/usr/lib/python2.6/site-packages/keystoneclient/tests/unit/v3
Edit: /usr/lib/python2.6/site-packages/keystoneclient/tests/unit/v3/test_auth_saml2.pyc (27228B)
/S:Envelope/S:Header/ecp:Response/@AssertionConsumerServiceURLt testidps http://local.urlR s %s/%ss= OS-FEDERATION/identity_providers/testidp/protocols/saml2/auths1 https://openstack4.local/Shibboleth.sso/SAML2/ECP( t superR t setUpt
useFixturet configt Configt conf_fixtureR t register_conf_optionst GROUPR t Sessiont ECP_SP_EMPTY_REQUEST_HEADERSt ECP_SP_SAML2_REQUEST_HEADERSt ECP_SAML2_NAMESPACESt ECP_RELAY_STATEt! ECP_SERVICE_PROVIDER_CONSUMER_URLt ECP_IDP_CONSUMER_URLt IDENTITY_PROVIDERt IDENTITY_PROVIDER_URLt PROTOCOLt TEST_URLt FEDERATION_AUTH_URLt SHIB_CONSUMER_URLR t Saml2UnscopedTokent TEST_USERt
TEST_TOKENt saml2plugin( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR1 ? s6
c
C s> t i i } t i i } t i i } t i i } t i i } | i i d | d | i t i | i i d | i | i i t i
i d | | i i d d d | d | d | d | d | t i | i i | i } | i
| | i | i
| | i | i
| | i | i
| | i d S( Nt auth_sectionR) t auth_plugint v3unscopedsamlt identity_providert identity_provider_urlt usernamet password( t uuidt uuid4t hexR5 R3 R7 R R6 t
register_optsR RE t get_optionst load_from_conf_optionst assertEqualRL RM RN RO ( R t sectionRL RM RN RO t a( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_conf_paramsj s( c C s | i i | i d t t i | i i | i } | i | t t i } t t
i | i i } d | | f } | i
| | | | i
| i i | i d | i t | i i f d S( s' Test initial call, expect SOAP message.t contents Expected %s instead of %ss- Expected consumer_url set to %s instead of %sN( t
requests_mockt getRC R R t SP_SOAP_RESPONSERH t _send_service_provider_requestR t assertFalseR R
t saml2_authn_requestRV t sp_response_consumer_urlRD t str( R RX t fixture_soap_responset sp_soap_responset error_msg( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_initial_sp_call s"
c C s | i i | i d t i d h t i d 6| i i | i } | i | | i
t i d | i i i d | i
t i | i i i
d d S( NR! R% s X-Subject-Tokent token( R[ R\ RC R R R$ RH R^ R t
assertTrueRV t authenticated_responseR! R% ( R RX ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt, test_initial_sp_call_when_saml_authenticated s
c C s| | i i | i d t i d h t i d 6d d 6| i i | i \ } } | i t i d | | i t i | d S( NR! R% s X-Subject-Tokens application/jsons Content-TypeRg (
R[ R\ RC R R R$ RH t _get_unscoped_tokenR RV ( R Rg t
token_body( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt* test_get_unscoped_token_when_authenticated s
c C s< | i i | i d d | i t i | i i | i d S( s? Send initial SP HTTP request and receive wrong server response.t texts NON XML RESPONSEN( R[ R\ RC t assertRaisesR t AuthorizationFailureRH R^ R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt% test_initial_sp_call_invalid_response s c C s | i i | i d t i | i | i _ t i t i
| i _ | i i | i
t t i | i i } t t i } d t i | f } | i | | | d S( NRZ s Expected %s instead of %s( R[ t postR@ R t SAML2_ASSERTIONRD RH Ra R R R] R` t _send_idp_saml2_authn_requestR R R
t saml2_idp_authn_responseRV ( R t idp_responset saml2_assertion_onelinet error( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_send_authn_req_to_idp s
c C sc | i i | i d d | i | i _ t i t i | i _
| i t i
| i i | i d S( Nt status_codei ( R[ Rr R@ RD RH Ra R R R R] R` Ro R t UnauthorizedRt R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt& test_fail_basicauth_idp_authentication s c C s) | i t t i | i | i | i d S( N( Ro t TypeErrorR RE RB R? R@ ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt' test_mising_username_password_in_plugin s c C s | i i | i d t i d h t i d 6t i t i i | i
d | i d | i _
t i t i | i _ | i | i _ | i i | i | i i i d } | i i i d } | i t i d | | i t i | d S( NR! R% s X-Subject-Tokent
namespacesi Rg ( R[ Rr RD R R R$ R R R] t xpathR< R; RH t relay_stateRs Ru t idp_response_consumer_urlt+ _send_service_provider_saml2_authn_responseR Ri R! R% RV ( R t
token_jsonRg ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_send_authn_response_to_sp s&
c C s# | i i | i | i | i d S( N( RH t _check_consumer_urlsR RD ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt" test_consumer_url_mismatch_success s c C sN | i i | i t i i } | i t i | i i
| i | i | d S( N( R[ Rr RD RP RQ RR Ro R t ValidationErrorRH R R ( R t invalid_consumer_url( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_consumer_url_mismatch s c C s | i i | i d d d h | i d 6d d | i i | i d t i d h t i d 6t | i _
| i i | i d d
} | i d | i | i | i | i
d | i i | i | d } | i | i | i i | i d | i i d S( NRn t BODYR% t locationRz i. R! s X-Subject-Tokent datas CLIENT BODYt GET( R[ Rr RD RC R\ R R R$ t FalseR t redirectRV Rz R% RH t _handle_http_302_ecp_redirectt requestt urlt method( R t response( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_custom_302_redirection s& c C s | i i | i d t t i | i i | i d t i | i i | i d t i
d h t i d 6d d 6t | i
_ | i i | i
} | i t i | i d S( NRZ R! R% s X-Subject-Tokens application/jsons Content-Type( R[ R\ RC R R R] Rr R@ Rs RD R R$ R R R RH t get_auth_refRV t
auth_token( R R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_end_to_end_workflow$ s
( R" R# R7 t objectR R& R( R1 RY Rf Rj Rm Rq Ry R| R~ R R R R R ( ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR + s$ +
t ScopeFederationTokenTestsc B sG e Z e i Z d Z d Z d Z d Z d Z d Z
RS( c C s t t | i t i | _ d g | i d <| i i | _ | i i | _ t i
| _ d g | i d <| i i | _
| i i | _ t i | i t i d | i | _ d S( NR t methodst
project_id( R0 R R1 R t project_scoped_tokent PROJECT_SCOPED_TOKEN_JSONR t TEST_TENANT_IDt project_namet TEST_TENANT_NAMEt domain_scoped_tokent DOMAIN_SCOPED_TOKEN_JSONt domain_idt TEST_DOMAIN_IDt domain_namet TEST_DOMAIN_NAMER t Saml2ScopedTokenRB R R$ t saml2_scope_plugin( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR1 < s c C s | i d | i | i i | i } | i | i d | i t i | i
| i | i | i | i | i
| i d S( NR! s Received token is not scoped( t stub_authR R R R Rh t project_scopedRV R t AUTH_SUBJECT_TOKENR R R R R ( R Rg ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt! test_scope_saml2_token_to_projectQ s c C sT | i d d t i i | i _ d | i _ | i t i
| i i | i d S( NRz i (
R RP RQ RR R R t NoneR Ro R R{ R R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt) test_scope_saml2_token_to_invalid_projectZ s c C sl | i d d d | i _ d | i _ t i i | i _ d | i _ | i
t i | i i
| i d S( NRz i ( R R R R R RP RQ RR R R Ro R R{ R R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt( test_scope_saml2_token_to_invalid_domainb s c C s | i d | i | i i | i } | i | i d | i t i | i
| i | i | i | i | i
| i d S( NR! s Received token is not scoped( R R R R R Rh t
domain_scopedRV R R R R R R R ( R Rg ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_scope_saml2_token_to_domainl s c C s> d | i _ d | i _ | i t i t i | i t
i d S( N( R R R R Ro R R R R RB R R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_dont_set_project_nor_domaint s
( R" R# R R RG R1 R R R R R ( ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR 8 s
t AuthenticateviaADFSTestsc B s e Z d Z h d d 6d d 6d d 6d d 6d d 6d
d 6Z d Z d
Z d Z d Z e d Z d Z
d Z d Z d Z
d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( R s' http://www.w3.org/2003/05/soap-envelopeR s0 http://docs.oasis-open.org/ws-sx/ws-trust/200512t trusts$ http://www.w3.org/2005/08/addressingt wsas, http://schemas.xmlsoap.org/ws/2004/09/policyt wspRX sQ http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsdt os: /s:Envelope/s:Header/o:Security/o:UsernameToken/o:Usernames: /s:Envelope/s:Header/o:Security/o:UsernameToken/o:Passwords] /s:Envelope/s:Body/trust:RequestSecurityToken/wsp:AppliesTo/wsa:EndpointReference/wsa:Addresss /s:Envelope/s:Header/a:Toc C s d S( Ns$ 4b911420-4982-4009-8afc-5c596cd487f5( ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt _uuid4 s c C s t t | i | i t i | _ t i | i i d | i t
i d t i | _
d | _
d | _ d | i d f | _ d | _ t i | i | i
| i | i | i | i | _ t d | _ t d | _ d S(
NR) R t adfss5 http://adfs.local/adfs/service/trust/13/usernamemixeds %s/%ss: OS-FEDERATION/identity_providers/adfs/protocols/saml2/auths, https://openstack4.local/Shibboleth.sso/ADFSs% ADFS_RequestSecurityTokenResponse.xmls ADFS_fault.xml( R0 R R1 R2 R3 R4 R5 R R6 R7 R R8 t requestsR? R@ RB RC t SP_ENDPOINTR t ADFSUnscopedTokenRF RG t
adfspluginR t ADFS_SECURITY_TOKEN_RESPONSEt
ADFS_FAULT( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR1 s"
c C sf t i i } t i i } t i i } t i i } t i i } t i i } | i i d | d | i t i | i i d | i | i i t i
i d | | i i d d d | d | d | d | d | d | t i | i i | i } | i
| | i | i
| | i | i
| | i | i
| | i | i
| | i d S(
NRI R) RJ t v3unscopedadfsRL RM t service_provider_endpointRN RO ( RP RQ RR R5 R3 R7 R R6 RS R R RT RU RV RL RM R RN RO ( R RW RL RM t sp_endpointRN RO RX ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyRY s. c C sz | i i | i d t | i d d | i i | i i | i t i
| i i } | i } | i | | d S( s2 Test ADFSUnscopedToken._get_adfs_security_token().RZ Rz i N(
R[ Rr R@ R R R t _prepare_adfs_requestt _get_adfs_security_tokenR R R
t
adfs_tokenRV ( R t
adfs_responset fixture_response( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_get_adfs_security_token s
c C sL | i i | i i i | i d | i d } | i | i | i d S( NR i ( R R t prepared_requestR t
USER_XPATHt
NAMESPACESRV RF Rn ( R t user( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_adfs_request_user s
c C sL | i i | i i i | i d | i d } | i | i | i d S( NR i ( R R R R t PASSWORD_XPATHR RV RG Rn ( R RO ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_adfs_request_password s
c C sL | i i | i i i | i d | i d } | i | i | i d S( NR i ( R R R R t TO_XPATHR RV R@ Rn ( R t to( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_adfs_request_to s
c C sL | i i | i i i | i d | i d } | i | i | i d S( NR i ( R R R R t
ADDRESS_XPATHR RV R Rn ( R t address( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt! test_prepare_adfs_request_address s
c C s t i | i } | i t i i d t i i } | d } t i | } | i d d } t
i i | } d | } t i | i | i
_ | i
i | i | | i
i d S( NR i s0 http://docs.oasis-open.org/ws-sx/ws-trust/200512s+ http://schemas.xmlsoap.org/ws/2005/02/trusts wa=wsignin1.0&wresult=( R R R R R R t ADFS_ASSERTION_XPATHt ADFS_TOKEN_NAMESPACESR
R R t parset quoteR R t _prepare_sp_requestRV t encoded_assertion( R t assertion( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_prepare_sp_request s
c C sX | i i | i d t | i d d | i i | i t i | i i
| i d S( s Test proper parsing XML fault after bad authentication.
An exceptions.AuthorizationFailure should be raised including
error message from the XML message indicating where was the problem.
RZ Rz i N( R[ Rr R@ R R R R Ro R Rp R R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt' test_get_adfs_security_token_authn_fail s
c C sO | i i | i d d d d | i i | i t i | i i | i d S( s Test proper handling HTTP 500 and mangled (non XML) response.
This should never happen yet, keystoneclient should be prepared
and correctly raise exceptions.InternalServerError once it cannot
parse XML fault message
RZ s NOT XMLRz i N(
R[ Rr R@ R R Ro R t InternalServerErrorR R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt) test_get_adfs_security_token_bad_response s
c C s t i i } | i i | i d h | d 6d d | i | i _ | i i | i i
| i | i d t
| i i i d S( s Test whether SP issues a cookie.R% s
set-cookieRz i. i N( RP RQ RR R[ Rr R t _build_adfs_requestR R R t# _send_assertion_to_service_providerR RV t lent cookies( R t cookie( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR / s
c C sa | i i | i d d t i | i | i _ | i i | i t
i | i i | i
d S( NRz i ( R[ Rr R R R R R R R Ro R R R R ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt2 test_send_assertion_to_service_provider_bad_status= s
c C s# | i t i | i i | i d S( N( Ro R Rp R t _access_service_providerR ( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_access_sp_no_cookies_failI s c C s | i i | i d t i d t i t i i d | i
d | i
} | i i i i | | i
i | i | i
i } | i t i | i | i t i d | i d d S( NR! R% t namet valueRg ( R[ R\ RC R R R t AUTH_RESPONSE_HEADERSR R t
create_cookiet getUniqueStringR t
set_cookieR R Ri RV R% R! ( R R R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt) test_check_valid_token_when_authenticatedP s
c C s | i i | i d | i d d | i i | i d h d d 6d d | i i | i d t i d t i
t i i
d | i d
| i } | i i i i | | i i | i \ } } | i | t i | i t i d | d S( NRZ Rz i R% t xs
set-cookiei. R! R R Rg ( R[ Rr R@ R R R\ RC R R R R R R R R R R R Rk RV R ( R R Rg R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR c s
( R" R# R7 R R R R R t propertyR R1 RY R R R R R R R R R R R R R ( ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR | s8
t SAMLGenerationTestsc B s# e Z d Z d Z d Z RS( c C se t t | i | i i i | _ d i | i t i
g | _ d i | i t i g | _
d S( NR ( R0 R R1 t clientt
federationR
t managert joinRB t saml_managert SAML2_ENDPOINTt SAML2_FULL_URLt ECP_ENDPOINTt ECP_FULL_URL( R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR1 { s c C s t i i } t i i } | i i | i d t i | i i | | } | i
t i | | i i i } | i
| | d d d d | i
| | d d d d | i
d d d
S( s8 Test that a token can be exchanged for a SAML assertion.Rn R t identityRg t idt scopet service_providers Content-Types application/jsonN( RP RQ RR R[ Rr R R t TOKEN_BASED_SAMLR t create_saml_assertionRV t last_requestR! t assertRequestHeaderEqual( R t token_idt service_provider_idRn t req_json( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_saml_create s
c C s t i i } t i i } | i i | i d t i | i i | | } | i
t i | | i i i } | i
| | d d d d | i
| | d d d d | i
d d d
S( s@ Test that a token can be exchanged for an ECP wrapped assertion.Rn R R Rg R R R s Content-Types application/jsonN( RP RQ RR R[ Rr R R t TOKEN_BASED_ECPR t create_ecp_assertionRV R R! R ( R R R Rn R ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt test_ecp_create s
( R" R# R1 R R ( ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyR y s (& t osRP t lxmlR t oslo_configR R3 R t six.movesR t keystoneclient.authR t keystoneclient.contrib.auth.v3R t keystoneclientR R t keystoneclient.tests.unit.v3R R R t$ keystoneclient.v3.contrib.federationR
R t patht dirnamet abspatht __file__t ROOTDIRR R R R t TestCaseR R R R ( ( ( s[ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/tests/unit/v3/test_auth_saml2.pyt
s, D