1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
import sys
# importlib.resources was introduced in python 3.7
# files API from importlib.resources introduced in python 3.9
if sys.version_info[:2] >= (3, 9):
from importlib.resources import files as _resource_files
else:
from importlib_resources import files as _resource_files
from xmlschema import XMLSchema as _XMLSchema
from xmlschema.exceptions import XMLSchemaException as XMLSchemaError
import saml2.data.schemas as _data_schemas
def _create_xml_schema_validator(source, **kwargs):
kwargs = {
**kwargs,
"validation": "strict",
"locations": _locations,
"base_url": source,
"allow": "sandbox",
"use_fallback": False,
}
return _XMLSchema(source, **kwargs)
_schema_resources = _resource_files(_data_schemas)
_path_schema_xml = str(_schema_resources.joinpath("xml.xsd"))
_path_schema_envelope = str(_schema_resources.joinpath("envelope.xsd"))
_path_schema_xenc = str(_schema_resources.joinpath("xenc-schema.xsd"))
_path_schema_xmldsig_core = str(_schema_resources.joinpath("xmldsig-core-schema.xsd"))
_path_schema_saml_assertion = str(
_schema_resources.joinpath("saml-schema-assertion-2.0.xsd")
)
_path_schema_saml_metadata = str(
_schema_resources.joinpath("saml-schema-metadata-2.0.xsd")
)
_path_schema_saml_protocol = str(
_schema_resources.joinpath("saml-schema-protocol-2.0.xsd")
)
_locations = {
"http://www.w3.org/XML/1998/namespace": _path_schema_xml,
"http://schemas.xmlsoap.org/soap/envelope/": _path_schema_envelope,
"http://www.w3.org/2001/04/xmlenc#": _path_schema_xenc,
"http://www.w3.org/2000/09/xmldsig#": _path_schema_xmldsig_core,
"urn:oasis:names:tc:SAML:2.0:assertion": _path_schema_saml_assertion,
"urn:oasis:names:tc:SAML:2.0:metadata": _path_schema_saml_metadata,
"urn:oasis:names:tc:SAML:2.0:protocol": _path_schema_saml_protocol,
}
schema_saml_assertion = _create_xml_schema_validator(_path_schema_saml_assertion)
schema_saml_metadata = _create_xml_schema_validator(_path_schema_saml_metadata)
schema_saml_protocol = _create_xml_schema_validator(_path_schema_saml_protocol)
node_to_schema = {
# AssertionType
"urn:oasis:names:tc:SAML:2.0:assertion:Assertion": schema_saml_assertion,
# EntitiesDescriptorType
"urn:oasis:names:tc:SAML:2.0:metadata:EntitiesDescriptor": schema_saml_metadata,
# EntityDescriptorType
"urn:oasis:names:tc:SAML:2.0:metadata:EntityDescriptor": schema_saml_metadata,
# RequestAbstractType
"urn:oasis:names:tc:SAML:2.0:protocol:AssertionIDRequest": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:SubjectQuery": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:AuthnRequest": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:ArtifactResolve": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:ManageNameIDRequest": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:LogoutRequest": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:NameIDMappingRequest": schema_saml_protocol,
# StatusResponseType
"urn:oasis:names:tc:SAML:2.0:protocol:Response": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:ArtifactResponse": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:ManageNameIDResponse": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:LogoutResponse": schema_saml_protocol,
"urn:oasis:names:tc:SAML:2.0:protocol:NameIDMappingResponse": schema_saml_protocol,
}
|
