Skip to content

Commit 5728c5c

Browse files
author
Rebecka Gulliksson
committed
Merge branch 'skoranda-encrypted_assertion'
2 parents 1993926 + f9038aa commit 5728c5c

File tree

5 files changed

+191
-1
lines changed

5 files changed

+191
-1
lines changed

‎src/satosa/backends/saml2.py

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,18 @@ def __init__(self, outgoing, internal_attributes, config, base_url, name):
5959
self.attribute_profile = config.get("attribute_profile", "saml")
6060
self.bindings = [BINDING_HTTP_REDIRECT, BINDING_HTTP_POST]
6161
self.discosrv = config.get("disco_srv")
62+
self.encryption_keys = []
63+
64+
key_file_paths = None
65+
if 'encryption_keypairs' in self.config['sp_config']: # prioritize explicit encryption keypairs
66+
key_file_paths = [keypair['key_file'] for keypair in self.config['sp_config']['encryption_keypairs']]
67+
elif 'key_file' in self.config['sp_config']:
68+
key_file_paths = [self.config['sp_config']['key_file']]
69+
70+
if key_file_paths:
71+
for p in key_file_paths:
72+
with open(p) as key_file:
73+
self.encryption_keys.append(key_file.read())
6274

6375
def start_auth(self, context, internal_req):
6476
"""
@@ -191,6 +203,11 @@ def _translate_response(self, response, state):
191203
:param response: The saml authorization response
192204
:return: A translated internal response
193205
"""
206+
207+
# The response may have been encrypted by the IdP so if we have an encryption key, try it
208+
if self.encryption_keys:
209+
response.parse_assertion(self.encryption_keys)
210+
194211
authn_info = response.authn_info()[0]
195212
auth_class_ref = authn_info[0]
196213
timestamp = response.assertion.authn_statement[0].authn_instant

‎tests/satosa/backends/test_saml2.py

Lines changed: 48 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,27 @@
11
"""
22
Tests for the SAML frontend module src/backends/saml2.py.
33
"""
4+
import os
45
import re
56
from base64 import urlsafe_b64encode
6-
from unittest.mock import Mock
7+
from collections import Counter
8+
from unittest.mock import Mock, patch
79
from urllib.parse import urlparse, parse_qs, parse_qsl
810

911
import pytest
1012
from saml2 import BINDING_HTTP_REDIRECT
1113
from saml2.authn_context import PASSWORD
1214
from saml2.config import IdPConfig, SPConfig
15+
from saml2.s_utils import deflate_and_base64_encode
1316

1417
from satosa.backends.saml2 import SAMLBackend
1518
from satosa.context import Context
1619
from satosa.internal_data import InternalRequest
1720
from tests.users import USERS
1821
from tests.util import FakeIdP, create_metadata_from_config_dict, FakeSP
1922

23+
TEST_RESOURCE_BASE_PATH = os.path.join(os.path.dirname(__file__), "../../test_resources")
24+
2025
INTERNAL_ATTRIBUTES = {
2126
'attributes': {
2227
'displayname': {'saml': ['displayName']},
@@ -182,6 +187,48 @@ def test_authn_response(self, context, idp_conf, sp_conf):
182187
self.assert_authn_response(internal_resp)
183188
assert self.samlbackend.name not in context.state
184189

190+
def test_authn_response_with_encrypted_assertion(self, sp_conf, context):
191+
with open(os.path.join(TEST_RESOURCE_BASE_PATH,
192+
"idp_metadata_for_encrypted_signed_auth_response.xml")) as idp_metadata_file:
193+
sp_conf["metadata"]["inline"] = [idp_metadata_file.read()]
194+
samlbackend = SAMLBackend(Mock(), INTERNAL_ATTRIBUTES, {"sp_config": sp_conf,
195+
"disco_srv": DISCOSRV_URL},
196+
"base_url", "samlbackend")
197+
response_binding = BINDING_HTTP_REDIRECT
198+
relay_state = "test relay state"
199+
200+
with open(os.path.join(TEST_RESOURCE_BASE_PATH,
201+
"auth_response_with_encrypted_signed_assertion.xml")) as auth_response_file:
202+
auth_response = auth_response_file.read()
203+
context.request = {"SAMLResponse": deflate_and_base64_encode(auth_response), "RelayState": relay_state}
204+
205+
context.state[self.samlbackend.name] = {"relay_state": relay_state}
206+
with open(os.path.join(TEST_RESOURCE_BASE_PATH, "encryption_key.pem")) as encryption_key_file:
207+
samlbackend.encryption_keys = [encryption_key_file.read()]
208+
209+
assertion_issued_at = 1479315212
210+
with patch('saml2.validate.time_util.utc_now') as time_mock:
211+
time_mock.return_value = assertion_issued_at + 1
212+
samlbackend.authn_response(context, response_binding)
213+
214+
context, internal_resp = samlbackend.auth_callback_func.call_args[0]
215+
assert Counter(internal_resp.attributes.keys()) == Counter({"mail", "givenname", "displayname", "surname"})
216+
217+
def test_backend_reads_encryption_key_from_key_file(self, sp_conf):
218+
sp_conf["key_file"] = os.path.join(TEST_RESOURCE_BASE_PATH, "encryption_key.pem")
219+
samlbackend = SAMLBackend(Mock(), INTERNAL_ATTRIBUTES, {"sp_config": sp_conf,
220+
"disco_srv": DISCOSRV_URL},
221+
"base_url", "samlbackend")
222+
assert samlbackend.encryption_keys
223+
224+
def test_backend_reads_encryption_key_from_encryption_keypair(self, sp_conf):
225+
del sp_conf["key_file"]
226+
sp_conf["encryption_keypairs"] = [{"key_file": os.path.join(TEST_RESOURCE_BASE_PATH, "encryption_key.pem")}]
227+
samlbackend = SAMLBackend(Mock(), INTERNAL_ATTRIBUTES, {"sp_config": sp_conf,
228+
"disco_srv": DISCOSRV_URL},
229+
"base_url", "samlbackend")
230+
assert samlbackend.encryption_keys
231+
185232
def test_metadata_endpoint(self, context, sp_conf):
186233
resp = self.samlbackend._metadata_endpoint(context)
187234
headers = dict(resp.headers)

‎tests/test_resources/auth_response_with_encrypted_signed_assertion.xml

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
<saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
2+
Destination="http://example.com/acs/redirect"
3+
ID="_39d315a8cf6644cb358c6bd7456616ac"
4+
InResponseTo="id-CvgIFtjsvMYLFLGOy"
5+
IssueInstant="2016-11-16T16:53:32.698Z"
6+
Version="2.0">
7+
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
8+
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">
9+
https://login.sphericalcowgroup.com/idp/shibboleth
10+
</saml2:Issuer>
11+
<saml2p:Status>
12+
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
13+
</saml2p:Status>
14+
<saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
15+
<xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
16+
Id="_26dc03abc62a03dbac9e7edb22550e32"
17+
Type="http://www.w3.org/2001/04/xmlenc#Element">
18+
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"
19+
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/>
20+
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
21+
<xenc:EncryptedKey Id="_36eff82174d729c860b71637c2393d18"
22+
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
23+
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"
24+
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
25+
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"
26+
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
27+
</xenc:EncryptionMethod>
28+
<ds:KeyInfo>
29+
<ds:X509Data>
30+
<ds:X509Certificate>
31+
MIIDyzCCArOgAwIBAgIJANifBSNLHLImMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMREw
32+
DwYDVQQIDAhNYXJ5bGFuZDERMA8GA1UEBwwIQmV0aGVzZGExDDAKBgNVBAoMA05JSDEOMAwGA1UE
33+
CwwFTklBSUQxKTAnBgNVBAMMIGZlZGVyYXRpb24tZGV2LTEuc2NpZW5jZWZvcnVtLnNjMB4XDTE2
34+
MDkwNzE4MjUzN1oXDTI2MDkwNTE4MjUzN1owfDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE1hcnls
35+
YW5kMREwDwYDVQQHDAhCZXRoZXNkYTEMMAoGA1UECgwDTklIMQ4wDAYDVQQLDAVOSUFJRDEpMCcG
36+
A1UEAwwgZmVkZXJhdGlvbi1kZXYtMS5zY2llbmNlZm9ydW0uc2MwggEiMA0GCSqGSIb3DQEBAQUA
37+
A4IBDwAwggEKAoIBAQDAXSAZ65UChSvE2JygTXOJKJU4UnmpA7dY0Mw9Jj7Y7lDZtPaaeTSczadh
38+
FFHHjYMo0lhhmKARb3OcXZhupe193pHIpHsacpEziJRrtNMXco90XS92doT2CUA/5bXiGWg/d7uv
39+
3TERR4O2y1y0xd2ssvLorAcQ9HiSNRwOY2Tm53adZEuUbWtZP/c+ogQaBrZ0Ld/dkIkOwN712g7A
40+
iRhJUG2L0fIpJhb2t2QtHpnrlozUMYMUf330Axb8Co+rRiYnlc6x627UHGYHEu29Cba97+ARpySo
41+
+P5JzeyIurxr8tjUQQeulTlmkKDKal3CvDduWPk9PNLc0kChEvfVo4wtAgMBAAGjUDBOMB0GA1Ud
42+
DgQWBBQyZhJ1a4naXj03AKPafvG+cdWpvDAfBgNVHSMEGDAWgBQyZhJ1a4naXj03AKPafvG+cdWp
43+
vDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBN3mgOkL1S+0QKpdL32mMV1hHEd1hn
44+
ZWL3W5ab/210A5TQ/taczbwGFoDH0lT47GQW8RwsBfLlDHT6tLp5jb2eyhTN07PJfPsIT/e3WWyU
45+
aVN+AVL7jllkLcTuGLY4JFzOrMNHBJ6ikkAib0hI8T6jmZPRoY+KMZAjlrNIv9FUQ1cdiXUwxjHp
46+
RrW8JZgbdeg+wtdiY5x+ytMOF39E7nKVoEXjdlqKoV/IdJvxgOHmF8DkTVA0ZKgMqfZJMR3Yae7e
47+
fXW/Sewsubfm9Igrpkxwb0ZHDN4ygwjq1HJSmePSoLKPoYLZJ3rHtxVSwvWqpySOjGG3tyfRnBsZ
48+
rk3qdLjU
49+
</ds:X509Certificate>
50+
</ds:X509Data>
51+
</ds:KeyInfo>
52+
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
53+
<xenc:CipherValue>
54+
aSro861SVEUIiyLXoOQljK8OlCnKKbTn7Fa35PcBDJEfT3uu9KDNLD5p6GFuA4ldqd+AC5YhwZw+ECOsTY+TYCCZLpz7mMV03jUW3/LDqcapkVXV2pu1ce1A09JvWrW2qtR/vsttUjTb8srDXWPUoGIU62mJTRMuBNs+yTGMRUJHe4wmEKNqrOhyNHwzHpylBlRU4P4OcteixwZjBTvLnKhf6s0fUzBqLHmq+dIvf09bWNcNJTTpXf7cayDra7u5oAbwNHYe08YAddeGHCT2aTXEpeVMdR/hUAEbxwaEH9bm9gSp5FOGz5Uz8Y2yw86NM6eB0iwSiSPIAJg4mt1FpA==
55+
</xenc:CipherValue>
56+
</xenc:CipherData>
57+
</xenc:EncryptedKey>
58+
</ds:KeyInfo>
59+
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
60+
<xenc:CipherValue>
61+
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
62+
</xenc:CipherValue>
63+
</xenc:CipherData>
64+
</xenc:EncryptedData>
65+
</saml2:EncryptedAssertion>
66+
</saml2p:Response>

‎tests/test_resources/encryption_key.pem

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDAXSAZ65UChSvE
3+
2JygTXOJKJU4UnmpA7dY0Mw9Jj7Y7lDZtPaaeTSczadhFFHHjYMo0lhhmKARb3Oc
4+
XZhupe193pHIpHsacpEziJRrtNMXco90XS92doT2CUA/5bXiGWg/d7uv3TERR4O2
5+
y1y0xd2ssvLorAcQ9HiSNRwOY2Tm53adZEuUbWtZP/c+ogQaBrZ0Ld/dkIkOwN71
6+
2g7AiRhJUG2L0fIpJhb2t2QtHpnrlozUMYMUf330Axb8Co+rRiYnlc6x627UHGYH
7+
Eu29Cba97+ARpySo+P5JzeyIurxr8tjUQQeulTlmkKDKal3CvDduWPk9PNLc0kCh
8+
EvfVo4wtAgMBAAECggEAW9baMaXY0Yg0+lkUhjAUHgLDI021Ce1dRskBCZzN2pIF
9+
BbuxFNUTOl2xMNcbqDM20HGEgqv0l/5m6tuAoCsV9McjQPDOWTUjf8AQZE/DjGlE
10+
diDbPSqeljyacSdBq/3HWK3YbMEk4QQMrWPwEdp52C7jbBRdl0mwmtVCXNg1X0uE
11+
p/P6p5pbYaGMTO44IrhTSdT9JmQ/sgbWkEaU8HRJuFDxh+vKY/+joSeZYmfTpGGt
12+
3OZreuR6094tT6QuU89Dvo+Pj+asiYa1nOyTwNE8c9g+3vk8PbstnxZTWp07llWW
13+
erkRZ6plFl1OetLMIh2MrbAhOIBH+2DrMhG1rw0IIQKBgQDoLgQxXZ/CMv2k6MSo
14+
48vDO215rabo43M9Q4vU3dB13sRuYFC8v08calNgFQvzr+cqDc4YBFYNNsNrA8rS
15+
X9FHKjFt/hNXyWJsNcAGYmPtJlFseVi8g9+vVy4PJ6NYrPqFWIzmIzBSQeKfRbc/
16+
vtOtkAzeKHm0Up0T69PVnWsfyQKBgQDUGWEta483qwq6F8saKK+GLoONJU5E5ieS
17+
w4kEyRgQviBoULJOFVA+ea1UHr1BcKKQHzMJQ36n8F5V7F+IvCn8nhR3F6CUxyrb
18+
3fzZrdkquc4QTqDeizqMUTK9mgglMyI10EII8a0kVjvMMDqGtcymBRrmuH32figg
19+
z9BMB8+jRQKBgEEuwhCV50cfB6SnkKaVpVv/MCHsBaL2UCEP+I7fYynkS6NtON10
20+
nCIvG48q+XsFlFFzJLwLY5k8GarOmr9rFRb0moH1xbpsmEwm3u0r7D/k9REOFEKA
21+
h2jzgcPRbgN0NLUBAjWOBX/ibVwnt2WXDlh4y5QHKvvcAatZFtSu6Cc5AoGBALN+
22+
PvUXP36W618NX75ljBV8K6w5VAGO3RKhE8XPAOS6Yeal1B+sfdpBUuQLl5JX5dsd
23+
7Cz8x6UMEGmavkaTJt04Uo1um2ENJEIpnSACtfQohjDaud1b6lJxLQWz4wzINz1f
24+
X2L+U86ag8SLVBxIokYlr9xtaXw+y2rpM5gETD4ZAoGBALCFeB5zy3berEN3+dfz
25+
/T5XVzgw1GOas0Wwol3vTXT/6J/phMcvW3c4idKa0a7j2CtYVYOSC+ViAbwKcHf7
26+
pFof5ecbwwGXoG+Ri0IM/2oD+QTwQHXWDvELFMrA9NV6BWeFnsCIEGW2KZWcoGJo
27+
aZkruIcaav539JB4Co2tWaVp
28+
-----END PRIVATE KEY-----

0 commit comments

Comments
 (0)