

  34. 

  35. class SAML2Tests(TestCase):
    36. 

  36. 

  37.     urls = 'djangosaml2.urls'
    38. 

  38. 

  39.     def assertSAMLRequestsEquals(self, xml1, xml2):
    40. 

  40. 

  41.         def remove_variable_attributes(xml_string):
    42. 

  42.             xml_string = re.sub(r' ID=".*?" ', ' ', xml_string)
    43. 

  43.             xml_string = re.sub(r' IssueInstant=".*?" ', ' ', xml_string)
    44. 

  44.             xml_string = re.sub(
    45. 

  45.                 r'<saml:NameID>.*</saml:NameID>',
    46. 

  46.                 '<saml:NameID></saml:NameID>',
    47. 

  47.                 xml_string)
    48. 

  48.             return xml_string
    49. 

  49. 

  50.         self.assertEquals(remove_variable_attributes(xml1),
    51. 

  51.                           remove_variable_attributes(xml2))
    52. 

  52. 

  53.     def init_cookies(self):
    54. 

  54.         self.client.cookies[settings.SESSION_COOKIE_NAME] = 'testing'
    55. 

  55. 

  56.     def add_outstanding_query(self, session_id, came_from):
    57. 

  57.         session = self.client.session
    58. 

  58.         oq_cache = OutstandingQueriesCache(session)
    59. 

  59.         oq_cache.set(session_id, came_from)
    60. 

  60.         session.save()
    61. 

  61.         self.client.cookies[settings.SESSION_COOKIE_NAME] = session.session_key
    62. 

  62. 

  63.     def test_login_one_idp(self):
    64. 

  64.         # monkey patch SAML configuration
    65. 

  65.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    66. 

  66.                                                 idp_hosts=['idp.example.com'])
    67. 

  67. 

  68.         response = self.client.get('/login/')
    69. 

  69.         self.assertEquals(response.status_code, 302)
    70. 

  70.         location = response['Location']
    71. 

  71. 

  72.         url = urlparse.urlparse(location)
    73. 

  73.         self.assertEquals(url.hostname, 'idp.example.com')
    74. 

  74.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    75. 

  75. 

  76.         params = urlparse.parse_qs(url.query)
    77. 

  77.         self.assert_('SAMLRequest' in params)
    78. 

  78.         self.assert_('RelayState' in params)
    79. 

  79. 

  80.         saml_request = params['SAMLRequest'][0]
    81. 

  81.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    82. 

  82. <samlp:AuthnRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="http://sp.example.com/saml2/acs/" Destination="https://idp.example.com/simplesaml/saml2/idp/SSOService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ProviderName="Test SP" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /></samlp:AuthnRequest>"""
    83. 

  83.         xml = decode_base64_and_inflate(saml_request)
    84. 

  84.         self.assertSAMLRequestsEquals(expected_request, xml)
    85. 

  85. 

  86.         # if we set a next arg in the login view, it is preserverd
    87. 

  87.         # in the RelayState argument
    88. 

  88.         next = '/another-view/'
    89. 

  89.         response = self.client.get('/login/', {'next': next})
    90. 

  90.         self.assertEquals(response.status_code, 302)
    91. 

  91.         location = response['Location']
    92. 

  92. 

  93.         url = urlparse.urlparse(location)
    94. 

  94.         self.assertEquals(url.hostname, 'idp.example.com')
    95. 

  95.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    96. 

  96. 

  97.         params = urlparse.parse_qs(url.query)
    98. 

  98.         self.assert_('SAMLRequest' in params)
    99. 

  99.         self.assert_('RelayState' in params)
    100. 

  100.         self.assertEquals(params['RelayState'][0], next)
    101. 

  101. 

  102.     def test_login_several_idps(self):
    103. 

  103.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    104. 

  104.                                                 idp_hosts=['idp1.example.com',
    105. 

  105.                                                            'idp2.example.com',
    106. 

  106.                                                            'idp3.example.com'])
    107. 

  107. 

  108.         response = self.client.get('/login/')
    109. 

  109.         # a WAYF page should be displayed
    110. 

  110.         self.assertContains(response, 'Where are you from?', status_code=200)
    111. 

  111.         for i in range(1, 4):
    112. 

  112.             link = '/login/?idp=https://idp%d.example.com/simplesaml/saml2/idp/metadata.php&next=/'
    113. 

  113.             self.assertContains(response, link % i)
    114. 

  114. 

  115.         # click on the second idp
    116. 

  116.         response = self.client.get('/login/', {
    117. 

  117.                 'idp': 'https://idp2.example.com/simplesaml/saml2/idp/metadata.php',
    118. 

  118.                 'next': '/',
    119. 

  119.                 })
    120. 

  120.         self.assertEquals(response.status_code, 302)
    121. 

  121.         location = response['Location']
    122. 

  122. 

  123.         url = urlparse.urlparse(location)
    124. 

  124.         self.assertEquals(url.hostname, 'idp2.example.com')
    125. 

  125.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    126. 

  126. 

  127.         params = urlparse.parse_qs(url.query)
    128. 

  128.         self.assert_('SAMLRequest' in params)
    129. 

  129.         self.assert_('RelayState' in params)
    130. 

  130. 

  131.         saml_request = params['SAMLRequest'][0]
    132. 

  132.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    133. 

  133. <samlp:AuthnRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="http://sp.example.com/saml2/acs/" Destination="https://idp2.example.com/simplesaml/saml2/idp/SSOService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ProviderName="Test SP" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /></samlp:AuthnRequest>"""
    134. 

  134.         xml = decode_base64_and_inflate(saml_request)
    135. 

  135.         self.assertSAMLRequestsEquals(expected_request, xml)
    136. 

  136. 

  137.     def test_assertion_consumer_service(self):
    138. 

  138.         # there are no users in the database
    139. 

  139.         self.assertEquals(User.objects.count(), 0)
    140. 

  140. 

  141.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    142. 

  142.                                                 idp_hosts=['idp.example.com'])
    143. 

  143. 

  144.         config = views.config_settings_loader()
    145. 

  145.         # session_id should start with a letter since it is a NCName
    146. 

  146.         session_id = "a0123456789abcdef0123456789abcdef"
    147. 

  147.         came_from = '/another-view/'
    148. 

  148.         saml_response = auth_response({'uid': 'student'}, session_id, config)
    149. 

  149.         self.init_cookies()
    150. 

  150.         self.add_outstanding_query(session_id, came_from)
    151. 

  151. 

  152.         # this will create a user
    153. 

  153.         response = self.client.post('/acs/', {
    154. 

  154.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    155. 

  155.                 'RelayState': came_from,
    156. 

  156.                 })
    157. 

  157.         self.assertEquals(response.status_code, 302)
    158. 

  158.         location = response['Location']
    159. 

  159. 

  160.         url = urlparse.urlparse(location)
    161. 

  161.         self.assertEquals(url.hostname, 'testserver')
    162. 

  162.         self.assertEquals(url.path, came_from)
    163. 

  163. 

  164.         self.assertEquals(User.objects.count(), 1)
    165. 

  165.         user_id = self.client.session[SESSION_KEY]
    166. 

  166.         user = User.objects.get(id=user_id)
    167. 

  167.         self.assertEquals(user.username, 'student')
    168. 

  168. 

  169.         # let's create another user and log in with that one
    170. 

  170.         new_user = User.objects.create(username='teacher', password='not-used')
    171. 

  171. 

  172.         session_id = "a1111111111111111111111111111111"
    173. 

  173.         came_from = '/'
    174. 

  174.         saml_response = auth_response({'uid': 'teacher'}, session_id, config)
    175. 

  175.         self.add_outstanding_query(session_id, came_from)
    176. 

  176.         response = self.client.post('/acs/', {
    177. 

  177.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    178. 

  178.                 'RelayState': came_from,
    179. 

  179.                 })
    180. 

  180.         self.assertEquals(response.status_code, 302)
    181. 

  181.         self.assertEquals(new_user.id, self.client.session[SESSION_KEY])
    182. 

  182. 

  183.     def do_login(self):
    184. 

  184.         """Auxiliary method used in several tests (mainly logout tests)"""
    185. 

  185.         config = views.config_settings_loader()
    186. 

  186.         session_id = "a0123456789abcdef0123456789abcdef"
    187. 

  187.         came_from = '/another-view/'
    188. 

  188.         saml_response = auth_response({'uid': 'student'}, session_id, config)
    189. 

  189.         self.init_cookies()
    190. 

  190.         self.add_outstanding_query(session_id, came_from)
    191. 

  191. 

  192.         # this will create a user
    193. 

  193.         response = self.client.post('/acs/', {
    194. 

  194.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    195. 

  195.                 'RelayState': came_from,
    196. 

  196.                 })
    197. 

  197.         self.assertEquals(response.status_code, 302)
    198. 

  198. 

  199.     def test_logout(self):
    200. 

  200.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    201. 

  201.                                                 idp_hosts=['idp.example.com'])
    202. 

  202. 

  203.         self.do_login()
    204. 

  204. 

  205.         response = self.client.get('/logout/')
    206. 

  206.         self.assertEquals(response.status_code, 302)
    207. 

  207.         location = response['Location']
    208. 

  208. 

  209.         url = urlparse.urlparse(location)
    210. 

  210.         self.assertEquals(url.hostname, 'idp.example.com')
    211. 

  211.         self.assertEquals(url.path,
    212. 

  212.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    213. 

  213. 

  214.         params = urlparse.parse_qs(url.query)
    215. 

  215.         self.assert_('SAMLRequest' in params)
    216. 

  216. 

  217.         saml_request = params['SAMLRequest'][0]
    218. 

  218.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    219. 

  219. <samlp:LogoutRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://sp.example.com/saml2/metadata/</saml:Issuer><saml:NameID>58bcc81ea14700f66aeb707a0eff1360</saml:NameID></samlp:LogoutRequest>"""
    220. 

  220.         xml = decode_base64_and_inflate(saml_request)
    221. 

  221.         self.assertSAMLRequestsEquals(expected_request, xml)
    222. 

  222. 

  223.     def test_logout_service_local(self):
    224. 

  224.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    225. 

  225.                                                 idp_hosts=['idp.example.com'])
    226. 

  226. 

  227.         self.do_login()
    228. 

  228. 

  229.         response = self.client.get('/logout/')
    230. 

  230.         self.assertEquals(response.status_code, 302)
    231. 

  231.         location = response['Location']
    232. 

  232. 

  233.         url = urlparse.urlparse(location)
    234. 

  234.         self.assertEquals(url.hostname, 'idp.example.com')
    235. 

  235.         self.assertEquals(url.path,
    236. 

  236.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    237. 

  237. 

  238.         params = urlparse.parse_qs(url.query)
    239. 

  239.         self.assert_('SAMLRequest' in params)
    240. 

  240. 

  241.         saml_request = params['SAMLRequest'][0]
    242. 

  242.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    243. 

  243. <samlp:LogoutRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://sp.example.com/saml2/metadata/</saml:Issuer><saml:NameID>58bcc81ea14700f66aeb707a0eff1360</saml:NameID></samlp:LogoutRequest>"""
    244. 

  244. 

  245.         xml = decode_base64_and_inflate(saml_request)
    246. 

  246.         self.assertSAMLRequestsEquals(expected_request, xml)
    247. 

  247. 

  248.         # now simulate a logout response sent by the idp
    249. 

  249.         request_id = re.findall(r' ID="(.*?)" ', xml)[0]
    250. 

  250.         instant = datetime.datetime.now().strftime('%Y-%m-%dT%H:%M:%SZ')
    251. 

  251. 

  252.         saml_response = """<?xml version='1.0' encoding='UTF-8'?>
    253. 

  253. <samlp:LogoutResponse xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="http://sp.example.com/saml2/ls/" ID="a140848e7ce2bce834d7264ecdde0151" InResponseTo="%s" IssueInstant="%s" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://idp.example.com/simplesaml/saml2/idp/metadata.php</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status></samlp:LogoutResponse>""" % (
    254. 

  254.             request_id, instant)
    255. 

  255. 

  256.         response = self.client.get('/ls/', {
    257. 

  257.                 'SAMLResponse': deflate_and_base64_encode(saml_response),
    258. 

  258.                 })
    259. 

  259.         self.assertContains(response, "Logged out", status_code=200)
    260. 

  260.         self.assertEquals(self.client.session.keys(), [])
    261. 

  261. 

  262.     def test_logout_service_global(self):
    263. 

  263.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    264. 

  264.                                                 idp_hosts=['idp.example.com'])
    265. 

  265. 

  266.         self.do_login()
    267. 

  267. 

  268.         # now simulate a global logout process initiated by another SP
    269. 

  269.         subject_id = views._get_subject_id(self.client.session)
    270. 

  270.         instant = datetime.datetime.now().strftime('%Y-%m-%dT%H:%M:%SZ')
    271. 

  271.         saml_request = '<samlp:LogoutRequest xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_9961abbaae6d06d251226cb25e38bf8f468036e57e" Version="2.0" IssueInstant="%s" Destination="http://sp.example.com/saml2/ls/"><saml:Issuer>https://idp.example.com/simplesaml/saml2/idp/metadata.php</saml:Issuer><saml:NameID SPNameQualifier="http://sp.example.com/saml2/metadata/" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">%s</saml:NameID><samlp:SessionIndex>_1837687b7bc9faad85839dbeb319627889f3021757</samlp:SessionIndex></samlp:LogoutRequest>' % (
    272. 

  272.             instant, subject_id)
    273. 

  273. 

  274.         response = self.client.get('/ls/', {
    275. 

  275.                 'SAMLRequest': deflate_and_base64_encode(saml_request),
    276. 

  276.                 })
    277. 

  277.         self.assertEquals(response.status_code, 302)
    278. 

  278.         location = response['Location']
    279. 

  279. 

  280.         url = urlparse.urlparse(location)
    281. 

  281.         self.assertEquals(url.hostname, 'idp.example.com')
    282. 

  282.         self.assertEquals(url.path,
    283. 

  283.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    284. 

  284. 

  285.         params = urlparse.parse_qs(url.query)
    286. 

  286.         self.assert_('SAMLResponse' in params)
    287. 

  287. 

  288.         saml_response = params['SAMLResponse'][0]
    289. 

  289.         expected_response = """<?xml version='1.0' encoding='UTF-8'?>
    290. 

  290. <samlp:LogoutResponse xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="a140848e7ce2bce834d7264ecdde0151" InResponseTo="_9961abbaae6d06d251226cb25e38bf8f468036e57e" IssueInstant="2010-09-05T09:10:12Z" Version="2.0"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status></samlp:LogoutResponse>"""
    291. 

  291.         xml = decode_base64_and_inflate(saml_response)
    292. 

  292.         self.assertSAMLRequestsEquals(expected_response, xml)
    293. 

  293. 

  294.     def test_metadata(self):
    295. 

  295.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    296. 

  296.                                                 idp_hosts=['idp.example.com'])
    297. 

  297. 

  298.         valid_until = datetime.datetime.utcnow() + datetime.timedelta(hours=24)
    299. 

  299.         valid_until = valid_until.strftime("%Y-%m-%dT%H:%M:%SZ")
    300. 

  300.         expected_metadata = """<?xml version='1.0' encoding='UTF-8'?>
    301. 

  301. <md:EntityDescriptor xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="http://sp.example.com/saml2/metadata/" validUntil="%s"><md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDPjCCAiYCCQCkHjPQlll+mzANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQGEwJF
    302. 

  302. UzEQMA4GA1UECBMHU2V2aWxsYTEbMBkGA1UEChMSWWFjbyBTaXN0ZW1hcyBTLkwu
    303. 

  303. MRAwDgYDVQQHEwdTZXZpbGxhMREwDwYDVQQDEwh0aWNvdGljbzAeFw0wOTEyMDQx
    304. 

  304. OTQzNTJaFw0xMDEyMDQxOTQzNTJaMGExCzAJBgNVBAYTAkVTMRAwDgYDVQQIEwdT
    305. 

  305. ZXZpbGxhMRswGQYDVQQKExJZYWNvIFNpc3RlbWFzIFMuTC4xEDAOBgNVBAcTB1Nl
    306. 

  306. dmlsbGExETAPBgNVBAMTCHRpY290aWNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
    307. 

  307. MIIBCgKCAQEA7rMOMOaIZ/YYD5hYS6Hpjpovcu4k8gaIY+om9zCxLV5F8BLEfkxo
    308. 

  308. Pk9IA3cRQNRxf7AXCFxEOH3nKy56AIi1gU7X6fCT30JBT8NQlYdgOVMLlR+tjy1b
    309. 

  309. YV07tDa9U8gzjTyKQHgVwH0436+rmSPnacGj3fMwfySTMhtmrJmax0bIa8EB+gY1
    310. 

  310. 77DBtvf8dIZIXLlGMQFloZeUspvHOrgNoEA9xU4E9AanGnV9HeV37zv3mLDUOQLx
    311. 

  311. 4tk9sMQmylCpij7WZmcOV07DyJ/cEmnvHSalBTcyIgkcwlhmjtSgfCy6o5zuWxYd
    312. 

  312. T9ia80SZbWzn8N6B0q+nq23+Oee9H0lvcwIDAQABMA0GCSqGSIb3DQEBBQUAA4IB
    313. 

  313. AQCQBhKOqucJZAqGHx4ybDXNzpPethszonLNVg5deISSpWagy55KlGCi5laio/xq
    314. 

  314. hHRx18eTzeCeLHQYvTQxw0IjZOezJ1X30DD9lEqPr6C+IrmZc6bn/pF76xsvdaRS
    315. 

  315. gduNQPT1B25SV2HrEmbf8wafSlRARmBsyUHh860TqX7yFVjhYIAUF/El9rLca51j
    316. 

  316. ljCIqqvT+klPdjQoZwODWPFHgute2oNRmoIcMjSnoy1+mxOC2Q/j7kcD8/etulg2
    317. 

  317. XDxB3zD81gfdtT8VBFP+G4UrBa+5zFk6fT6U8a7ZqVsyH+rCXAdCyVlEC4Y5fZri
    318. 

  318. ID4zT0FcZASGuthM56rRJJSx
    319. 

  319. </ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://sp.example.com/saml2/ls/" /><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://sp.example.com/saml2/acs/" index="1" /><md:AttributeConsumingService index="1"><md:ServiceName xml:lang="en">Test SP</md:ServiceName><md:RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true" /><md:RequestedAttribute FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false" /></md:AttributeConsumingService></md:SPSSODescriptor><md:Organization><md:OrganizationName xml:lang="es">Ejemplo S.A.</md:OrganizationName><md:OrganizationName xml:lang="en">Example Inc.</md:OrganizationName><md:OrganizationDisplayName xml:lang="es">Ejemplo</md:OrganizationDisplayName><md:OrganizationDisplayName xml:lang="en">Example</md:OrganizationDisplayName><md:OrganizationURL xml:lang="es">http://www.example.es</md:OrganizationURL><md:OrganizationURL xml:lang="en">http://www.example.com</md:OrganizationURL></md:Organization><md:ContactPerson contactType="technical"><md:Company>Example Inc.</md:Company><md:GivenName>Technical givenname</md:GivenName><md:SurName>Technical surname</md:SurName><md:EmailAddress>technical@sp.example.com</md:EmailAddress></md:ContactPerson><md:ContactPerson contactType="administrative"><md:Company>Example Inc.</md:Company><md:GivenName>Administrative givenname</md:GivenName><md:SurName>Administrative surname</md:SurName><md:EmailAddress>administrative@sp.example.ccom</md:EmailAddress></md:ContactPerson></md:EntityDescriptor>"""
    320. 

  320. 

  321.         expected_metadata = expected_metadata % valid_until
    322. 

  322. 

  323.         response = self.client.get('/metadata/')
    324. 

  324.         self.assertEquals(response['Content-type'], 'text/xml; charset=utf8')
    325. 

  325.         self.assertEquals(response.status_code, 200)
    326. 

  326.         self.assertEquals(response.content, expected_metadata)
    327. 

  327. 

  328.     def test_post_authenticated_signal(self):
    329. 

  329. 

  330.         def signal_handler(signal, user, session_info):
    331. 

  331.             self.assertEquals(isinstance(user, User), True)
    332. 

  332. 

  333.         post_authenticated.connect(signal_handler, dispatch_uid='test_signal')
    334. 

  334. 

  335.         self.do_login()
    336. 

  336. 

  337.         post_authenticated.disconnect(dispatch_uid='test_signal')
    338. 

  338.