75 lines
2.7 KiB
Python
75 lines
2.7 KiB
Python
from auth.providers.base import SSOProvider
|
|
from utils.helpers import extract_html_value
|
|
|
|
|
|
class TUMProvider(SSOProvider):
|
|
"""SSO provider for Karlsruhe Institute of Technology (KIT)."""
|
|
|
|
name = "TUM"
|
|
domain = "tum.de"
|
|
|
|
def authenticate(self) -> str:
|
|
# Implement SAML authentication flow
|
|
# Use self.session, self.redirect_response, self.username, self.password
|
|
# Return HTML containing SAMLResponse
|
|
|
|
# to get this done on tum we have to:
|
|
# 1. do one post to e1s1
|
|
# 2. do post to e1s2 with login data
|
|
# ->
|
|
self.session.headers.pop("x-requested-with", None)
|
|
self.session.headers.pop("x-inertia", None)
|
|
self.session.headers.pop("x-inertia-version", None)
|
|
|
|
csrf_token1 = extract_html_value(
|
|
self.redirect_response.text, r'name="csrf_token" value="([^"]+)"'
|
|
)
|
|
|
|
response1 = self.session.post(
|
|
# 'https://idp.scc.kit.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1',
|
|
"https://login.tum.de/idp/profile/SAML2/Redirect/SSO?execution=e1s1",
|
|
data={
|
|
"csrf_token": csrf_token1,
|
|
"shib_idp_ls_exception.shib_idp_session_ss": "",
|
|
"shib_idp_ls_success.shib_idp_session_ss": "true",
|
|
"shib_idp_ls_value.shib_idp_session_ss": "",
|
|
"shib_idp_ls_exception.shib_idp_persistent_ss": "",
|
|
"shib_idp_ls_success.shib_idp_persistent_ss": "true",
|
|
"shib_idp_ls_value.shib_idp_persistent_ss": "",
|
|
"shib_idp_ls_supported": "true",
|
|
"_eventId_proceed": "",
|
|
},
|
|
)
|
|
|
|
# print(response1.text)
|
|
csrf_token2 = extract_html_value(
|
|
response1.text, r'name="csrf_token" value="([^"]+)"'
|
|
)
|
|
|
|
response2 = self.session.post(
|
|
"https://login.tum.de/idp/profile/SAML2/Redirect/SSO?execution=e1s2",
|
|
data={
|
|
"csrf_token": csrf_token2,
|
|
"j_username": self.username,
|
|
"j_password": self.password,
|
|
"donotcache": "1",
|
|
"_eventId_proceed": "",
|
|
},
|
|
)
|
|
|
|
# print(response2.text)
|
|
saml_response = extract_html_value(
|
|
response2.text, r'name="SAMLResponse" value="([^"]+)"'
|
|
)
|
|
|
|
if len(saml_response) < 3:
|
|
raise ValueError("TUM auth no work:(")
|
|
else:
|
|
print("nice we got saml response starting with: " + saml_response[0:49])
|
|
return response2.text
|
|
# print(saml_response)
|
|
# sys.exit()
|
|
# if "/consume" not in html.unescape(response.text):
|
|
# raise ValueError("TUM authentication failed - invalid credentials or SSO error")
|
|
|
|
# return response.text
|