Homec4science
Diffusion invenio-infoscience (maint-1.2) Browse

R3600/modules/webaccess/lib/external_authentication.py
f68488bddd87maint-1.2

Last Change
Raw File

external_authentication.py
View Options

# -*- coding: utf-8 -*-
##
## $Id$
##
## This file is part of CDS Invenio.
## Copyright (C) 2002, 2003, 2004, 2005, 2006 CERN.
##
## CDS Invenio is free software; you can redistribute it and/or
## modify it under the terms of the GNU General Public License as
## published by the Free Software Foundation; either version 2 of the
## License, or (at your option) any later version.
##
## CDS Invenio is distributed in the hope that it will be useful, but
## WITHOUT ANY WARRANTY; without even the implied warranty of
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
## General Public License for more details.
##
## You should have received a copy of the GNU General Public License
## along with CDS Invenio; if not, write to the Free Software Foundation, Inc.,
## 59 Temple Place, Suite 330, Boston, MA 02111-1307, USA.
"""External user authentication for CDS Invenio."""
__revision__ = \
"$Id$"
import httplib
import urllib
import re
from invenio.config import etcdir
class external_auth_nice:
"""
External authentication example for a custom HTTPS-based
authentication service (CERN NICE).
"""
users = {}
name = ""
def __init__(self):
"""Initialize stuff here"""
self._cern_nice_soap_auth = \
open(etcdir + "/webaccess/cern_nice_soap_credentials.txt",
"r").read().strip()
def auth_user(self, username, password):
"""
Check USERNAME and PASSWORD against CERN NICE database.
Return None if authentication failed, email address of the
person if authentication succeeded.
"""
params = urllib.urlencode({'UserName': username, 'Password': password})
headers = {"Content-type": "application/x-www-form-urlencoded",
"Accept": "text/plain",
"Authorization": "Basic " + self._cern_nice_soap_auth}
conn = httplib.HTTPSConnection("winservices-soap.web.cern.ch")
conn.request("POST",
"/winservices-soap/generic/Authentication.asmx/GetUserInfo",
params, headers)
response = conn.getresponse()
data = response.read()
conn.close()
match = re.search('<ccid>\d+</ccid>', data)
if match:
match = match.group()
ccid = int(re.search('\d+', match).group())
if ccid > 0:
match = re.search('<email>.*?</email>', data)
if match:
email = match.group()
email = email.replace('<email>', '')
email = email.replace('</email>', '')
return email
return None
class external_auth_template:
"""External authentication template example."""
def __init__(self):
"""Initialize stuff here"""
pass
def auth_user(self, username, password):
"""Authenticate user-supplied USERNAME and PASSWORD. Return
None if authentication failed, or the email address of the
person if the authentication was successful. In order to do
this you may perhaps have to keep a translation table between
usernames and email addresses."""
return None
c4science · Help