PageRenderTime 26ms CodeModel.GetById 21ms RepoModel.GetById 1ms app.codeStats 0ms

/djangosaml2/tests/__init__.py

https://bitbucket.org/leifj/djangosaml2
Python | 417 lines | 384 code | 18 blank | 15 comment | 0 complexity | 230bc7a64413e368840f02de376b65d2 MD5 | raw file
Possible License(s): Apache-2.0 
    

  1. # Copyright (C) 2011 Yaco Sistemas (http://www.yaco.es)
    2. 

  2. # Copyright (C) 2010 Lorenzo Gil Sanchez <lorenzo.gil.sanchez@gmail.com>
    3. 

  3. #
    4. 

  4. # Licensed under the Apache License, Version 2.0 (the "License");
    5. 

  5. # you may not use this file except in compliance with the License.
    6. 

  6. # You may obtain a copy of the License at
    7. 

  7. #
    8. 

  8. #            http://www.apache.org/licenses/LICENSE-2.0
    9. 

  9. #
    10. 

  10. # Unless required by applicable law or agreed to in writing, software
    11. 

  11. # distributed under the License is distributed on an "AS IS" BASIS,
    12. 

  12. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13. 

  13. # See the License for the specific language governing permissions and
    14. 

  14. # limitations under the License.
    15. 

  15. 

  16. import datetime
    17. 

  17. import base64
    18. 

  18. import re
    19. 

  19. import urlparse
    20. 

  20. 

  21. from django.conf import settings
    22. 

  22. from django.contrib.auth import SESSION_KEY
    23. 

  23. from django.contrib.auth.models import User
    24. 

  24. from django.core.management import call_command
    25. 

  25. from django.db.models import loading
    26. 

  26. from django.template import Template, Context
    27. 

  27. from django.test import TestCase
    28. 

  28. 

  29. from saml2.s_utils import decode_base64_and_inflate, deflate_and_base64_encode
    30. 

  30. 

  31. from djangosaml2 import views
    32. 

  32. from djangosaml2.backends import Saml2Backend
    33. 

  33. from djangosaml2.cache import OutstandingQueriesCache
    34. 

  34. from djangosaml2.conf import get_config_loader
    35. 

  35. from djangosaml2.tests import conf
    36. 

  36. from djangosaml2.tests.auth_response import auth_response
    37. 

  37. from djangosaml2.tests.models import TestProfile
    38. 

  38. from djangosaml2.signals import post_authenticated
    39. 

  39. 

  40. 

  41. class SAML2Tests(TestCase):
    42. 

  42. 

  43.     urls = 'djangosaml2.urls'
    44. 

  44. 

  45.     def assertSAMLRequestsEquals(self, xml1, xml2):
    46. 

  46. 

  47.         def remove_variable_attributes(xml_string):
    48. 

  48.             xml_string = re.sub(r' ID=".*?" ', ' ', xml_string)
    49. 

  49.             xml_string = re.sub(r' IssueInstant=".*?" ', ' ', xml_string)
    50. 

  50.             xml_string = re.sub(
    51. 

  51.                 r'<saml:NameID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">.*</saml:NameID>',
    52. 

  52.                 '<saml:NameID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"></saml:NameID>',
    53. 

  53.                 xml_string)
    54. 

  54.             return xml_string
    55. 

  55. 

  56.         self.assertEquals(remove_variable_attributes(xml1),
    57. 

  57.                           remove_variable_attributes(xml2))
    58. 

  58. 

  59.     def init_cookies(self):
    60. 

  60.         self.client.cookies[settings.SESSION_COOKIE_NAME] = 'testing'
    61. 

  61. 

  62.     def add_outstanding_query(self, session_id, came_from):
    63. 

  63.         session = self.client.session
    64. 

  64.         oq_cache = OutstandingQueriesCache(session)
    65. 

  65.         oq_cache.set(session_id, came_from)
    66. 

  66.         session.save()
    67. 

  67.         self.client.cookies[settings.SESSION_COOKIE_NAME] = session.session_key
    68. 

  68. 

  69.     def render_template(self, text):
    70. 

  70.         return Template(text).render(Context())
    71. 

  71. 

  72.     def test_login_one_idp(self):
    73. 

  73.         # monkey patch SAML configuration
    74. 

  74.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    75. 

  75.                                                 idp_hosts=['idp.example.com'])
    76. 

  76. 

  77.         response = self.client.get('/login/')
    78. 

  78.         self.assertEquals(response.status_code, 302)
    79. 

  79.         location = response['Location']
    80. 

  80. 

  81.         url = urlparse.urlparse(location)
    82. 

  82.         self.assertEquals(url.hostname, 'idp.example.com')
    83. 

  83.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    84. 

  84. 

  85.         params = urlparse.parse_qs(url.query)
    86. 

  86.         self.assert_('SAMLRequest' in params)
    87. 

  87.         self.assert_('RelayState' in params)
    88. 

  88. 

  89.         saml_request = params['SAMLRequest'][0]
    90. 

  90.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    91. 

  91. <samlp:AuthnRequest AssertionConsumerServiceURL="http://sp.example.com/saml2/acs/" Destination="https://idp.example.com/simplesaml/saml2/idp/SSOService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ProviderName="Test SP" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /></samlp:AuthnRequest>"""
    92. 

  92.         xml = decode_base64_and_inflate(saml_request)
    93. 

  93.         self.assertSAMLRequestsEquals(expected_request, xml)
    94. 

  94. 

  95.         # if we set a next arg in the login view, it is preserverd
    96. 

  96.         # in the RelayState argument
    97. 

  97.         next = '/another-view/'
    98. 

  98.         response = self.client.get('/login/', {'next': next})
    99. 

  99.         self.assertEquals(response.status_code, 302)
    100. 

  100.         location = response['Location']
    101. 

  101. 

  102.         url = urlparse.urlparse(location)
    103. 

  103.         self.assertEquals(url.hostname, 'idp.example.com')
    104. 

  104.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    105. 

  105. 

  106.         params = urlparse.parse_qs(url.query)
    107. 

  107.         self.assert_('SAMLRequest' in params)
    108. 

  108.         self.assert_('RelayState' in params)
    109. 

  109.         self.assertEquals(params['RelayState'][0], next)
    110. 

  110. 

  111.     def test_login_several_idps(self):
    112. 

  112.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    113. 

  113.                                                 idp_hosts=['idp1.example.com',
    114. 

  114.                                                            'idp2.example.com',
    115. 

  115.                                                            'idp3.example.com'])
    116. 

  116. 

  117.         response = self.client.get('/login/')
    118. 

  118.         # a WAYF page should be displayed
    119. 

  119.         self.assertContains(response, 'Where are you from?', status_code=200)
    120. 

  120.         for i in range(1, 4):
    121. 

  121.             link = '/login/?idp=https://idp%d.example.com/simplesaml/saml2/idp/metadata.php&next=/'
    122. 

  122.             self.assertContains(response, link % i)
    123. 

  123. 

  124.         # click on the second idp
    125. 

  125.         response = self.client.get('/login/', {
    126. 

  126.                 'idp': 'https://idp2.example.com/simplesaml/saml2/idp/metadata.php',
    127. 

  127.                 'next': '/',
    128. 

  128.                 })
    129. 

  129.         self.assertEquals(response.status_code, 302)
    130. 

  130.         location = response['Location']
    131. 

  131. 

  132.         url = urlparse.urlparse(location)
    133. 

  133.         self.assertEquals(url.hostname, 'idp2.example.com')
    134. 

  134.         self.assertEquals(url.path, '/simplesaml/saml2/idp/SSOService.php')
    135. 

  135. 

  136.         params = urlparse.parse_qs(url.query)
    137. 

  137.         self.assert_('SAMLRequest' in params)
    138. 

  138.         self.assert_('RelayState' in params)
    139. 

  139. 

  140.         saml_request = params['SAMLRequest'][0]
    141. 

  141.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    142. 

  142. <samlp:AuthnRequest AssertionConsumerServiceURL="http://sp.example.com/saml2/acs/" Destination="https://idp2.example.com/simplesaml/saml2/idp/SSOService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ProviderName="Test SP" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /></samlp:AuthnRequest>"""
    143. 

  143.         xml = decode_base64_and_inflate(saml_request)
    144. 

  144.         self.assertSAMLRequestsEquals(expected_request, xml)
    145. 

  145. 

  146.     def test_assertion_consumer_service(self):
    147. 

  147.         # there are no users in the database
    148. 

  148.         self.assertEquals(User.objects.count(), 0)
    149. 

  149. 

  150.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    151. 

  151.                                                 idp_hosts=['idp.example.com'])
    152. 

  152. 

  153.         config = get_config_loader(views.DEFAULT_CONFIG_LOADER)
    154. 

  154.         # session_id should start with a letter since it is a NCName
    155. 

  155.         session_id = "a0123456789abcdef0123456789abcdef"
    156. 

  156.         came_from = '/another-view/'
    157. 

  157.         saml_response = auth_response({'uid': 'student'}, session_id, config)
    158. 

  158.         self.init_cookies()
    159. 

  159.         self.add_outstanding_query(session_id, came_from)
    160. 

  160. 

  161.         # this will create a user
    162. 

  162.         response = self.client.post('/acs/', {
    163. 

  163.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    164. 

  164.                 'RelayState': came_from,
    165. 

  165.                 })
    166. 

  166.         self.assertEquals(response.status_code, 302)
    167. 

  167.         location = response['Location']
    168. 

  168. 

  169.         url = urlparse.urlparse(location)
    170. 

  170.         self.assertEquals(url.hostname, 'testserver')
    171. 

  171.         self.assertEquals(url.path, came_from)
    172. 

  172. 

  173.         self.assertEquals(User.objects.count(), 1)
    174. 

  174.         user_id = self.client.session[SESSION_KEY]
    175. 

  175.         user = User.objects.get(id=user_id)
    176. 

  176.         self.assertEquals(user.username, 'student')
    177. 

  177. 

  178.         # let's create another user and log in with that one
    179. 

  179.         new_user = User.objects.create(username='teacher', password='not-used')
    180. 

  180. 

  181.         session_id = "a1111111111111111111111111111111"
    182. 

  182.         came_from = '/'
    183. 

  183.         saml_response = auth_response({'uid': 'teacher'}, session_id, config)
    184. 

  184.         self.add_outstanding_query(session_id, came_from)
    185. 

  185.         response = self.client.post('/acs/', {
    186. 

  186.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    187. 

  187.                 'RelayState': came_from,
    188. 

  188.                 })
    189. 

  189.         self.assertEquals(response.status_code, 302)
    190. 

  190.         self.assertEquals(new_user.id, self.client.session[SESSION_KEY])
    191. 

  191. 

  192.     def do_login(self):
    193. 

  193.         """Auxiliary method used in several tests (mainly logout tests)"""
    194. 

  194.         config = get_config_loader(views.DEFAULT_CONFIG_LOADER)
    195. 

  195.         session_id = "a0123456789abcdef0123456789abcdef"
    196. 

  196.         came_from = '/another-view/'
    197. 

  197.         saml_response = auth_response({'uid': 'student'}, session_id, config)
    198. 

  198.         self.init_cookies()
    199. 

  199.         self.add_outstanding_query(session_id, came_from)
    200. 

  200. 

  201.         # this will create a user
    202. 

  202.         response = self.client.post('/acs/', {
    203. 

  203.                 'SAMLResponse': base64.b64encode(str(saml_response)),
    204. 

  204.                 'RelayState': came_from,
    205. 

  205.                 })
    206. 

  206.         self.assertEquals(response.status_code, 302)
    207. 

  207. 

  208.     def test_logout(self):
    209. 

  209.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    210. 

  210.                                                 idp_hosts=['idp.example.com'])
    211. 

  211. 

  212.         self.do_login()
    213. 

  213. 

  214.         response = self.client.get('/logout/')
    215. 

  215.         self.assertEquals(response.status_code, 302)
    216. 

  216.         location = response['Location']
    217. 

  217. 

  218.         url = urlparse.urlparse(location)
    219. 

  219.         self.assertEquals(url.hostname, 'idp.example.com')
    220. 

  220.         self.assertEquals(url.path,
    221. 

  221.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    222. 

  222. 

  223.         params = urlparse.parse_qs(url.query)
    224. 

  224.         self.assert_('SAMLRequest' in params)
    225. 

  225. 

  226.         saml_request = params['SAMLRequest'][0]
    227. 

  227.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    228. 

  228. <samlp:LogoutRequest Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://sp.example.com/saml2/metadata/</saml:Issuer><saml:NameID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">58bcc81ea14700f66aeb707a0eff1360</saml:NameID></samlp:LogoutRequest>"""
    229. 

  229.         xml = decode_base64_and_inflate(saml_request)
    230. 

  230.         self.assertSAMLRequestsEquals(expected_request, xml)
    231. 

  231. 

  232.     def test_logout_service_local(self):
    233. 

  233.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    234. 

  234.                                                 idp_hosts=['idp.example.com'])
    235. 

  235. 

  236.         self.do_login()
    237. 

  237. 

  238.         response = self.client.get('/logout/')
    239. 

  239.         self.assertEquals(response.status_code, 302)
    240. 

  240.         location = response['Location']
    241. 

  241. 

  242.         url = urlparse.urlparse(location)
    243. 

  243.         self.assertEquals(url.hostname, 'idp.example.com')
    244. 

  244.         self.assertEquals(url.path,
    245. 

  245.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    246. 

  246. 

  247.         params = urlparse.parse_qs(url.query)
    248. 

  248.         self.assert_('SAMLRequest' in params)
    249. 

  249. 

  250.         saml_request = params['SAMLRequest'][0]
    251. 

  251.         expected_request = """<?xml version='1.0' encoding='UTF-8'?>
    252. 

  252. <samlp:LogoutRequest Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="XXXXXXXXXXXXXXXXXXXXXX" IssueInstant="2010-01-01T00:00:00Z" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://sp.example.com/saml2/metadata/</saml:Issuer><saml:NameID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">58bcc81ea14700f66aeb707a0eff1360</saml:NameID></samlp:LogoutRequest>"""
    253. 

  253. 

  254.         xml = decode_base64_and_inflate(saml_request)
    255. 

  255.         self.assertSAMLRequestsEquals(expected_request, xml)
    256. 

  256. 

  257.         # now simulate a logout response sent by the idp
    258. 

  258.         request_id = re.findall(r' ID="(.*?)" ', xml)[0]
    259. 

  259.         instant = datetime.datetime.now().strftime('%Y-%m-%dT%H:%M:%SZ')
    260. 

  260. 

  261.         saml_response = """<?xml version='1.0' encoding='UTF-8'?>
    262. 

  262. <samlp:LogoutResponse Destination="http://sp.example.com/saml2/ls/" ID="a140848e7ce2bce834d7264ecdde0151" InResponseTo="%s" IssueInstant="%s" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://idp.example.com/simplesaml/saml2/idp/metadata.php</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status></samlp:LogoutResponse>""" % (
    263. 

  263.             request_id, instant)
    264. 

  264. 

  265.         response = self.client.get('/ls/', {
    266. 

  266.                 'SAMLResponse': deflate_and_base64_encode(saml_response),
    267. 

  267.                 })
    268. 

  268.         self.assertContains(response, "Logged out", status_code=200)
    269. 

  269.         self.assertEquals(self.client.session.keys(), [])
    270. 

  270. 

  271.     def test_logout_service_global(self):
    272. 

  272.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    273. 

  273.                                                 idp_hosts=['idp.example.com'])
    274. 

  274. 

  275.         self.do_login()
    276. 

  276. 

  277.         # now simulate a global logout process initiated by another SP
    278. 

  278.         subject_id = views._get_subject_id(self.client.session)
    279. 

  279.         instant = datetime.datetime.now().strftime('%Y-%m-%dT%H:%M:%SZ')
    280. 

  280.         saml_request = '<samlp:LogoutRequest ID="_9961abbaae6d06d251226cb25e38bf8f468036e57e" Version="2.0" IssueInstant="%s" Destination="http://sp.example.com/saml2/ls/" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://idp.example.com/simplesaml/saml2/idp/metadata.php</saml:Issuer><saml:NameID SPNameQualifier="http://sp.example.com/saml2/metadata/" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">%s</saml:NameID><samlp:SessionIndex>_1837687b7bc9faad85839dbeb319627889f3021757</samlp:SessionIndex></samlp:LogoutRequest>' % (
    281. 

  281.             instant, subject_id)
    282. 

  282. 

  283.         response = self.client.get('/ls/', {
    284. 

  284.                 'SAMLRequest': deflate_and_base64_encode(saml_request),
    285. 

  285.                 })
    286. 

  286.         self.assertEquals(response.status_code, 302)
    287. 

  287.         location = response['Location']
    288. 

  288. 

  289.         url = urlparse.urlparse(location)
    290. 

  290.         self.assertEquals(url.hostname, 'idp.example.com')
    291. 

  291.         self.assertEquals(url.path,
    292. 

  292.                           '/simplesaml/saml2/idp/SingleLogoutService.php')
    293. 

  293. 

  294.         params = urlparse.parse_qs(url.query)
    295. 

  295.         self.assert_('SAMLResponse' in params)
    296. 

  296. 

  297.         saml_response = params['SAMLResponse'][0]
    298. 

  298.         expected_response = """<?xml version='1.0' encoding='UTF-8'?>
    299. 

  299. <samlp:LogoutResponse Destination="https://idp.example.com/simplesaml/saml2/idp/SingleLogoutService.php" ID="a140848e7ce2bce834d7264ecdde0151" InResponseTo="_9961abbaae6d06d251226cb25e38bf8f468036e57e" IssueInstant="2010-09-05T09:10:12Z" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://sp.example.com/saml2/metadata/</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status></samlp:LogoutResponse>"""
    300. 

  300.         xml = decode_base64_and_inflate(saml_response)
    301. 

  301.         self.assertSAMLRequestsEquals(expected_response, xml)
    302. 

  302. 

  303.     def test_metadata(self):
    304. 

  304.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    305. 

  305.                                                 idp_hosts=['idp.example.com'])
    306. 

  306. 

  307.         valid_until = datetime.datetime.utcnow() + datetime.timedelta(hours=24)
    308. 

  308.         valid_until = valid_until.strftime("%Y-%m-%dT%H:%M:%SZ")
    309. 

  309.         expected_metadata = """<?xml version='1.0' encoding='UTF-8'?>
    310. 

  310. <md:EntityDescriptor entityID="http://sp.example.com/saml2/metadata/" validUntil="%s" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"><md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>MIIDPjCCAiYCCQCkHjPQlll+mzANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQGEwJF
    311. 

  311. UzEQMA4GA1UECBMHU2V2aWxsYTEbMBkGA1UEChMSWWFjbyBTaXN0ZW1hcyBTLkwu
    312. 

  312. MRAwDgYDVQQHEwdTZXZpbGxhMREwDwYDVQQDEwh0aWNvdGljbzAeFw0wOTEyMDQx
    313. 

  313. OTQzNTJaFw0xMDEyMDQxOTQzNTJaMGExCzAJBgNVBAYTAkVTMRAwDgYDVQQIEwdT
    314. 

  314. ZXZpbGxhMRswGQYDVQQKExJZYWNvIFNpc3RlbWFzIFMuTC4xEDAOBgNVBAcTB1Nl
    315. 

  315. dmlsbGExETAPBgNVBAMTCHRpY290aWNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
    316. 

  316. MIIBCgKCAQEA7rMOMOaIZ/YYD5hYS6Hpjpovcu4k8gaIY+om9zCxLV5F8BLEfkxo
    317. 

  317. Pk9IA3cRQNRxf7AXCFxEOH3nKy56AIi1gU7X6fCT30JBT8NQlYdgOVMLlR+tjy1b
    318. 

  318. YV07tDa9U8gzjTyKQHgVwH0436+rmSPnacGj3fMwfySTMhtmrJmax0bIa8EB+gY1
    319. 

  319. 77DBtvf8dIZIXLlGMQFloZeUspvHOrgNoEA9xU4E9AanGnV9HeV37zv3mLDUOQLx
    320. 

  320. 4tk9sMQmylCpij7WZmcOV07DyJ/cEmnvHSalBTcyIgkcwlhmjtSgfCy6o5zuWxYd
    321. 

  321. T9ia80SZbWzn8N6B0q+nq23+Oee9H0lvcwIDAQABMA0GCSqGSIb3DQEBBQUAA4IB
    322. 

  322. AQCQBhKOqucJZAqGHx4ybDXNzpPethszonLNVg5deISSpWagy55KlGCi5laio/xq
    323. 

  323. hHRx18eTzeCeLHQYvTQxw0IjZOezJ1X30DD9lEqPr6C+IrmZc6bn/pF76xsvdaRS
    324. 

  324. gduNQPT1B25SV2HrEmbf8wafSlRARmBsyUHh860TqX7yFVjhYIAUF/El9rLca51j
    325. 

  325. ljCIqqvT+klPdjQoZwODWPFHgute2oNRmoIcMjSnoy1+mxOC2Q/j7kcD8/etulg2
    326. 

  326. XDxB3zD81gfdtT8VBFP+G4UrBa+5zFk6fT6U8a7ZqVsyH+rCXAdCyVlEC4Y5fZri
    327. 

  327. ID4zT0FcZASGuthM56rRJJSx
    328. 

  328. </ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://sp.example.com/saml2/ls/" /><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://sp.example.com/saml2/acs/" index="1" /><md:AttributeConsumingService index="1"><md:ServiceName xml:lang="en">Test SP</md:ServiceName><md:RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true" /><md:RequestedAttribute FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false" /></md:AttributeConsumingService></md:SPSSODescriptor><md:Organization><md:OrganizationName xml:lang="es">Ejemplo S.A.</md:OrganizationName><md:OrganizationName xml:lang="en">Example Inc.</md:OrganizationName><md:OrganizationDisplayName xml:lang="es">Ejemplo</md:OrganizationDisplayName><md:OrganizationDisplayName xml:lang="en">Example</md:OrganizationDisplayName><md:OrganizationURL xml:lang="es">http://www.example.es</md:OrganizationURL><md:OrganizationURL xml:lang="en">http://www.example.com</md:OrganizationURL></md:Organization><md:ContactPerson contactType="technical"><md:Company>Example Inc.</md:Company><md:GivenName>Technical givenname</md:GivenName><md:SurName>Technical surname</md:SurName><md:EmailAddress>technical@sp.example.com</md:EmailAddress></md:ContactPerson><md:ContactPerson contactType="administrative"><md:Company>Example Inc.</md:Company><md:GivenName>Administrative givenname</md:GivenName><md:SurName>Administrative surname</md:SurName><md:EmailAddress>administrative@sp.example.ccom</md:EmailAddress></md:ContactPerson></md:EntityDescriptor>"""
    329. 

  329. 

  330.         expected_metadata = expected_metadata % valid_until
    331. 

  331. 

  332.         response = self.client.get('/metadata/')
    333. 

  333.         self.assertEquals(response['Content-type'], 'text/xml; charset=utf8')
    334. 

  334.         self.assertEquals(response.status_code, 200)
    335. 

  335.         self.assertEquals(response.content, expected_metadata)
    336. 

  336. 

  337.     def test_post_authenticated_signal(self):
    338. 

  338. 

  339.         def signal_handler(signal, user, session_info):
    340. 

  340.             self.assertEquals(isinstance(user, User), True)
    341. 

  341. 

  342.         post_authenticated.connect(signal_handler, dispatch_uid='test_signal')
    343. 

  343. 

  344.         self.do_login()
    345. 

  345. 

  346.         post_authenticated.disconnect(dispatch_uid='test_signal')
    347. 

  347. 

  348.     def test_idplist_templatetag(self):
    349. 

  349.         settings.SAML_CONFIG = conf.create_conf(sp_host='sp.example.com',
    350. 

  350.                                                 idp_hosts=['idp1.example.com',
    351. 

  351.                                                            'idp2.example.com',
    352. 

  352.                                                            'idp3.example.com'])
    353. 

  353.         rendered = self.render_template(
    354. 

  354.             '{% load idplist %}'
    355. 

  355.             '{% idplist as idps %}'
    356. 

  356.             '{% for url, name in idps.items %}'
    357. 

  357.             '{{ url }} - {{ name }}; '
    358. 

  358.             '{% endfor %}'
    359. 

  359.             )
    360. 

  360. 

  361.         expected = u'https://idp2.example.com/simplesaml/saml2/idp/metadata.php - idp2.example.com IdP; https://idp3.example.com/simplesaml/saml2/idp/metadata.php - idp3.example.com IdP; https://idp1.example.com/simplesaml/saml2/idp/metadata.php - idp1.example.com IdP; '
    362. 

  362. 

  363.         self.assertEqual(rendered, expected)
    364. 

  364. 

  365. 

  366. class Saml2BackendTests(TestCase):
    367. 

  367. 

  368.     def setUp(self):
    369. 

  369.         # with Django 1.4 we can patch the settings in a much
    370. 

  370.         # better way
    371. 

  371.         self.old_installed_apps = settings.INSTALLED_APPS
    372. 

  372.         settings.INSTALLED_APPS += (
    373. 

  373.             'djangosaml2.tests',
    374. 

  374.             )
    375. 

  375.         # create the database tables for the tests models
    376. 

  376.         loading.cache.loaded = False
    377. 

  377.         call_command('syncdb', verbosity=0)
    378. 

  378. 

  379.         self.old_auth_profile_module = settings.AUTH_PROFILE_MODULE
    380. 

  380.         settings.AUTH_PROFILE_MODULE = 'tests.TestProfile'
    381. 

  381. 

  382.     def tearDown(self):
    383. 

  383.         settings.INSTALLED_APPS = self.old_installed_apps
    384. 

  384.         settings.AUTH_PROFILE_MODULE = self.old_auth_profile_module
    385. 

  385. 

  386.     def test_update_user(self):
    387. 

  387. 

  388.         # we need a user
    389. 

  389.         user = User.objects.create(username='john')
    390. 

  390. 

  391.         backend = Saml2Backend()
    392. 

  392. 

  393.         attribute_mapping = {
    394. 

  394.             'uid': ('username', ),
    395. 

  395.             'mail': ('email', ),
    396. 

  396.             'cn': ('first_name', ),
    397. 

  397.             'sn': ('last_name', ),
    398. 

  398.             }
    399. 

  399.         attributes = {
    400. 

  400.             'uid': ('john', ),
    401. 

  401.             'mail': ('john@example.com', ),
    402. 

  402.             'cn': ('John', ),
    403. 

  403.             'sn': ('Doe', ),
    404. 

  404.             }
    405. 

  405.         backend.update_user(user, attributes, attribute_mapping)
    406. 

  406.         self.assertEquals(user.email, 'john@example.com')
    407. 

  407.         self.assertEquals(user.first_name, 'John')
    408. 

  408.         self.assertEquals(user.last_name, 'Doe')
    409. 

  409. 

  410.         # now we create a user profile and link it to the user
    411. 

  411.         profile = TestProfile.objects.create(user=user)
    412. 

  412. 

  413.         attribute_mapping['saml_age'] = ('age', )
    414. 

  414.         attributes['saml_age'] = ('22', )
    415. 

  415.         backend.update_user(user, attributes, attribute_mapping)
    416. 

  416. 

  417.         self.assertEquals(user.get_profile().age, '22')
    418. 

  418.