Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/keystoneauth1/identity/v3/__pycache__/k2k.cpython-39.pyc
Ðазад
a s�h� � @ sr d dl Zd dlZd dlmZ d dlmZ d dlmZ d dlm Z d dlm Z d dlm Z dZ G d d � d e j�ZdS ) � N)�access)� exceptions)�base)� federation)�plugin)�session)�Keystone2Keystonec s� e Zd ZdZdZdZdZddddddddddd� eje e j e e j e e j e e j e e j e e j e e j e e j e e e d� � fd d �Z ee e d �d d ��Zeje d�dd�Zeje e ejd�dd�Zejejd�dd�Z� ZS )r aR Plugin to execute the Keystone to Keyestone authentication flow. In this plugin, an ECP wrapped SAML assertion provided by a keystone Identity Provider (IdP) is used to request an OpenStack unscoped token from a keystone Service Provider (SP). :param base_plugin: Auth plugin already authenticated against the keystone IdP. :type base_plugin: keystoneauth1.identity.v3.base.BaseAuth :param service_provider: The Service Provider ID as returned by ServiceProviderManager.list() :type service_provider: str z /auth/OS-FEDERATION/saml2/ecpi. i/ NT) �trust_id� system_scope� domain_id� domain_name� project_id� project_name�project_domain_id�project_domain_name�reauthenticate�include_catalog) � base_plugin�service_providerr r r r r r r r r r c s2 t � jd||||||| | | | d� || _|| _d S )N� ) �auth_urlr r r r r r r r r r )�super�__init__�_local_cloud_plugin�_sp_id) �selfr r r r r r r r r r r r �� __class__� ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/keystoneauth1/identity/v3/k2k.pyr 3 s �zKeystone2Keystone.__init__)r �returnc C s* d}||v r|� |�nt|�}|d|� S )a~ Return auth_url of the remote Keystone Service Provider. Remote cloud's auth_url is an endpoint for getting federated unscoped token, typically that would be ``https://remote.example.com:5000/v3/OS-FEDERATION/identity_providers/ <idp>/protocols/<protocol_id>/auth``. However we need to generate a real auth_url, used for token scoping. This function assumes there are static values today in the remote auth_url stored in the Service Provider attribute and those can be used as a delimiter. If the sp_auth_url doesn't comply with standard federation auth url the function will simply return whole string. :param auth_url: auth_url of the remote cloud :type auth_url: str :returns: auth_url of remote cloud where a token can be validated or scoped. :rtype: str z/OS-FEDERATION/N)�index�len)�clsr ZPATTERN�idxr r r �_remote_auth_urlT s z"Keystone2Keystone._remote_auth_url)r r c C s� ddgd| j �|�id�dd| jiid�i}dtjd�}d d i}|j| j|| j ||d d d �}|js�d }||j|j d� }t � |��|j s�t � |��t|j �S )N�auth�token�id)�methodsr' r )�identity�scope)� r )�versionZ interface�Acceptzapplication/jsonF)�jsonr& �endpoint_filter�headers� authenticatedZ raise_exczbError while requesting ECP wrapped assertion: response exit code: %(status_code)d, reason: %(err)s)� status_code�err)r � get_tokenr r ZAUTH_INTERFACE�post�REQUEST_ECP_URL�okr3 �reasonr ZAuthorizationFailure�textZInvalidResponse�str)r r �bodyr0 r1 �resp�msgr r r �_get_ecp_assertionn s: �� �� ��� z$Keystone2Keystone._get_ecp_assertion)r �sp_url� sp_auth_urlr c C sH |j |ddi| �|�ddd�}|j| j| jfv rD|j|ddidd�}|S )a6 Present ECP wrapped SAML assertion to the keystone SP. The assertion is issued by the keystone IdP and it is targeted to the keystone that will serve as Service Provider. :param session: a session object to send out HTTP requests. :param sp_url: URL where the ECP wrapped SAML assertion will be presented to the keystone SP. Usually, something like: https://sp.com/Shibboleth.sso/SAML2/ECP :type sp_url: str :param sp_auth_url: Federated authentication URL of the keystone SP. It is specified by IdP, for example: https://sp.com/v3/OS-FEDERATION/identity_providers/ idp_id/protocols/protocol_id/auth :type sp_auth_url: str z Content-Typezapplication/vnd.paos+xmlF)r1 �datar2 �redirect)r1 r2 )r6 r? r3 �HTTP_MOVED_TEMPORARILY�HTTP_SEE_OTHER�get)r r r@ rA �responser r r �)_send_service_provider_ecp_authn_response� s" � ��z;Keystone2Keystone._send_service_provider_ecp_authn_responsec C sr | j �|| j�}| j �|| j�}|d us,J �|d us8J �| �|�| _| �|||�}tj|d�}t |tj �snJ �|S )N)r= ) r Zget_sp_auth_urlr Z get_sp_urlr% r rH r �create� isinstance� AccessInfoV3)r r rA r@ rG Z access_infor r r �get_unscoped_auth_ref� s � � z'Keystone2Keystone.get_unscoped_auth_ref)�__name__� __module__� __qualname__�__doc__r7 rD rE r ZBaseIdentityPluginr; �ty�Optional�boolr � classmethodr% � ks_session�Sessionr? �requests�ResponserH r rK rL � __classcell__r r r r r sJ ��!0� /�r )�typingrQ rW Z keystoneauth1r r Zkeystoneauth1.identityr Zkeystoneauth1.identity.v3r r r rU �__all__Z _Rescopedr r r r r �<module> s
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка