Changeset 10398 for main/waeup.cas/trunk/waeup/cas/server.py

Timestamp:

4 Jul 2013, 22:08:53 (11 years ago)

Author:

uli

Message:

Enable session cookies for single sign on.

File:

• main/waeup.cas/trunk/waeup/cas/server.py (modified) (2 diffs)

main/waeup.cas/trunk/waeup/cas/server.py

@@ -100 +100 @@
 
 
+def check_session_cookie(db, cookie_value):
+    """Check whether `cookie_value` represents a valid ticket granting
+    ticket in `db`.
+    """
+    if cookie_value is None:
+        return False
+    print("VAL1: ", cookie_value)
+    try:
+        # turn value into unicode (py2.x) / str (py3.x)
+        cookie_value = cookie_value.decode('utf-8')
+    except AttributeError:                         # pragma: no cover
+        pass
+    print("VAL2: ", cookie_value)
+    q = db.query(TicketGrantingCookie).filter(
+        TicketGrantingCookie.value == cookie_value)
+    result = [x for x in q]
+    if len(result):
+        return result[0]
+    return None
+
+
 class CASServer(object):
     """A WSGI CAS server.
@@ -142 +163 @@
         password = req.POST.get('password', None)
         valid_lt = check_login_ticket(self.db, req.POST.get('lt'))
-        if username and password and valid_lt:
+        tgc = req.cookies.get('cas-tgc', None)
+        print('TGC: ', tgc)
+        tgc = check_session_cookie(self.db, tgc)
+        print("TGC2: ", tgc)
+        print([(x, y) for x, y, in req.headers.items()])
+        if username and password and valid_lt or tgc:
             # act as credentials acceptor
-            cred_ok, reason = self.auth.check_credentials(username, password)
+            if tgc:
+                cred_ok, reason = True, ''
+                if not service:
+                    msg = 'You logged in already.'
+            else:
+                cred_ok, reason = self.auth.check_credentials(
+                    username, password)
             if cred_ok:
                 if service is None:
                     # show logged-in screen
                     html = self._get_template('login_successful.html')
+                    html = html.replace('MSG_TEXT', msg)
                     resp = Response(html)
-                    resp = set_session_cookie(resp, self.db)
+                    if not tgc:
+                        resp = set_session_cookie(resp, self.db)
                     return resp
                 else: