def test_rewrite_name_id_disabled(self):
light_response_data = LIGHT_RESPONSE_DICT.copy()
light_response_data['status'] = Status(**light_response_data['status'])
light_response_data['subject_name_id_format'] = NameIdFormat.PERSISTENT
view = IdentityProviderResponseView()
view.light_response = LightResponse(**light_response_data)
view.auxiliary_data = {}
view.rewrite_name_id()
self.assertEqual(view.light_response.subject_name_id_format, NameIdFormat.PERSISTENT)
self.assertEqual(view.light_response.subject, 'CZ/CZ/ff70c9dd-6a05-4068-aaa2-b57be4f328e9')
def test_create_light_token(self, uuid_mock: MagicMock):
view = IdentityProviderResponseView()
view.request = self.factory.post(self.url)
light_response_data = LIGHT_RESPONSE_DICT.copy()
light_response_data['status'] = Status(**light_response_data['status'])
view.light_response = LightResponse(**light_response_data)
token, encoded_token = view.create_light_token('test-token-issuer', 'sha256', 'test-secret')
self.assertEqual(token.id, 'T0uuid4')
self.assertEqual(token.issuer, 'test-token-issuer')
self.assertEqual(token.created, datetime(2017, 12, 11, 16, 12, 5))
self.assertEqual(token.encode('sha256', 'test-secret').decode('ascii'), encoded_token)
self.assertEqual(uuid_mock.mock_calls, [call()])
def test_post_success(self, uuid_mock: MagicMock):
with cast(BinaryIO, (DATA_DIR / 'saml_response.xml').open('rb')) as f:
saml_request_xml = f.read()
response = self.client.post(self.url, {'SAMLResponse': b64encode(saml_request_xml).decode('ascii'),
'RelayState': 'relay123'})
# Context
self.assertIn('token', response.context)
self.assertEqual(response.context['token_parameter'], 'test_token')
self.assertEqual(response.context['eidas_url'], 'https://test.example.net/SpecificProxyServiceResponse')
self.assertEqual(response.context['error'], None)
# Token
encoded_token = response.context['token']
token = LightToken.decode(encoded_token, 'sha256', 'response-token-secret')
self.assertEqual(token.id, 'T0uuid4')
self.assertEqual(token.issuer, 'response-token-issuer')
self.assertEqual(token.created, datetime(2017, 12, 11, 14, 12, 5))
# Storing light response
light_response_data = LIGHT_RESPONSE_DICT.copy()
light_response_data.update({
'status': Status(**light_response_data['status']),
'id': 'test-saml-response-id', # Preserved
'in_response_to_id': 'test-saml-request-id', # Preserved
'issuer': 'https://test.example.net/node-proxy-service-response', # Replaced
})
light_response = LightResponse(**light_response_data)
self.assertEqual(self.client_class_mock.mock_calls, [call(timeout=66)])
self.assertEqual(self.client_mock.mock_calls,
[call.connect('test.example.net', 1234),
call.get_cache('test-proxy-service-response-cache'),
call.get_cache().put('T0uuid4', dump_xml(light_response.export_xml()).decode('utf-8'))])
# Rendering
self.assertContains(response, 'Redirect to eIDAS Node is in progress')
self.assertContains(response,
'<form class="auto-submit" action="https://test.example.net/SpecificProxyServiceResponse"')
self.assertContains(response, '<input type="hidden" name="test_token" value="{}"'.format(encoded_token))
self.assertNotIn(b'An error occurred', response.content)
from datetime import datetime, timedelta
from typing import Any, BinaryIO, TextIO, cast
from unittest.mock import call, patch
from django.test import SimpleTestCase
from lxml.etree import Element, ElementTree, SubElement
from eidas_node.constants import LevelOfAssurance, StatusCode, SubStatusCode, XmlBlockCipher, XmlKeyTransport
from eidas_node.errors import ParseError, SecurityError, ValidationError
from eidas_node.models import LightRequest, LightResponse, Status
from eidas_node.saml import EIDAS_NAMESPACES, Q_NAMES, SAMLRequest, SAMLResponse, create_attribute_elm_attributes
from eidas_node.tests.constants import CERT_FILE, DATA_DIR, KEY_FILE, NIA_CERT_FILE, SIGNATURE_OPTIONS
from eidas_node.tests.test_models import FAILED_LIGHT_RESPONSE_DICT, LIGHT_REQUEST_DICT, LIGHT_RESPONSE_DICT
from eidas_node.xml import SignatureInfo, dump_xml, parse_xml, remove_extra_xml_whitespace
LIGHT_RESPONSE_DICT = LIGHT_RESPONSE_DICT.copy()
FAILED_LIGHT_RESPONSE_DICT = FAILED_LIGHT_RESPONSE_DICT.copy()
OVERRIDES = {
'id': 'test-saml-response-id',
'in_response_to_id': 'test-saml-request-id',
'issuer': 'test-saml-response-issuer',
}
LIGHT_RESPONSE_DICT.update(OVERRIDES)
LIGHT_RESPONSE_DICT['level_of_assurance'] = LevelOfAssurance.LOW
FAILED_LIGHT_RESPONSE_DICT.update(OVERRIDES)
LIGHT_REQUEST_DICT = LIGHT_REQUEST_DICT.copy()
LIGHT_REQUEST_DICT.update({
'id': 'test-saml-request-id',
'issuer': 'test-saml-request-issuer'
})