mirror of
https://github.com/mediacms-io/mediacms.git
synced 2025-11-06 15:38:53 -05:00
43 lines
2.0 KiB
Python
43 lines
2.0 KiB
Python
from allauth.socialaccount.models import SocialApp
|
|
from django.conf import settings
|
|
from django.http import Http404, HttpResponse
|
|
from django.shortcuts import redirect, render
|
|
from django.urls import reverse
|
|
|
|
from identity_providers.models import LoginOption
|
|
|
|
|
|
def saml_metadata(request):
|
|
if not (hasattr(settings, "USE_SAML") and settings.USE_SAML):
|
|
raise Http404
|
|
|
|
xml_parts = ['<?xml version="1.0"?>']
|
|
saml_social_apps = SocialApp.objects.filter(provider='saml')
|
|
entity_id = f"{settings.FRONTEND_HOST}/saml/metadata/"
|
|
xml_parts.append(f'<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Name="{entity_id}">') # noqa
|
|
xml_parts.append(f' <md:EntityDescriptor entityID="{entity_id}">') # noqa
|
|
xml_parts.append(' <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">') # noqa
|
|
|
|
# Add multiple AssertionConsumerService elements with different indices
|
|
for index, app in enumerate(saml_social_apps, start=1):
|
|
xml_parts.append(
|
|
f' <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ' # noqa
|
|
f'Location="{settings.FRONTEND_HOST}/accounts/saml/{app.client_id}/acs/" index="{index}"/>' # noqa
|
|
)
|
|
|
|
xml_parts.append(' </md:SPSSODescriptor>') # noqa
|
|
xml_parts.append(' </md:EntityDescriptor>') # noqa
|
|
xml_parts.append('</md:EntitiesDescriptor>') # noqa
|
|
metadata_xml = '\n'.join(xml_parts)
|
|
return HttpResponse(metadata_xml, content_type='application/xml')
|
|
|
|
|
|
def custom_login_view(request):
|
|
if not (hasattr(settings, "USE_IDENTITY_PROVIDERS") and settings.USE_IDENTITY_PROVIDERS):
|
|
return redirect(reverse('login_system'))
|
|
|
|
login_options = []
|
|
for option in LoginOption.objects.filter(active=True):
|
|
login_options.append({'url': option.url, 'title': option.title})
|
|
return render(request, 'account/custom_login_selector.html', {'login_options': login_options})
|