1 files changed, 130 insertions, 0 deletions
diff --git a/baserock_openid_provider/openid_provider/utils.py b/baserock_openid_provider/openid_provider/utils.py
new file mode 100644
index 00000000..dc0c714f
--- /dev/null
+++ b/baserock_openid_provider/openid_provider/utils.py
@@ -0,0 +1,130 @@
+# -*- coding: utf-8 -*- vim: set et ts=4 sw=4 :
+# some code from http://www.djangosnippets.org/snippets/310/ by simon
+# and from examples/djopenid from python-openid-2.2.4
+from hashlib import sha1
+from openid_provider import conf
+from openid.extensions import ax, sreg
+from openid.server.server import Server, BROWSER_REQUEST_MODES
+from openid.server.trustroot import verifyReturnTo
+from openid.yadis.discover import DiscoveryFailure
+from openid.fetchers import HTTPFetchingError
+
+from django.core.exceptions import ImproperlyConfigured
+from django.core.urlresolvers import reverse
+from django.http import HttpResponse
+from django.shortcuts import render_to_response
+
+from importlib import import_module
+
+import logging
+
+logger = logging.getLogger(__name__)
+
+def import_module_attr(path):
+    package, module = path.rsplit('.', 1)
+    return getattr(import_module(package), module)
+
+def get_username(u):
+    if hasattr(u, 'get_username'):
+        return u.get_username()
+    return u.username
+
+def get_default_sreg_data(request, orequest):
+    return {
+        'email': request.user.email,
+        'nickname': get_username(request.user),
+        'fullname': request.user.get_full_name(),
+    }
+
+def get_default_ax_data(request, orequest):
+    return {
+        'http://axschema.org/contact/email': request.user.email,
+        'http://axschema.org/namePerson': request.user.get_full_name(),
+        'http://axschema.org/namePerson/friendly': get_username(request.user),
+        'http://axschema.org/namePerson/first': request.user.first_name,
+        'http://axschema.org/namePerson/last': request.user.last_name,
+    }
+
+def add_sreg_data(request, orequest, oresponse):
+    callback = get_sreg_callback()
+    if callback is None or not callable(callback):
+        return
+    sreg_data = callback(request, orequest)
+    sreg_req = sreg.SRegRequest.fromOpenIDRequest(orequest)
+    sreg_resp = sreg.SRegResponse.extractResponse(sreg_req, sreg_data)
+    oresponse.addExtension(sreg_resp)
+
+def add_ax_data(request, orequest, oresponse):
+    callback = get_ax_callback()
+    if callback is None or not callable(callback):
+        return
+    ax_data = callback(request, orequest)
+    ax_req = ax.FetchRequest.fromOpenIDRequest(orequest)
+    ax_resp = ax.FetchResponse(ax_req)
+    if ax_req is not None:
+        for attr in ax_req.getRequiredAttrs():
+            value = ax_data.get(attr, None)
+            if value is not None:
+                ax_resp.addValue(attr, value)
+    oresponse.addExtension(ax_resp)
+
+def get_sreg_callback():
+    try:
+        return import_module_attr(conf.SREG_DATA_CALLBACK)
+    except (ImportError, AttributeError):
+        return None
+
+def get_ax_callback():
+    try:
+        return import_module_attr(conf.AX_DATA_CALLBACK)
+    except (ImportError, AttributeError):
+        return None
+
+def get_store(request):
+    try:
+        store_class = import_module_attr(conf.STORE)
+    except ImportError:
+        raise ImproperlyConfigured(
+            "OpenID store %r could not be imported" % conf.STORE)
+    # The FileOpenIDStore requires a path to save the user files.
+    if conf.STORE == 'openid.store.filestore.FileOpenIDStore':
+        return store_class(conf.FILESTORE_PATH)
+    return store_class()
+
+def trust_root_validation(orequest):
+    """
+    OpenID specs 9.2.1: using realm for return url verification
+    """
+    try:
+        return verifyReturnTo(
+            orequest.trust_root, orequest.return_to) and "Valid" or "Invalid"
+    except HTTPFetchingError:
+        return "Unreachable"
+    except DiscoveryFailure:
+        return "DISCOVERY_FAILED"
+
+def get_trust_session_key(orequest):
+    return 'OPENID_' + sha1(
+        orequest.trust_root + orequest.return_to).hexdigest()
+
+def prep_response(request, orequest, oresponse, server=None):
+    # Convert a webresponse from the OpenID library in to a Django HttpResponse
+
+    if not server:
+        server = Server(get_store(request),
+            op_endpoint=request.build_absolute_uri(
+                reverse('openid-provider-root')))
+    webresponse = server.encodeResponse(oresponse)
+    if webresponse.code == 200 and orequest.mode in BROWSER_REQUEST_MODES:
+        response = render_to_response('openid_provider/response.html', {
+            'body': webresponse.body,
+        }, context_instance=RequestContext(request))
+        logger.debug('rendering browser response')
+    else:
+        response = HttpResponse(webresponse.body)
+        response.status_code = webresponse.code
+        for key, value in webresponse.headers.items():
+            response[key] = value
+        logger.debug('rendering raw response')
+    return response
+