3 # Copyright (C) 2014 Simo Sorce <simo@redhat.com>
5 # see file 'COPYING' for use and warranty information
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation, either version 3 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
21 from ipsilon.util.page import Page
22 from ipsilon.providers.saml2.provider import ServiceProvider
23 from ipsilon.providers.saml2.provider import ServiceProviderCreator
24 from ipsilon.providers.saml2.provider import InvalidProviderId
27 class NewSPAdminPage(Page):
29 def __init__(self, site, parent):
30 super(NewSPAdminPage, self).__init__(site)
32 self.title = 'New Service Provider'
33 self.backurl = parent.url
34 self.url = '%s/new' % (parent.url,)
36 def form_new(self, message=None, message_type=None):
37 return self._template('admin/providers/saml2_sp_new.html',
40 message_type=message_type,
41 name='saml2_sp_new_form',
42 backurl=self.backurl, action=self.url)
44 def GET(self, *args, **kwargs):
45 return self.form_new()
47 def POST(self, *args, **kwargs):
49 if self.user.is_admin:
50 #TODO: allow authenticated user to create SPs on their own
51 # set the owner in that case
54 if 'content-type' not in cherrypy.request.headers:
55 self._debug("Invalid request, missing content-type")
56 message = "Malformed request"
57 message_type = "error"
58 return self.form_new(message, message_type)
59 ctype = cherrypy.request.headers['content-type'].split(';')[0]
60 if ctype != 'multipart/form-data':
61 self._debug("Invalid form type (%s), trying to cope" % (
62 cherrypy.request.content_type,))
63 for key, value in kwargs.iteritems():
67 if hasattr(value, 'content_type'):
68 meta = value.fullvalue()
70 self._debug("Invalid format for 'meta'")
74 spc = ServiceProviderCreator(self.parent.cfg)
75 sp = spc.create_from_buffer(name, meta)
76 sp_page = self.parent.add_sp(name, sp)
77 message = "SP Successfully added"
78 message_type = "success"
79 return sp_page.form_standard(message, message_type)
80 except InvalidProviderId, e:
82 message_type = "error"
83 except Exception, e: # pylint: disable=broad-except
85 message = "Failed to create Service Provider!"
86 message_type = "error"
88 message = "A name and a metadata file must be provided"
89 message_type = "error"
91 message = "Unauthorized"
92 message_type = "error"
94 return self.form_new(message, message_type)
96 def root(self, *args, **kwargs):
97 op = getattr(self, cherrypy.request.method, self.GET)
99 return op(*args, **kwargs)
102 class SPAdminPage(Page):
104 def __init__(self, sp, site, parent):
105 super(SPAdminPage, self).__init__(site)
109 self.backurl = parent.url
110 self.url = '%s/sp/%s' % (parent.url, sp.name)
112 def form_standard(self, message=None, message_type=None):
113 return self._template('admin/providers/saml2_sp.html',
115 message_type=message_type,
117 name='saml2_sp_%s_form' % self.sp.name,
118 backurl=self.backurl, action=self.url,
121 def GET(self, *args, **kwargs):
122 return self.form_standard()
124 def POST(self, *args, **kwargs):
126 message = "Nothing was modified."
127 message_type = "info"
130 for key, value in kwargs.iteritems():
132 if value != self.sp.name:
133 if self.user.is_admin or self.user.name == self.sp.owner:
134 self._debug("Replacing %s: %s -> %s" %
135 (key, self.sp.name, value))
139 message = "Unauthorized to rename object"
140 message_type = "error"
141 return self.form_standard(message, message_type)
144 if value != self.sp.owner:
145 if self.user.is_admin:
146 self._debug("Replacing %s: %s -> %s" %
147 (key, self.sp.owner, value))
148 self.sp.owner = value
151 message = "Unauthorized to set owner value"
152 message_type = "error"
153 return self.form_standard(message, message_type)
155 elif key == 'default_nameid':
156 if value != self.sp.default_nameid:
157 if self.user.is_admin:
158 self._debug("Replacing %s: %s -> %s" %
159 (key, self.sp.default_nameid, value))
160 self.sp.default_nameid = value
163 message = "Unauthorized to set default nameid value"
164 message_type = "error"
165 return self.form_standard(message, message_type)
167 elif key == 'allowed_nameids':
168 v = set([x.strip() for x in value.split(',')])
169 if v != set(self.sp.allowed_nameids):
170 if self.user.is_admin:
171 self._debug("Replacing %s: %s -> %s" %
172 (key, self.sp.allowed_nameids, list(v)))
173 self.sp.allowed_nameids = list(v)
176 message = "Unauthorized to set allowed nameids value"
177 message_type = "error"
178 return self.form_standard(message, message_type)
182 self.sp.save_properties()
183 message = "Properties succssfully changed"
184 message_type = "success"
185 except Exception: # pylint: disable=broad-except
186 message = "Failed to save data!"
187 message_type = "error"
189 return self.form_standard(message, message_type)
191 def root(self, *args, **kwargs):
192 op = getattr(self, cherrypy.request.method, self.GET)
194 return op(*args, **kwargs)
197 self.parent.del_sp(self.sp.name)
198 self.sp.permanently_delete()
199 return self.parent.root()
200 delete.exposed = True
203 class AdminPage(Page):
204 def __init__(self, site, config):
205 super(AdminPage, self).__init__(site)
211 self.sp = Page(self._site)
213 def add_sp(self, name, sp):
214 page = SPAdminPage(sp, self._site, self)
215 self.sp.add_subtree(name, page)
216 self.providers.append(sp)
219 def del_sp(self, name):
221 page = getattr(self.sp, name)
222 self.providers.remove(page.sp)
223 self.sp.del_subtree(name)
224 except Exception, e: # pylint: disable=broad-except
225 self._debug("Failed to remove provider %s: %s" % (name, str(e)))
227 def mount(self, page):
228 self.menu = page.menu
229 self.url = '%s/%s' % (page.url, self.name)
230 for p in self.cfg.idp.get_providers():
232 sp = ServiceProvider(self.cfg, p)
233 self.add_sp(sp.name, sp)
234 except Exception, e: # pylint: disable=broad-except
235 self._debug("Failed to find provider %s: %s" % (p, str(e)))
236 self.add_subtree('new', NewSPAdminPage(self._site, self))
237 page.add_subtree(self.name, self)
239 def root(self, *args, **kwargs):
240 return self._template('admin/providers/saml2.html',
241 title='SAML2 Administration',
242 providers=self.providers,