2016-02-12 16:02:35 +00:00
|
|
|
import random
|
|
|
|
import string
|
2015-07-10 10:22:25 +00:00
|
|
|
try:
|
|
|
|
from urlparse import parse_qs, urlsplit
|
|
|
|
except ImportError:
|
|
|
|
from urllib.parse import parse_qs, urlsplit
|
2016-01-25 20:52:24 +00:00
|
|
|
|
|
|
|
from django.contrib.auth.models import User
|
|
|
|
|
2016-08-11 22:05:13 +00:00
|
|
|
from oidc_provider.models import (
|
|
|
|
Client,
|
|
|
|
Code,
|
|
|
|
)
|
2015-02-11 18:37:51 +00:00
|
|
|
|
|
|
|
|
2016-02-12 16:02:35 +00:00
|
|
|
FAKE_NONCE = 'cb584e44c43ed6bd0bc2d9c7e242837d'
|
|
|
|
FAKE_RANDOM_STRING = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(32))
|
2016-04-07 19:18:47 +00:00
|
|
|
FAKE_CODE_CHALLENGE = 'YlYXEqXuRm-Xgi2BOUiK50JW1KsGTX6F1TDnZSC8VTg'
|
|
|
|
FAKE_CODE_VERIFIER = 'SmxGa0XueyNh5bDgTcSrqzAh2_FmXEqU8kDT6CuXicw'
|
2015-07-16 18:04:33 +00:00
|
|
|
|
2015-08-11 18:59:57 +00:00
|
|
|
|
2015-02-11 18:37:51 +00:00
|
|
|
def create_fake_user():
|
2015-06-23 19:32:12 +00:00
|
|
|
"""
|
|
|
|
Create a test user.
|
2015-02-11 18:37:51 +00:00
|
|
|
|
2015-06-23 19:32:12 +00:00
|
|
|
Return a User object.
|
|
|
|
"""
|
|
|
|
user = User()
|
|
|
|
user.username = 'johndoe'
|
|
|
|
user.email = 'johndoe@example.com'
|
|
|
|
user.set_password('1234')
|
2015-02-11 18:37:51 +00:00
|
|
|
|
2015-06-23 19:32:12 +00:00
|
|
|
user.save()
|
2015-02-11 18:37:51 +00:00
|
|
|
|
2015-06-23 19:32:12 +00:00
|
|
|
return user
|
2015-02-11 18:37:51 +00:00
|
|
|
|
2015-08-11 18:59:57 +00:00
|
|
|
|
2016-04-08 21:09:24 +00:00
|
|
|
def create_fake_client(response_type, is_public=False):
|
2015-06-23 19:32:12 +00:00
|
|
|
"""
|
|
|
|
Create a test client, response_type argument MUST be:
|
|
|
|
'code', 'id_token' or 'id_token token'.
|
|
|
|
|
|
|
|
Return a Client object.
|
|
|
|
"""
|
|
|
|
client = Client()
|
|
|
|
client.name = 'Some Client'
|
2016-04-14 19:22:38 +00:00
|
|
|
client.client_id = str(random.randint(1, 999999)).zfill(6)
|
2016-04-08 21:09:24 +00:00
|
|
|
if is_public:
|
|
|
|
client.client_type = 'public'
|
|
|
|
client.client_secret = ''
|
|
|
|
else:
|
2016-04-14 19:22:38 +00:00
|
|
|
client.client_secret = str(random.randint(1, 999999)).zfill(6)
|
2015-06-23 19:32:12 +00:00
|
|
|
client.response_type = response_type
|
|
|
|
client.redirect_uris = ['http://example.com/']
|
|
|
|
|
|
|
|
client.save()
|
|
|
|
|
|
|
|
return client
|
|
|
|
|
2015-08-11 18:59:57 +00:00
|
|
|
|
2015-06-23 19:32:12 +00:00
|
|
|
def is_code_valid(url, user, client):
|
|
|
|
"""
|
2016-09-08 20:15:25 +00:00
|
|
|
Check if the code inside the url is valid. Supporting both query string and fragment.
|
2015-06-23 19:32:12 +00:00
|
|
|
"""
|
|
|
|
try:
|
2015-07-10 10:22:25 +00:00
|
|
|
parsed = urlsplit(url)
|
2016-09-08 20:15:25 +00:00
|
|
|
params = parse_qs(parsed.query or parsed.fragment)
|
2015-07-10 10:22:25 +00:00
|
|
|
code = params['code'][0]
|
2015-06-23 19:32:12 +00:00
|
|
|
code = Code.objects.get(code=code)
|
2016-09-08 20:15:25 +00:00
|
|
|
is_code_ok = (code.client == client) and (code.user == user)
|
2015-06-23 19:32:12 +00:00
|
|
|
except:
|
|
|
|
is_code_ok = False
|
|
|
|
|
|
|
|
return is_code_ok
|
2015-08-11 18:59:57 +00:00
|
|
|
|
|
|
|
|
2016-07-07 15:50:27 +00:00
|
|
|
def userinfo(claims, user):
|
2016-01-12 18:17:22 +00:00
|
|
|
"""
|
2016-07-07 15:50:27 +00:00
|
|
|
Fake function for setting OIDC_USERINFO.
|
2016-01-12 18:17:22 +00:00
|
|
|
"""
|
2016-07-07 15:50:27 +00:00
|
|
|
claims['given_name'] = 'John'
|
|
|
|
claims['family_name'] = 'Doe'
|
|
|
|
claims['name'] = '{0} {1}'.format(claims['given_name'], claims['family_name'])
|
|
|
|
claims['email'] = user.email
|
|
|
|
claims['address']['country'] = 'Argentina'
|
|
|
|
return claims
|
2016-01-12 18:17:22 +00:00
|
|
|
|
|
|
|
|
|
|
|
def fake_sub_generator(user):
|
|
|
|
"""
|
|
|
|
Fake function for setting OIDC_IDTOKEN_SUB_GENERATOR.
|
|
|
|
"""
|
|
|
|
return user.email
|
2016-02-12 16:02:35 +00:00
|
|
|
|
|
|
|
|
2016-02-17 22:28:08 +00:00
|
|
|
def fake_idtoken_processing_hook(id_token, user):
|
2016-02-12 16:02:35 +00:00
|
|
|
"""
|
2016-02-12 17:51:43 +00:00
|
|
|
Fake function for inserting some keys into token. Testing OIDC_IDTOKEN_PROCESSING_HOOK.
|
2016-02-12 16:02:35 +00:00
|
|
|
"""
|
2016-02-12 17:51:43 +00:00
|
|
|
id_token['test_idtoken_processing_hook'] = FAKE_RANDOM_STRING
|
2016-02-17 22:28:08 +00:00
|
|
|
id_token['test_idtoken_processing_hook_user_email'] = user.email
|
2016-02-12 17:51:43 +00:00
|
|
|
return id_token
|
2016-03-01 17:54:57 +00:00
|
|
|
|
|
|
|
|
|
|
|
def fake_idtoken_processing_hook2(id_token, user):
|
|
|
|
"""
|
|
|
|
Fake function for inserting some keys into token. Testing OIDC_IDTOKEN_PROCESSING_HOOK - tuple or list as param
|
|
|
|
"""
|
|
|
|
id_token['test_idtoken_processing_hook2'] = FAKE_RANDOM_STRING
|
|
|
|
id_token['test_idtoken_processing_hook_user_email2'] = user.email
|
|
|
|
return id_token
|