Changeset 7476

Timestamp:

10/09/10 17:13:37 (11 years ago)

Author:

pjkersha

Message:

Incomplete - task 13: OpenID Provider doesn't validate OpenID against username

• Fix to SessionHandlerMiddleware?.init for new logout option.

Location:

TI12-security/branches/ndg-security-1.5.x

Files:

• ndg_security_server/ndg/security/server/wsgi/session.py (modified) (1 diff)
• ndg_security_test/ndg/security/test/config/attributeauthority/sitea/attributeCertificateLog/ac.xml (modified) (2 diffs)

TI12-security/branches/ndg-security-1.5.x/ndg_security_server/ndg/security/server/wsgi/session.py

@@ -128 +128 @@
                 raise SessionHandlerMiddlewareConfigError(
                                         '"signoutPath" parameter is not set')
-                
+        
+        cls = self.__class__
         defaultLogoutReturnToURIParamName = prefix + \
                                         cls.DEFAULT_LOGOUT_RETURN2URI_PARAMNAME

TI12-security/branches/ndg-security-1.5.x/ndg_security_test/ndg/security/test/config/attributeauthority/sitea/attributeCertificateLog/ac.xml

@@ -9 +9 @@
         <userId>testuser</userId>
         <validity>
-            <notBefore>2010 09 10 09 33 05</notBefore> 
-            <notAfter>2010 09 10 17 33 05</notAfter> 
+            <notBefore>2010 09 10 16 12 44</notBefore> 
+            <notAfter>2010 09 11 00 12 44</notAfter> 
         </validity>
         <attributes>
@@ -33 +33 @@
         <provenance>original</provenance> 
     </acInfo>
-<ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="ds"></ec:InclusiveNamespaces></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod><ds:Reference URI=""><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xmlns"></ec:InclusiveNamespaces></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod><ds:DigestValue>y3/SZ5I9Qc01pE1Vw+iUk7qMwjk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>gT9QCgi2HfJZfwxODDt4egD+2K7jjoW4jP50ZDwJrF7nOOxQEllz1fvkqLVkUj8CDZhRuCnPdWzi
-2QOF/YhU7sniqS8tdR9QIgx/GT6qRNsTwhBWTNsmE01zH7SVAoMuOASf19SYfoklEQ6ocC1Jmrg/
-eXqVgspjZ6nTriYXd/A=</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIB+jCCAWOgAwIBAgIBFDANBgkqhkiG9w0BAQQFADAzMQwwCgYDVQQKEwNOREcx
+<ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="ds"></ec:InclusiveNamespaces></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod><ds:Reference URI=""><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xmlns"></ec:InclusiveNamespaces></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod><ds:DigestValue>+cF12PSWZtxi5U6tGBDgyczbhbo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>dbXp7OLiourx0FyguwVMK79jKD6UXGCIxd8gkM9arM6oC+j4lxaGLQfaQYT1qyRJjDuFA5emXh/6
+ZbjPsdLro+QiBBV4bpbWdLCCn1V2HuBXwSF2qDmMUitha8mAXeeg9gw+E3x5nusApRdnCVqfG8Ct
+pnWvESO/o46jeQO0/FE=</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIB+jCCAWOgAwIBAgIBFDANBgkqhkiG9w0BAQQFADAzMQwwCgYDVQQKEwNOREcx
 ETAPBgNVBAsTCFNlY3VyaXR5MRAwDgYDVQQDEwdUZXN0IENBMB4XDTEwMDYyOTEw
 NTQxOFoXDTExMDYyOTEwNTQxOFowPDEMMAoGA1UEChMDTkRHMQ8wDQYDVQQLEwZT