
* core: start migrating to flows for authorisation * sources/oauth: start type-hinting * core: create default user * core: only show user delete button if an unenrollment flow exists * flows: Correctly check initial policies on flow with context * policies: add more verbosity to engine * sources/oauth: migrate to flows * sources/oauth: fix typing errors * flows: add more tests * sources/oauth: start implementing unittests * sources/ldap: add option to disable user sync, move connection init to model * sources/ldap: re-add default PropertyMappings * providers/saml: re-add default PropertyMappings * admin: fix missing stage count * stages/identification: fix sources not being shown * crypto: fix being unable to save with private key * crypto: re-add default self-signed keypair * policies: rewrite cache_key to prevent wrong cache * sources/saml: migrate to flows for auth and enrollment * stages/consent: add new stage * admin: fix PropertyMapping widget not rendering properly * core: provider.authorization_flow is mandatory * flows: add support for "autosubmit" attribute on form * flows: add InMemoryStage for dynamic stages * flows: optionally allow empty flows from FlowPlanner * providers/saml: update to authorization_flow * sources/*: fix flow executor URL * flows: fix pylint error * flows: wrap responses in JSON object to easily handle redirects * flow: dont cache plan's context * providers/oauth: rewrite OAuth2 Provider to use flows * providers/*: update docstrings of models * core: fix forms not passing help_text through safe * flows: fix HttpResponses not being converted to JSON * providers/oidc: rewrite to use flows * flows: fix linting
64 lines
1.9 KiB
Python
64 lines
1.9 KiB
Python
# Generated by Django 3.0.6 on 2020-05-23 19:32
|
|
|
|
from django.db import migrations
|
|
|
|
|
|
def create_default_property_mappings(apps, schema_editor):
|
|
"""Create default SAML Property Mappings"""
|
|
SAMLPropertyMapping = apps.get_model(
|
|
"passbook_providers_saml", "SAMLPropertyMapping"
|
|
)
|
|
db_alias = schema_editor.connection.alias
|
|
defaults = [
|
|
{
|
|
"FriendlyName": "eduPersonPrincipalName",
|
|
"Name": "urn:oid:1.3.6.1.4.1.5923.1.1.1.6",
|
|
"Expression": "return user.email",
|
|
},
|
|
{
|
|
"FriendlyName": "cn",
|
|
"Name": "urn:oid:2.5.4.3",
|
|
"Expression": "return user.name",
|
|
},
|
|
{
|
|
"FriendlyName": "mail",
|
|
"Name": "urn:oid:0.9.2342.19200300.100.1.3",
|
|
"Expression": "return user.email",
|
|
},
|
|
{
|
|
"FriendlyName": "displayName",
|
|
"Name": "urn:oid:2.16.840.1.113730.3.1.241",
|
|
"Expression": "return user.username",
|
|
},
|
|
{
|
|
"FriendlyName": "uid",
|
|
"Name": "urn:oid:0.9.2342.19200300.100.1.1",
|
|
"Expression": "return user.pk",
|
|
},
|
|
{
|
|
"FriendlyName": "member-of",
|
|
"Name": "member-of",
|
|
"Expression": "for group in user.groups.all():\n yield group.name",
|
|
},
|
|
]
|
|
for default in defaults:
|
|
SAMLPropertyMapping.objects.using(db_alias).get_or_create(
|
|
saml_name=default["Name"],
|
|
friendly_name=default["FriendlyName"],
|
|
expression=default["Expression"],
|
|
defaults={
|
|
"name": f"Autogenerated SAML Mapping: {default['FriendlyName']} -> {default['Expression']}"
|
|
},
|
|
)
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
|
|
dependencies = [
|
|
("passbook_providers_saml", "0001_initial"),
|
|
]
|
|
|
|
operations = [
|
|
migrations.RunPython(create_default_property_mappings),
|
|
]
|