web.web.webopenid

Package web :: Package web :: Module webopenid |
[hide private]
[frames] | no frames]

# Source Code for Module web.web.webopenid

      1  """openid.py: an openid library for web.py
      2
      3  Notes:
      4
      5   - This will create a file called .openid_secret_key in the
      6     current directory with your secret key in it. If someone
      7     has access to this file they can log in as any user. And
      8     if the app can't find this file for any reason (e.g. you
      9     moved the app somewhere else) then each currently logged
     10     in user will get logged out.
     11
     12   - State must be maintained through the entire auth process
     13     -- this means that if you have multiple web.py processes
     14     serving one set of URLs or if you restart your app often
     15     then log ins will fail. You have to replace sessions and
     16     store for things to work.
     17
     18   - We set cookies starting with "openid_".
     19
     20  """
     21
     22  import os
     23  import random
     24  import hmac
     25  import __init__ as web
     26  import openid.consumer.consumer
     27  import openid.store.memstore
     28
     29  sessions = {}
     30  store = openid.store.memstore.MemoryStore()
     31
     32 -def _secret():
     33      try:
     34          secret = file('.openid_secret_key').read()
     35      except IOError:
     36          # file doesn't exist
     37          secret = os.urandom(20)
     38          file('.openid_secret_key', 'w').write(secret)
     39      return secret
     40
     41 -def _hmac(identity_url):
     42      return hmac.new(_secret(), identity_url).hexdigest()
     43
     44 -def _random_session():
     45      n = random.random()
     46      while n in sessions:
     47          n = random.random()
     48      n = str(n)
     49      return n
     50
     51 -def status():
     52      oid_hash = web.cookies().get('openid_identity_hash', '').split(',', 1)
     53      if len(oid_hash) > 1:
     54          oid_hash, identity_url = oid_hash
     55          if oid_hash == _hmac(identity_url):
     56              return identity_url
     57      return None
     58
     59 -def form(openid_loc):
     60      oid = status()
     61      if oid:
     62          return '''
     63          <form method="post" action="%s">
     64            <img src="http://openid.net/login-bg.gif" alt="OpenID" />
     65            <strong>%s</strong>
     66            <input type="hidden" name="action" value="logout" />
     67            <input type="hidden" name="return_to" value="%s" />
     68            <button type="submit">log out</button>
     69          </form>''' % (openid_loc, oid, web.ctx.fullpath)
     70      else:
     71          return '''
     72          <form method="post" action="%s">
     73            <input type="text" name="openid" value=""
     74              style="background: url(http://openid.net/login-bg.gif) no-repeat; padding-left: 18px; background-position: 0 50%%;" />
     75            <input type="hidden" name="return_to" value="%s" />
     76            <button type="submit">log in</button>
     77          </form>''' % (openid_loc, web.ctx.fullpath)
     78
     79 -def logout():
     80      web.setcookie('openid_identity_hash', '', expires=-1)
     81
     82 -class host:
     83 -    def POST(self):
     84          # unlike the usual scheme of things, the POST is actually called
     85          # first here
     86          i = web.input(return_to='/')
     87          if i.get('action') == 'logout':
     88              logout()
     89              return web.redirect(i.return_to)
     90
     91          i = web.input('openid', return_to='/')
     92
     93          n = _random_session()
     94          sessions[n] = {'webpy_return_to': i.return_to}
     95
     96          c = openid.consumer.consumer.Consumer(sessions[n], store)
     97          a = c.begin(i.openid)
     98          f = a.redirectURL(web.ctx.home, web.ctx.home + web.ctx.fullpath)
     99
    100          web.setcookie('openid_session_id', n)
    101          return web.redirect(f)
    102
    103 -    def GET(self):
    104          n = web.cookies('openid_session_id').openid_session_id
    105          web.setcookie('openid_session_id', '', expires=-1)
    106          return_to = sessions[n]['webpy_return_to']
    107
    108          c = openid.consumer.consumer.Consumer(sessions[n], store)
    109          a = c.complete(web.input(), web.ctx.home + web.ctx.fullpath)
    110
    111          if a.status.lower() == 'success':
    112              web.setcookie('openid_identity_hash', _hmac(a.identity_url) + ',' + a.identity_url)
    113
    114          del sessions[n]
    115          return web.redirect(return_to)
    116