trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sources/saml: automatically add RelayState to build_auth_n_detached

This commit is contained in:
Jens Langhammer 2020-07-12 01:46:46 +02:00
parent a393097504
commit 91766a2162
2 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
passbook/sources/saml/processors/request.py
View File

@ -24,12 +24,15 @@ class RequestProcessor:
source: SAMLSource source: SAMLSource
http_request: HttpRequest http_request: HttpRequest
relay_state: str
request_id: str request_id: str
issue_instant: str issue_instant: str
def __init__(self, source: SAMLSource, request: HttpRequest): def __init__(self, source: SAMLSource, request: HttpRequest, relay_state: str):
self.source = source self.source = source
self.http_request = request self.http_request = request
self.relay_state = relay_state
self.request_id = get_random_id() self.request_id = get_random_id()
self.issue_instant = get_time_string() self.issue_instant = get_time_string()
@ -86,6 +89,7 @@ class RequestProcessor:
"SAMLRequest": deflate_and_base64_encode( "SAMLRequest": deflate_and_base64_encode(
etree.tostring(auth_n_request).decode() etree.tostring(auth_n_request).decode()
), ),
"RelayState": self.relay_state
} }
if self.source.signing_kp: if self.source.signing_kp:

7
passbook/sources/saml/views.py
View File

@ -31,13 +31,10 @@ class InitiateView(View):
if not source.enabled: if not source.enabled:
raise Http404 raise Http404
relay_state = request.GET.get("next", "") relay_state = request.GET.get("next", "")
request.session["sso_destination"] = relay_state auth_n_req = RequestProcessor(source, request, relay_state)
auth_n_req = RequestProcessor(source, request)
# If the source is configured for Redirect bindings, we can just redirect there # If the source is configured for Redirect bindings, we can just redirect there
if source.binding_type == SAMLBindingTypes.Redirect: if source.binding_type == SAMLBindingTypes.Redirect:
url_params = auth_n_req.build_auth_n_detached() url_args = urlencode(auth_n_req.build_auth_n_detached())
url_params["RelayState"] = relay_state
url_args = urlencode(url_params)
return redirect(f"{source.sso_url}?{url_args}") return redirect(f"{source.sso_url}?{url_args}")
# As POST Binding we show a form # As POST Binding we show a form
saml_request = nice64(auth_n_req.build_auth_n()) saml_request = nice64(auth_n_req.build_auth_n())