~ubuntuone-pqm-team/canonical-identity-provider/trunk

sha256 openid identifiers so we don't send them verbatim in the SAML assertion (the hash should be as unique and persistent as the identifier itself)

added added

removed removed

import base64

import json

import urlparse

from hashlib import sha256

from BeautifulSoup import BeautifulStoneSoup

from django.conf import settings

393

394

if (sp_config.honor_authnrequest_nameidpolicy_format and

394

395

not sp_config.send_email_as_persistent and

395

396

self._subject_format.split(":")[-1] == "persistent"):

396

preferred = account.openid_identifier

397

# openid identifier is unicode (or str in py3 at some point)

398

# sha256 eats strings (or bytes in py3)

399

# so we must ENcode

400

identifier = account.openid_identifier.encode('utf-8')

401

preferred = sha256(identifier).hexdigest()

397

402

398

403

self._subject = preferred

399

404