Changeset 10415 for main/waeup.cas

Timestamp:

7 Jul 2013, 16:11:22 (11 years ago)

Author:

uli

Message:

Support the /logout URL with CAS.

Location:

main/waeup.cas/trunk/waeup/cas

Files:

• server.py (modified) (1 diff)
• templates/logout.html (added)
• templates/logout_url.html (added)
• tests/test_server.py (modified) (2 diffs)

main/waeup.cas/trunk/waeup/cas/server.py

@@ -286 +286 @@
 
     def logout(self, req):
-        return exc.HTTPNotImplemented()
+        url = req.GET.get('url', req.POST.get('url', None))
+        old_val = req.cookies.get('cas-tgc', None)
+        html = self._get_template('logout.html')
+        if url is not None:
+            html = self._get_template('logout_url.html')
+            html = html.replace('URL_HREF', url)
+        resp = Response(html)
+        delete_session_cookie(self.db, resp, old_val)
+        return resp
+
 
 cas_server = CASServer

main/waeup.cas/trunk/waeup/cas/tests/test_server.py

@@ -104 +104 @@
         req = Request.blank('http://localhost/logout')
         resp = app(req)
-        assert resp.status == '501 Not Implemented'
+        assert resp.status == '200 OK'
 
     def test_login_simple(self):
@@ -217 +217 @@
         assert resp.status == '200 OK'
         assert b'CAS login successful' in resp.body
+
+    def test_logout_no_cookie(self):
+        # 2.3 logout displays a logout page.
+        app = CASServer()
+        req = Request.blank('https://localhost/logout')
+        resp = app(req)
+        assert resp.status == '200 OK'
+        assert b'logged out' in resp.body
+
+    def test_logout_with_cookie(self):
+        # 2.3 logout destroys any existing SSO session
+        app = CASServer()
+        tgc = create_tgc_value()
+        app.db.add(tgc)
+        value = str(tgc.value)
+        req = Request.blank('https://localhost/logout')
+        req.headers['Cookie'] = 'cas-tgc=%s' % value
+        resp = app(req)
+        assert resp.status == '200 OK'
+        assert b'logged out' in resp.body
+        assert 'Set-Cookie' in resp.headers
+        cookie = resp.headers['Set-Cookie']
+        assert cookie.startswith('cas-tgc=;')
+        assert 'expires' in cookie
+        assert 'Max-Age' in cookie
+        assert len(list(app.db.query(TicketGrantingCookie))) == 0
+
+    def test_logout_url(self):
+        # 2.3.1 with an `url` given we provide a link on logout
+        app = CASServer()
+        params = 'url=http%3A%2F%2Fwww.logout.com'
+        req = Request.blank('https://localhost/logout?%s' % params)
+        resp = app(req)
+        assert resp.status == '200 OK'
+        assert b'logged out' in resp.body
+        assert b'like you to' in resp.body
+        assert b'http://www.logout.com' in resp.body