initial

Author: markspolakovs

.gitignore

@@ -0,0 +1,3 @@
+env/
+.idea/
+*.pyc

Procfile

@@ -0,0 +1 @@
+web: gunicorn appcore:app

appcore.py

@@ -0,0 +1,11 @@
+from flask import Flask
+from modules.neutron import neutron
+
+app = Flask(__name__)
+
+
+app.register_blueprint(neutron, url_prefix='/neutron')
+
+
+if __name__ == '__main__':
+    app.run()

modules/__init__.py

@@ -0,0 +1 @@
+from views import neutron

modules/neutron/__init__.py

@@ -0,0 +1,43 @@
+import requests
+from bs4 import BeautifulSoup
+
+
+class AdfsLoginFailed(Exception):
+    pass
+
+
+def adfslogin(email, password):
+    s = requests.Session()
+
+    # First, request SMS to be redirected to ADFS
+    r = s.get('https://sms.eursc.eu/sso.php')
+
+    # Second, log in to ADFS
+    # Find the URL to continue the flow
+    soup = BeautifulSoup(r.text, "html.parser")
+    form = soup.select('#loginForm')
+    form_url = 'https://sts.eursc.eu' + form[0]['action']
+
+    payload = {'AuthMethod': 'FormsAuthentication', 'UserName': email, 'Password': password}
+
+    r2 = s.post(form_url, data=payload)
+
+    # Third, follow ADFS's form to be redirected back to SMS
+    soup2 = BeautifulSoup(r2.text, "html.parser")
+    form2 = soup2.select('form')
+    form_url2 = form2[0]['action']
+
+    # ADFS's intermediary form has a bunch of inputs we need to finish the SAML flow
+    payload2 = {}
+
+    try:
+
+        for input in soup2.select('input[type=\'hidden\']'):
+            payload2[input['name']] = input['value']
+
+        r3 = s.post(form_url2, data=payload2)
+
+        # Epic success!
+        return s.cookies['PHPSESSID']
+    except KeyError as e:
+        raise AdfsLoginFailed(e)

modules/neutron/adfslogin.py

@@ -0,0 +1,24 @@
+from flask import Blueprint, request
+import json
+from adfslogin import adfslogin, AdfsLoginFailed
+import traceback
+
+neutron = Blueprint('neutron', __name__)
+
+
+@neutron.route('/login', methods=['POST'])
+def login():
+    email = request.values['email']
+    password = request.values['password']
+
+    try:
+        result = adfslogin(email, password)
+        return json.dumps({
+            'error': False,
+            'cookie': result
+        })
+    except AdfsLoginFailed as e:
+        return json.dumps({
+            'error': True,
+            'exception': traceback.format_exc()
+        })

modules/neutron/views.py

@@ -0,0 +1,11 @@
+beautifulsoup4==4.5.3
+bs4==0.0.1
+click==6.7
+Flask==0.12
+gunicorn==19.6.0
+itsdangerous==0.24
+Jinja2==2.9.5
+MarkupSafe==0.23
+requests==2.13.0
+Werkzeug==0.11.15
+wheel==0.24.0