source: TI12-security/trunk/python/ndg.security.server/ndg/security/server/sso/sso/controllers/wayf.py @ 3754

import logging

from sso.lib.base import *
from ndg.security.common.AttAuthority import AttAuthorityClient
import base64

log = logging.getLogger(__name__)


class WayfController(BaseController):
    """Where Are You From Controller - display a list of trusted sites for 
    login"""
    
    def __before__(self, action): 
        """For each action, get 'r' return to URL argument from current URL 
        query string.  c.b64encReturnTo is used in some of the .kid files"""
        c.b64encReturnTo = request.params.get('r', '') 
        log.debug("WayfController.__before__: c.b64encReturnTo = %s" % \
                                                              c.b64encReturnTo)
        
        # Decode the return URL so that it can be displayed to the user by 
        # wayf.kid
        # The URL has previously been encoded from the BaseController and set 
        # in ndgPage.kid  
        # Use str() - urlsafe_b64decode() doesn't like unicode
        c.returnTo = base64.urlsafe_b64decode(str(c.b64encReturnTo))
        
        # Ensure login can return to an address over https to 
        # preserve confidentiality of credentials
        if g.ndg.security.server.ssoservice.cfg.server in c.returnTo:
            c.returnTo = c.returnTo.replace(g.ndg.security.server.ssoservice.cfg.server, 
                                            g.ndg.security.server.ssoservice.cfg.sslServer)
            c.b64encReturnTo = urlsafe_b64encode(c.returnTo)        
            log.debug(\
    "WayfController.__before__: switched return to address to https = %s" % \
                                                              c.returnTo) 


    def index(self):
        ''' NDG equivalent to Shibboleth WAYF '''
        log.debug("WayfController.index ...")

        aaClnt = AttAuthorityClient(\
                    uri=g.ndg.security.server.ssoservice.cfg.aaURI,
                    tracefile=g.ndg.security.server.ssoservice.cfg.tracefile,
                    **g.ndg.security.server.ssoservice.cfg.wss)

        # Get list of login uris for trusted sites including THIS one
        log.debug("Calling Attribute Authority getTrustedHostInfo and " + \
                  "getHostInfo for wayf")

        hosts = aaClnt.getAllHostsInfo()    
        c.providers=dict([(k, v['loginURI']) for k, v in hosts.items()])
        
        session.save()
        
        return render('ndg.security.wayf')