Name	Size	Mode	Actions
examples/	-	0755	rm
fixtures/	-	0755	rm
test_auth_adfs.py	10180	0644	editdlrm
test_auth_adfs.pyc	9726	0644	editdlrm
test_auth_saml2.py	10704	0644	editdlrm
test_auth_saml2.pyc	9577	0644	editdlrm
utils.py	1120	0644	editdlrm
utils.pyc	1653	0644	editdlrm
__init__.py	0	0644	editdlrm
__init__.pyc	172	0644	editdlrm

Ñò 7 Wc @s‰dd
kZddk
lZ
ddklZ
ddklZ
ddkl Z
ddklZ
ddkl Z
deif
d „ƒYZd
S( iÿÿÿÿN(
tetree(
t exceptions(
t_saml2(
tfixtures(
tutils(
tmatcherstAuthenticateviaSAML2Testsc
Bs›eZ
dZeiƒiZd
„Zd„Zd„Z d„Z d„Zd„Zd„Z d„Zd „Zd „Zd„Zd„Zd „Zd„ZRS(tauthc

Csätt
|ƒiƒ
hd
d6dd6|_h
dd6|_hdd6d d 6dd6|_d |_d|_d|_d|_ d|_ d|_d|idf|_ d|_ti|i|i |i |i|i|iƒ|_dS(Ns#text/html; application/vnd.paos+xmltAcceptsMver="urn:liberty:paos:2003-08";"urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp"tPAOSsapplication/vnd.paos+xmlsContent-Types,urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecptecps)http://schemas.xmlsoap.org/soap/envelope/t
Ssurn:liberty:paos:2003-08tpaoss//ecp:RelayStates6/S:Envelope/S:Header/paos:Request/@responseConsumerURLs>/S:Envelope/S:Header/ecp:Response/@AssertionConsumerServiceURLttestidpshttp://local.urltsaml2s%s/%ss=OS-FEDERATION/identity_providers/testidp/protocols/saml2/auths1https://openstack4.local/Shibboleth.sso/SAML2/ECP(tsuperRtsetUptECP_SP_EMPTY_REQUEST_HEADERStECP_SP_SAML2_REQUEST_HEADERStECP_SAML2_NAMESPACEStECP_RELAY_STATEt!ECP_SERVICE_PROVIDER_CONSUMER_URLtECP_IDP_CONSUMER_URLtIDENTITY_PROVIDERtIDENTITY_PROVIDER_URLtPROTOCOLtTEST_URLtFEDERATION_AUTH_URLtSHIB_CONSUMER_URLRtV3Saml2Passwordt TEST_USERt TEST_TOKENtsaml2plugin(
tself((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyRs0







 








c
Cs±|ii
|id
titiƒ
ƒ


|ii|i ƒ
}
|i |
ƒ

ti|ii ƒ
}|ititi|ƒ
ƒ
|i|ii|id|it|iiƒ
fƒ
dS(s'Test initial call, expect SOAP message.tcontents-Expected consumer_url set to %s instead of %sN(t requests_mocktgetRRtmake_onelinetsaml2_fixturestSP_SOAP_RESPONSER t_send_service_provider_requesttsessiontassertFalseRttostringtsaml2_authn_requestt assertThatRt XMLEqualstassertEqualtsp_response_consumer_urlRtstr(R!t
atsp_soap_response((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_initial_sp_callDs


 




c
Cs™|ii
|id
tidh
tid6ƒ

|ii|iƒ
}
|i |
ƒ

|i tid|iiiƒdƒ
|i ti|iii dƒ
dS(NtjsontheaderssX-Subject-Tokenttoken(R#R$RR&tUNSCOPED_TOKENtUNSCOPED_TOKEN_HEADERR R(R)t assertTrueR/tauthenticated_responseR5R6(R!R2((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt,test_initial_sp_call_when_saml_authenticatedXs










c
Csb|ii
|id
tidhtid6dd6ƒ

|ii|iƒ
}
|i ti|
i ƒ
dS(NR5R6sX-Subject-Tokensapplication/jsonsContent-Type(R#R$RR&R8R9R tget_auth_refR)R/t auth_token(R!R7((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt*test_get_unscoped_token_when_authenticatedgs





c

Cs<|ii
|id
dƒ


|iti|ii|iƒ
dS(s?Send initial SP HTTP request and receive wrong server response.ttextsNON XML RESPONSEN( R#R$RtassertRaisesR
tAuthorizationFailureR R(R)(
R!((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt%test_initial_sp_call_invalid_responsess



c
Cs‹|ii
|id
tiƒ


|i|i_ti ti ƒ
|i_|ii|i ƒ

ti|iiƒ
}
|i|
titiƒ
ƒ
dS(NR"(R#tpostRR&tSAML2_ASSERTIONRR R0RtXMLR'R,t_send_idp_saml2_authn_requestR)R+tsaml2_idp_authn_responseR-RR.(R!tidp_response((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_send_authn_req_to_idp}s






c

Csc|ii
|id
dƒ


|i|i_titi ƒ
|i_ |iti |ii|iƒ
dS(Ntstatus_codei‘
(R#RDRRR R0RRFR&R'R,RAR
tUnauthorizedRGR)(
R!((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt&test_fail_basicauth_idp_authenticationŒs







c

Cs)|it
ti|i|i|iƒ
dS(
N(RAt TypeErrorRRRRR(
R!((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt'test_mising_username_password_in_plugin˜s



c
Csî|ii
|id
tidh
tid6ƒ

titiƒ
i |i d|iƒ

d|i_ titiƒ
|i_|i|i_|ii|iƒ

|iiiƒd}
|iiid}|itid|
ƒ
|iti|ƒ
dS(NR5R6sX-Subject-Tokent namespacesiR7(R#RDRR&R8R9RRFR'txpathRRR trelay_stateRERHtidp_response_consumer_urlt+_send_service_provider_saml2_authn_responseR)R;R5R6R/(R!t token_jsonR7((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_send_authn_response_to_spžs&














c

Cs#|ii
|i|i|iƒ
dS(
N(R t_check_consumer_urlsR)R(
R!((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt"test_consumer_url_mismatch_success·s


c
CsN|ii
|iƒ

tiƒi}
|iti|i i |i|i|
ƒ
dS(
N(R#RDRtuuidtuuid4thexRAR
RBR RWR)(R!tinvalid_consumer_url((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_consumer_url_mismatch¼s






c
Csý|ii
|id
ddh
|id6ddƒ

|ii|idtidh
tid6ƒ

t|i _ |i i
|id d ƒ

}
|id|
iƒ
|i|i|
i dƒ
|ii|i |
dƒ}
|i|i|
iiƒ
|id|
iiƒ
dS(NR@tBODYR6tlocationRKi.
R5sX-Subject-TokentdatasCLIENT BODYtGET(R#RDRRR$R&R8R9tFalseR)tredirectR/RKR6R t_handle_http_ecp_redirecttrequestturltmethod(R!tresponse((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_custom_302_redirectionÅs&














c
Csý|ii
|id
ddh
|id6ddƒ

|ii|idtidh
tid6ƒ

t|i _ |i i
|id d ƒ

}
|id|
iƒ
|i|i|
i dƒ
|ii|i |
dƒ}
|i|i|
iiƒ
|id|
iiƒ
dS(NR@R^R6R_RKi/
R5sX-Subject-TokenR`sCLIENT BODYRa(R#RDRRR$R&R8R9RbR)RcR/RKR6R RdReRfRg(R!Rh((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_custom_303_redirectionÞs&














c
Cs¯|ii
|id
titiƒ
ƒ


|ii|id
ti ƒ


|ii|i dtidhtid6dd6ƒ

t |i_|ii|iƒ
}
|iti|
iƒ
dS(NR"R5R6sX-Subject-Tokensapplication/jsonsContent-Type(R#R$RRR%R&R'RDRRERR8R9RbR)RcR R=R/R>(R!Rh((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyttest_end_to_end_workflow÷s










(t__name__t __module__tGROUPRYRZR[RRR4R<R?RCRJRMRORVRXR]RiRjRk(((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyRs 
 '          (RYtlxmlRt keystoneauth1R
tkeystoneauth1.extrasRRt%keystoneauth1.tests.unit.extras.saml2RR&Rtkeystoneauth1.tests.unitRtTestCaseR(((s\/tmp/pip-build-wCUybK/keystoneauth1/keystoneauth1/tests/unit/extras/saml2/test_auth_saml2.pyt s