Parse SignedParts for bindings and assign

Author: tpazderka

src/zeep/ns.py

@@ -11,6 +11,8 @@
 MIME = "http://schemas.xmlsoap.org/wsdl/mime/"
 
 WSA = "http://www.w3.org/2005/08/addressing"
+WSP = "http://schemas.xmlsoap.org/ws/2004/09/policy"
+SP = "http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"
 
 
 DS = "http://www.w3.org/2000/09/xmldsig#"

src/zeep/wsdl/definitions.py

@@ -135,6 +135,11 @@ def __init__(self, wsdl, name, port_name):
         self.port_type = None
         self.wsdl = wsdl
         self._operations = {}
+        self.signatures = {
+            'header': [],  # Elements of header, that should be signed
+            'body': False,   # If body should be signed
+            'everything': False,  # If every header should be signed
+        }
 
     def resolve(self, definitions: Definition) -> None:
         self.port_type = definitions.get("port_types", self.port_name.text)

src/zeep/wsdl/wsdl.py

@@ -14,6 +14,7 @@
 
 from lxml import etree
 
+from zeep import ns
 from zeep.exceptions import IncompleteMessage
 from zeep.loader import (
     absolute_location,
@@ -30,7 +31,12 @@
 if typing.TYPE_CHECKING:
     from zeep.transports import Transport
 
-NSMAP = {"wsdl": "http://schemas.xmlsoap.org/wsdl/"}
+NSMAP = {
+    'wsdl': ns.WSDL,
+    'wsp':  ns.WSP,
+    'sp': ns.SP,
+    'wsu': ns.WSU,
+}
 
 logger = logging.getLogger(__name__)
 
@@ -440,6 +446,25 @@ def parse_binding(
                         logger.debug("Ignoring binding: %s", exc)
                         continue
 
+                    # Begin heuristics for signed parts...
+                    binding_policy = binding.name.localname + '_policy'
+                    signed_parts = doc.xpath('wsp:Policy[@wsu:Id="{}"]//sp:SignedParts'.format(binding_policy),
+                                             namespaces=NSMAP)
+                    for sign in signed_parts:
+                        if len(sign.getchildren()) == 0:
+                            # No children, we should sign everything
+                            binding.signatures['body'] = True
+                            binding.signatures['everything'] = True
+                            break
+
+                        for child in sign.iterchildren():
+                            if len(child.items()) > 0:
+                                # Header ...
+                                part = {attr: value for attr, value in child.items()}
+                                binding.signatures['header'].append(part)
+                            elif child.tag.split('}')[-1].lower() == 'body':
+                                # Body ...
+                                binding.signatures['body'] = True
                     logger.debug("Adding binding: %s", binding.name.text)
                     result[binding.name.text] = binding
                     break