Ignore:
Timestamp:
04/06/10 14:10:37 (11 years ago)
Author:
pjkersha
Message:

NDG Security 1.5.5 Release

task 7: OpenID Provider crash with Java RP security filter
 http://proj.badc.rl.ac.uk/badc/ticket/21752

  • fix to OpenID Provider genshi template handler to skip AX processing if the Relying Party didn't request any attributes.
File:
1 edited

Legend:

Unmodified
Added
Removed
  • TI12-security/branches/ndg-security-1.5.x/ndg_security_server/ndg/security/server/wsgi/openid/provider/renderinginterface/genshi/__init__.py

    r6265 r6925  
    370370        # Get all the content namespaced as AX type 
    371371        axArgs = oidResponse.fields.getArgs(ax.AXMessage.ns_uri) 
    372          
    373         # Add to access object for convenient access based on type URI 
    374         axFetchResponse = ax.FetchResponse() 
    375         axFetchResponse.parseExtensionArgs(axArgs)   
    376          
    377         ax_req = ax.FetchRequest.fromOpenIDRequest(oidRequest) 
    378         axRequestedAttr = ax_req.requested_attributes 
     372        if not axArgs: 
     373            log.debug('No AX parameters were requested by the Relying Party %r', 
     374                      oidRequest.trust_root) 
     375            axRequestedAttr = {} 
     376            axFetchResponse = None 
     377        else: 
     378            log.debug('Relying Party %r requested the AX parameters %r', 
     379                      oidRequest.trust_root, axArgs) 
     380 
     381            # Add to access object for convenient access based on type URI 
     382            axFetchResponse = ax.FetchResponse() 
     383            axFetchResponse.parseExtensionArgs(axArgs)   
     384             
     385            ax_req = ax.FetchRequest.fromOpenIDRequest(oidRequest) 
     386            axRequestedAttr = ax_req.requested_attributes 
     387             
    379388        self.environ = environ 
    380389         
Note: See TracChangeset for help on using the changeset viewer.