X-Git-Url: http://git.cascardo.info/?p=cascardo%2Fipsilon.git;a=blobdiff_plain;f=ipsilon%2Fproviders%2Fsaml2%2Fprovider.py;h=58ffbfeea3f39b1bf0d903caaca005bd2f9ba4ee;hp=7d47363c527439556e6f3a1e17dde750685e11b0;hb=71edd1146556eecb9f9375da46313e94bf82874c;hpb=277ed07e8810dbd0adbbf213f56246394753f452 diff --git a/ipsilon/providers/saml2/provider.py b/ipsilon/providers/saml2/provider.py index 7d47363..58ffbfe 100755 --- a/ipsilon/providers/saml2/provider.py +++ b/ipsilon/providers/saml2/provider.py @@ -19,7 +19,7 @@ from ipsilon.providers.common import ProviderException from ipsilon.tools.saml2metadata import SAML2_NAMEID_MAP -import cherrypy +from ipsilon.util.log import Log import lasso @@ -33,8 +33,8 @@ class InvalidProviderId(ProviderException): class NameIdNotAllowed(Exception): - def __init__(self): - message = 'The specified Name ID is not allowed' + def __init__(self, nid): + message = 'Name ID [%s] is not allowed' % nid super(NameIdNotAllowed, self).__init__(message) self.message = message @@ -42,7 +42,7 @@ class NameIdNotAllowed(Exception): return repr(self.message) -class ServiceProvider(object): +class ServiceProvider(Log): def __init__(self, config, provider_id): self.cfg = config @@ -135,15 +135,19 @@ class ServiceProvider(object): idval = data.keys()[0] self.cfg.del_datum(idval) - def _debug(self, fact): - if cherrypy.config.get('debug', False): - cherrypy.log(fact) - def normalize_username(self, username): if 'strip domain' in self._properties: return username.split('@', 1)[0] return username + def is_valid_nameid(self, value): + if value in SAML2_NAMEID_MAP: + return True + return False + + def valid_nameids(self): + return SAML2_NAMEID_MAP.keys() + class ServiceProviderCreator(object): @@ -177,7 +181,7 @@ class ServiceProviderCreator(object): return ServiceProvider(self.cfg, spid) -class IdentityProvider(object): +class IdentityProvider(Log): def __init__(self, config): self.server = lasso.Server(config.idp_metadata_file, config.idp_key_file, @@ -198,7 +202,3 @@ class IdentityProvider(object): def get_providers(self): return self.server.get_providers() - - def _debug(self, fact): - if cherrypy.config.get('debug', False): - cherrypy.log(fact)