File: start_session.py

package info (click to toggle)
thunderbird 1%3A143.0.1-1
  • links: PTS, VCS
  • area: main
  • in suites: experimental
  • size: 4,703,968 kB
  • sloc: cpp: 7,770,492; javascript: 5,943,842; ansic: 3,918,754; python: 1,418,263; xml: 653,354; asm: 474,045; java: 183,079; sh: 111,238; makefile: 20,410; perl: 14,359; objc: 13,059; yacc: 4,583; pascal: 3,405; lex: 1,720; ruby: 999; exp: 762; sql: 715; awk: 580; php: 436; lisp: 430; sed: 69; csh: 10
file content (25 lines) | stat: -rw-r--r-- 1,249 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
import importlib
jwt_helper = importlib.import_module('device-bound-session-credentials.jwt_helper')
session_manager = importlib.import_module('device-bound-session-credentials.session_manager')

def main(request, response):
    test_session_manager = session_manager.find_for_request(request)
    if test_session_manager.get_registration_sends_challenge():
        # Only send back a challenge on the first call.
        test_session_manager.reset_registration_sends_challenge()
        return (401, [('Sec-Session-Challenge', '"login_challenge_value"')], "")

    jwt_header, jwt_payload, verified = jwt_helper.decode_jwt(request.headers.get("Sec-Session-Response").decode('utf-8'))
    session_id = test_session_manager.create_new_session()
    test_session_manager.set_session_key(session_id, jwt_payload.get('key'))

    if not verified or jwt_payload.get("jti") != "login_challenge_value":
        return (400, response.headers, "")

    if jwt_payload.get("authorization") != test_session_manager.get_authorization_value():
        return (400, response.headers, "")

    if jwt_payload.get("sub") is not None:
        return (400, response.headers, "")

    return test_session_manager.get_session_instructions_response(session_id, request)