haiwen/seahub
1
0
Fork 0
mirror of https://github.com/haiwen/seahub.git synced 2025-09-12 21:30:39 +00:00
Code Issues Releases Wiki Activity

sudo mode: handle shibboleth login

Browse Source
This commit is contained in:
Shuai Lin
2015-05-05 13:42:03 +08:00
parent 942f7d765f
commit 120d094b1b
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
thirdpart/shibboleth/middleware.py
View File

@@ -4,6 +4,7 @@ from django.core.exceptions import ImproperlyConfigured
from shibboleth.app_settings import SHIB_ATTRIBUTE_MAP, LOGOUT_SESSION_KEY, SHIB_USER_HEADER from shibboleth.app_settings import SHIB_ATTRIBUTE_MAP, LOGOUT_SESSION_KEY, SHIB_USER_HEADER
from seahub import auth from seahub import auth
from seahub.base.sudo_mode import update_sudo_mode_ts
class ShibbolethRemoteUserMiddleware(RemoteUserMiddleware): class ShibbolethRemoteUserMiddleware(RemoteUserMiddleware):
""" """
@@ -29,7 +30,7 @@ class ShibbolethRemoteUserMiddleware(RemoteUserMiddleware):
return return
else: else:
#Delete the shib reauth session key if present. #Delete the shib reauth session key if present.
request.session.pop(LOGOUT_SESSION_KEY, None) request.session.pop(LOGOUT_SESSION_KEY, None)
#Locate the remote user header. #Locate the remote user header.
# import pprint; pprint.pprint(request.META) # import pprint; pprint.pprint(request.META)
@@ -45,6 +46,8 @@ class ShibbolethRemoteUserMiddleware(RemoteUserMiddleware):
# persisted in the session and we don't need to continue. # persisted in the session and we don't need to continue.
if request.user.is_authenticated(): if request.user.is_authenticated():
if request.user.username == username: if request.user.username == username:
if request.user.is_staff:
update_sudo_mode_ts(request)
return return
# Make sure we have all required Shiboleth elements before proceeding. # Make sure we have all required Shiboleth elements before proceeding.