import cherrypy
from ipsilon.util.page import Page
from ipsilon.providers.saml2.provider import ServiceProvider
+from ipsilon.providers.saml2.provider import ServiceProviderCreator
+from ipsilon.providers.saml2.provider import InvalidProviderId
+import re
+
+
+VALID_IN_NAME = r'[^\ a-zA-Z0-9]'
+
+
+class NewSPAdminPage(Page):
+
+ def __init__(self, site, parent):
+ super(NewSPAdminPage, self).__init__(site)
+ self.parent = parent
+ self.title = 'New Service Provider'
+ self.backurl = parent.url
+ self.url = '%s/new' % (parent.url,)
+
+ def form_new(self, message=None, message_type=None):
+ return self._template('admin/providers/saml2_sp_new.html',
+ title=self.title,
+ message=message,
+ message_type=message_type,
+ name='saml2_sp_new_form',
+ backurl=self.backurl, action=self.url)
+
+ def GET(self, *args, **kwargs):
+ return self.form_new()
+
+ def POST(self, *args, **kwargs):
+
+ if self.user.is_admin:
+ #TODO: allow authenticated user to create SPs on their own
+ # set the owner in that case
+ name = None
+ meta = None
+ if 'content-type' not in cherrypy.request.headers:
+ self._debug("Invalid request, missing content-type")
+ message = "Malformed request"
+ message_type = "error"
+ return self.form_new(message, message_type)
+ ctype = cherrypy.request.headers['content-type'].split(';')[0]
+ if ctype != 'multipart/form-data':
+ self._debug("Invalid form type (%s), trying to cope" % (
+ cherrypy.request.content_type,))
+ for key, value in kwargs.iteritems():
+ if key == 'name':
+ if re.search(VALID_IN_NAME, value):
+ message = "Invalid name!" \
+ " Use only numbers and letters"
+ message_type = "error"
+ return self.form_new(message, message_type)
+
+ name = value
+ elif key == 'meta':
+ if hasattr(value, 'content_type'):
+ meta = value.fullvalue()
+ else:
+ self._debug("Invalid format for 'meta'")
+
+ if name and meta:
+ try:
+ spc = ServiceProviderCreator(self.parent.cfg)
+ sp = spc.create_from_buffer(name, meta)
+ sp_page = self.parent.add_sp(name, sp)
+ message = "SP Successfully added"
+ message_type = "success"
+ return sp_page.form_standard(message, message_type)
+ except InvalidProviderId, e:
+ message = str(e)
+ message_type = "error"
+ except Exception, e: # pylint: disable=broad-except
+ self._debug(repr(e))
+ message = "Failed to create Service Provider!"
+ message_type = "error"
+ else:
+ message = "A name and a metadata file must be provided"
+ message_type = "error"
+ else:
+ message = "Unauthorized"
+ message_type = "error"
+
+ return self.form_new(message, message_type)
+
+ def root(self, *args, **kwargs):
+ op = getattr(self, cherrypy.request.method, self.GET)
+ if callable(op):
+ return op(*args, **kwargs)
class SPAdminPage(Page):
def __init__(self, sp, site, parent):
super(SPAdminPage, self).__init__(site)
+ self.parent = parent
self.sp = sp
self.title = sp.name
self.backurl = parent.url
message = "Nothing was modified."
message_type = "info"
+ rename = None
save = False
for key, value in kwargs.iteritems():
if key == 'name':
if value != self.sp.name:
if self.user.is_admin or self.user.name == self.sp.owner:
+ if re.search(VALID_IN_NAME, value):
+ message = "Invalid name!" \
+ " Use only numbers and letters"
+ message_type = "error"
+ return self.form_standard(message, message_type)
+
self._debug("Replacing %s: %s -> %s" %
(key, self.sp.name, value))
self.sp.name = value
+ rename = [self.sp.name, value]
save = True
else:
message = "Unauthorized to rename object"
if save:
try:
self.sp.save_properties()
+ if rename:
+ self.parent.rename_sp(rename[0], rename[1])
message = "Properties succssfully changed"
message_type = "success"
except Exception: # pylint: disable=broad-except
if callable(op):
return op(*args, **kwargs)
+ def delete(self):
+ self.parent.del_sp(self.sp.name)
+ self.sp.permanently_delete()
+ return self.parent.root()
+ delete.exposed = True
+
class AdminPage(Page):
def __init__(self, site, config):
self.providers.append(sp)
return page
+ def rename_sp(self, oldname, newname):
+ page = getattr(self.sp, oldname)
+ self.sp.del_subtree(oldname)
+ self.sp.add_subtree(newname, page)
+
+ def del_sp(self, name):
+ try:
+ page = getattr(self.sp, name)
+ self.providers.remove(page.sp)
+ self.sp.del_subtree(name)
+ except Exception, e: # pylint: disable=broad-except
+ self._debug("Failed to remove provider %s: %s" % (name, str(e)))
+
def mount(self, page):
self.menu = page.menu
self.url = '%s/%s' % (page.url, self.name)
self.add_sp(sp.name, sp)
except Exception, e: # pylint: disable=broad-except
self._debug("Failed to find provider %s: %s" % (p, str(e)))
+ self.add_subtree('new', NewSPAdminPage(self._site, self))
page.add_subtree(self.name, self)
def root(self, *args, **kwargs):
projects / cascardo / ipsilon.git / blobdiff