1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
from contextlib import closing
from saml2.client import Saml2Client
from saml2.saml import AuthnContextClassRef
from saml2.server import Server
def test_authn_request_with_acs_by_index():
# ACS index and location from SP metadata in servera.xml.
ACS_INDEX = "4"
ACS_LOCATION = "http://lingon.catalogix.se:8087/another/path"
# Create SP using the configuration found in servera_conf.py.
sp = Saml2Client(config_file="servera_conf")
# Generate an authn request object that uses AssertionConsumerServiceIndex
# instead of AssertionConsumerServiceURL. The index with label ACS_INDEX
# exists in the SP metadata in servera.xml.
request_id, authn_request = sp.create_authn_request(sp.config.entityid, assertion_consumer_service_index=ACS_INDEX)
assert authn_request.requested_authn_context.authn_context_class_ref == [
AuthnContextClassRef(accr)
for accr in sp.config.getattr("requested_authn_context").get("authn_context_class_ref")
]
assert authn_request.requested_authn_context.comparison == (
sp.config.getattr("requested_authn_context").get("comparison")
)
# Make sure the authn_request contains AssertionConsumerServiceIndex.
acs_index = getattr(authn_request, "assertion_consumer_service_index", None)
assert acs_index == ACS_INDEX
# Create IdP.
with closing(Server(config_file="idp_all_conf")) as idp:
# Ask the IdP to pick out the binding and destination from the
# authn_request.
binding, destination = idp.pick_binding("assertion_consumer_service", request=authn_request)
# Make sure the IdP pick_binding method picks the correct location
# or destination based on the ACS index in the authn request.
assert destination == ACS_LOCATION
|
