Test for CAS federation

cas_server/federate.py

@@ -0,0 +1,69 @@
+# ⁻*- coding: utf-8 -*-
+# This program is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+# FOR A PARTICULAR PURPOSE. See the GNU General Public License version 3 for
+# more details.
+#
+# You should have received a copy of the GNU General Public License version 3
+# along with this program; if not, write to the Free Software Foundation, Inc., 51
+# Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+#
+# (c) 2015 Valentin Samir
+from .default_settings import settings
+
+from .cas import CASClient
+from .models import FederatedUser
+
+
+class CASFederateValidateUser(object):
+    username = None
+    attributs = {}
+    client = None
+
+    def __init__(self, provider, service_url):
+        self.provider = provider
+
+        if provider in settings.CAS_FEDERATE_PROVIDERS:
+            (server_url, version) = settings.CAS_FEDERATE_PROVIDERS[provider]
+            self.client = CASClient(
+                service_url=service_url,
+                version=version,
+                server_url=server_url,
+                extra_login_params={"provider": provider},
+                renew=False,
+            )
+
+    def get_login_url(self):
+        return self.client.get_login_url() if self.client is not None else False
+
+    def get_logout_url(self, redirect_url=None):
+        return self.client.get_logout_url(redirect_url) if self.client is not None else False
+
+    def verify_ticket(self, ticket):
+        """test `password` agains the user"""
+        if self.client is None:
+            return False
+        username, attributs, pgtiou = self.client.verify_ticket(ticket)
+        if username is not None:
+            attributs["provider"] = self.provider
+            self.username = username
+            self.attributs = attributs
+            try:
+                user = FederatedUser.objects.get(
+                    username=username,
+                    provider=self.provider
+                )
+                user.attributs = attributs
+                user.ticket = ticket
+                user.save()
+            except FederatedUser.DoesNotExist:
+                user = FederatedUser.objects.create(
+                    username=username,
+                    provider=self.provider,
+                    attributs=attributs,
+                    ticket=ticket
+                )
+                user.save()
+            return True
+        else:
+            return False