burmatovan/openuds
1
0
Fork 0
forked from shaba/openuds
Code Issues Pull Requests Projects Releases Wiki Activity

Added metadata config fields for SAML

Browse Source
This commit is contained in:
Adolfo Gómez García 2022-06-24 16:53:33 +02:00
parent f922bbcd2e
commit b99a8de8c6
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
server/src/uds/auths/SAML/saml.py
View File

@ -33,6 +33,7 @@
import re import re
from urllib.parse import urlparse from urllib.parse import urlparse
import xml.sax import xml.sax
import datetime
import requests import requests
import logging import logging
import typing import typing
@ -43,6 +44,8 @@ from onelogin.saml2.idp_metadata_parser import OneLogin_Saml2_IdPMetadataParser
from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.settings import OneLogin_Saml2_Settings
from django.utils.translation import gettext_noop as _, gettext from django.utils.translation import gettext_noop as _, gettext
from uds.models import getSqlDatetime
from uds.core.ui import gui from uds.core.ui import gui
from uds.core import auths from uds.core import auths
from uds.core.managers import cryptoManager from uds.core.managers import cryptoManager
@ -282,6 +285,23 @@ class SAMLAuthenticator(auths.Authenticator):
tab=_('Security'), tab=_('Security'),
) )
metadataCacheDuration = gui.NumericField(
label=_('Metadata cache duration'),
defvalue=0,
order=22,
tooltip=_('Duration of metadata cache in seconds'),
tab=_('Metadata'),
)
metadataValidityDuration = gui.NumericField(
label=_('Metadata validity duration'),
defvalue=0,
order=22,
tooltip=_('Duration of metadata validity in seconds'),
tab=_('Metadata'),
)
manageUrl = gui.HiddenField(serializable=True) manageUrl = gui.HiddenField(serializable=True)
def initialize(self, values: typing.Optional[typing.Dict[str, typing.Any]]) -> None: def initialize(self, values: typing.Optional[typing.Dict[str, typing.Any]]) -> None:
@ -456,6 +476,8 @@ class SAMLAuthenticator(auths.Authenticator):
}, },
'idp': self.getIdpMetadataDict()['idp'], 'idp': self.getIdpMetadataDict()['idp'],
'security': { 'security': {
'metadataCacheDuration': self.metadataCacheDuration.int_value if self.metadataCacheDuration.int_value > 0 else None,
'metadataValidUntil': getSqlDatetime() + datetime.timedelta(seconds=self.metadataValidityDuration.int_value) if self.metadataCacheDuration.int_value > 0 else None,
'nameIdEncrypted': self.nameIdEncrypted.isTrue(), 'nameIdEncrypted': self.nameIdEncrypted.isTrue(),
'authnRequestsSigned': self.authnRequestsSigned.isTrue(), 'authnRequestsSigned': self.authnRequestsSigned.isTrue(),
'logoutRequestSigned': self.logoutRequestSigned.isTrue(), 'logoutRequestSigned': self.logoutRequestSigned.isTrue(),