def handle_discovery_response(self, request):
"""Handle SAML Discovery Service response. This method is basically
a wrapper around `authenticate` with a little extra logic for getting
the `entityID` out of the request and the next_url and binding that was
previously submitted to `authenticate` from the user's session.
Args:
request (Request): Flask request object for this HTTP transaction.
Returns:
Flask Response object to return to user containing either
HTTP_REDIRECT or HTTP_POST SAML message.
Raises:
AuthException: when unable to locate valid IdP.
BadRequest: when invalid result returned from SAML client.
"""
session_id = request.args.get('session_id')
next_url = "/"
# Retrieve cache. Get `next_url` from cache.
outstanding_queries_cache = \
AuthDictCache(session, '_saml_outstanding_queries')
if session_id in outstanding_queries_cache.keys():
next_url = outstanding_queries_cache[session_id]
del outstanding_queries_cache[session_id]
outstanding_queries_cache.sync()
# Get the selected IdP from the Discovery Service response.
selected_idp = Saml2Client.parse_discovery_service_response(
query=request.query_string)
return self.authenticate(next_url=next_url, selected_idp=selected_idp)
def handle_discovery_response(self, request):
"""Handle SAML Discovery Service response. This method is basically
a wrapper around `authenticate` with a little extra logic for getting
the `entityID` out of the request and the next_url and binding that was
previously submitted to `authenticate` from the user's session.
Args:
request (Request): Flask request object for this HTTP transaction.
Returns:
Flask Response object to return to user containing either
HTTP_REDIRECT or HTTP_POST SAML message.
Raises:
AuthException: when unable to locate valid IdP.
BadRequest: when invalid result returned from SAML client.
"""
session_id = request.args.get('session_id')
next_url = "/"
# Retrieve cache. Get `next_url` from cache.
outstanding_queries_cache = \
AuthDictCache(session, '_saml_outstanding_queries')
if session_id in outstanding_queries_cache.keys():
next_url = outstanding_queries_cache[session_id]
del outstanding_queries_cache[session_id]
outstanding_queries_cache.sync()
# Get the selected IdP from the Discovery Service response.
selected_idp = Saml2Client.parse_discovery_service_response(
query=request.query_string)
return self.authenticate(next_url=next_url, selected_idp=selected_idp)
