Initial load

Author: rohe

Diff for: .gitignore

@@ -0,0 +1,48 @@
+# IntelliJ project folder
+.idea
+
+# Other dev-env folders and files
+.vagrant
+Vagrantfile
+
+# setup.py-related folders and files
+build
+dist
+*.egg-info
+*.egg
+*.eggs
+
+# Compiled files
+*.pyc
+
+# Logs
+*.log
+*.log.*
+
+# Tox testing
+.tox
+private/
+tmp/
+keys/
+secret/
+pyoidc*
+foo.*
+
+# Dynamically created doc folders
+doc/_build
+!tests/data/keys
+
+# Remaining stuff
+oidc_example/op1/client_db.db
+oidc_example/op1/oc_config.py
+oidc_example/op2/client_db.db
+oidc_example/op2/config.py
+oidc_example/op2/modules
+oidc_example/op2/sp.xml
+oidc_example/op2/sp_cert/tmp_mycert.pem
+oidc_example/op2/sp_cert/tmp_mykey.pem
+oidc_example/op2/sp_conf.py
+oidc_example/op2/static/jwks.json
+oidc_example/rp3/conf.py
+oidc_example/rp3/modules/
+update

Diff for: CHANGELOG.md

@@ -0,0 +1,139 @@
+# Change Log
+All notable changes to this project will be documented in this file.
+
+The format is based on the [KeepAChangeLog] project.
+
+[KeepAChangeLog]: http://keepachangelog.com/
+
+## 0.13.0 [Unreleased]
+
+### Fixed
+- [#430] Skip keys that are of unknown type or under defined.
+- [#430] Audience of a client assertion is endpoint dependent.
+- [#427] Made matching for response_types order independent for authorization requests
+- [#399] Matching response_types for authz requests is too strict
+
+[#431]: https://github.com/OpenIDC/pyoidc/pull/431
+[#430]: https://github.com/OpenIDC/pyoidc/pull/430
+[#427]: https://github.com/OpenIDC/pyoidc/pull/427
+[#399]: https://github.com/OpenIDC/pyoidc/issues/399
+
+## 0.12.0 [2017-09-25]
+
+### Fixed
+- [#419]: Inconsistent release numbers/tags
+- [#420]: Distributed claims
+
+[#419]: https://github.com/OpenIDC/pyoidc/issues/419
+[#420]: https://github.com/OpenIDC/pyoidc/pull/420
+
+## 0.11.1.0 [2017-08-26]
+
+### Fixed
+- [#405]: Fix generation of endpoint urls
+- [#411]: Empty lists not indexable
+- [#413]: Fix error when wrong response_mode requested
+- [#418]: Made phone_number_claim be boolean and fixed a bug when importing JSON (non-boolean where boolean expected)
+
+[#418]: https://github.com/OpenIDC/pyoidc/pull/418
+[#411]: https://github.com/OpenIDC/pyoidc/issues/411
+[#405]: https://github.com/OpenIDC/pyoidc/issues/405
+[#413]: https://github.com/OpenIDC/pyoidc/issues/413
+
+## 0.11.0.0 [2017-07-07]
+
+### Changed
+- [#318]: `oic.utils.authn.saml` raises `ImportError` on import if optional `saml2` dependency is not present.
+- [#324]: Make the Provider `symkey` argument optional.
+- [#325]: `oic.oic.claims_match` implementation refactored.
+- [#368]: `oic.oauth2.Client.construct_AccessTokenRequest()` as well as `oic.oic.Client` are now able to perform proper Resource Owner Password Credentials Grant
+- [#374]: Made the to_jwe/from_jwe methods of Message accept list of keys value of parameter keys.
+- [#387]: Refactored the `oic.utils.sdb.SessionDB` constructor API.
+- [#380]: Made cookie_path and cookie_domain configurable via Provider like the cookie_name.
+- [#386]: An exception will now be thrown if a sub claim received from the userinfo endpoint is not the same as a sub claim previously received in an ID Token.
+- [#392]: Made sid creation simpler and faster
+
+### Fixed
+- [#317]: Resolved an `AttibuteError` exception under Python 2.
+- [#313]: Catch exception correctly
+- [#319]: Fix sanitize on strings starting with "B" or "U"
+- [#330]: Fix client_management user input being eval'd under Python 2
+- [#358]: Fixed claims_match
+- [#362]: Fix bad package settings URL
+- [#369]: The AuthnEvent object is now serialized to JSON for the session.
+- [#373]: Made the standard way the default when dealing with signed JWTs without 'kid'. Added the possibility to override this behavior if necessary.
+- [#401]: Fixed message decoding and verifying errors.
+
+### Security
+- [#349]: Changed crypto algorithm used by `oic.utils.sdb.Crypt` for token encryption to Fernet. Old stored tokens are incompatible.
+- [#363]: Fixed IV reuse for CookieDealer class. Replaced the encrypt-then-mac construction with a proper AEAD (AES-SIV).
+
+[#401]: https://github.com/OpenIDC/pyoidc/pull/401
+[#386]: https://github.com/OpenIDC/pyoidc/pull/386
+[#380]: https://github.com/OpenIDC/pyoidc/pull/380
+[#317]: https://github.com/OpenIDC/pyoidc/pull/317
+[#313]: https://github.com/OpenIDC/pyoidc/issues/313
+[#387]: https://github.com/OpenIDC/pyoidc/pull/387
+[#318]: https://github.com/OpenIDC/pyoidc/pull/318
+[#319]: https://github.com/OpenIDC/pyoidc/pull/319
+[#324]: https://github.com/OpenIDC/pyoidc/pull/324
+[#325]: https://github.com/OpenIDC/pyoidc/pull/325
+[#330]: https://github.com/OpenIDC/pyoidc/issues/330
+[#349]: https://github.com/OpenIDC/pyoidc/issues/349
+[#358]: https://github.com/OpenIDC/pyoidc/pull/358
+[#362]: https://github.com/OpenIDC/pyoidc/pull/362
+[#363]: https://github.com/OpenIDC/pyoidc/issue/363
+[#368]: https://github.com/OpenIDC/pyoidc/issues/368
+[#369]: https://github.com/OpenIDC/pyoidc/pull/369
+[#373]: https://github.com/OpenIDC/pyoidc/pull/373
+[#374]: https://github.com/OpenIDC/pyoidc/pull/374
+[#392]: https://github.com/OpenIDC/pyoidc/issue/392
+
+## 0.10.0.0 [2017-03-28]
+
+### Changed
+- [#291]: Testing more relevant Python versions.
+- [#296]: `parse_qs` import from `future.backports` to `future.moves`.
+- [#188]: Added `future` dependency, updated dependecies
+- [#305]: Some import were removed from `oic.oauth2` and `oic.oic.provider`, please import them from respective modules (`oic.oath2.message` and `oic.exception`).
+
+### Removed
+- [#294]: Generating code indices in documentation.
+
+### Fixed
+- [#295]: Access token issuance and typo/exception handling.
+
+[#291]: https://github.com/OpenIDC/pyoidc/pull/291
+[#294]: https://github.com/OpenIDC/pyoidc/pull/294
+[#295]: https://github.com/OpenIDC/pyoidc/pull/295
+[#296]: https://github.com/OpenIDC/pyoidc/pull/296
+[#188]: https://github.com/OpenIDC/pyoidc/issues/188
+[#305]: https://github.com/OpenIDC/pyoidc/pull/305
+
+## 0.9.5.0 [2017-03-22]
+
+### Added
+- [#276]: Use a Change log for change history.
+- [#277]: Use pip-tools for dependency management.
+
+[#276]: https://github.com/OpenIDC/pyoidc/pull/276
+[#277]: https://github.com/OpenIDC/pyoidc/pull/277
+
+### Removed
+- [#274]: Moved `oidc_fed` to [fedoidc].
+
+[#274]: https://github.com/OpenIDC/pyoidc/pull/274
+[fedoidc]: https://github.com/OpenIDC/fedoidc
+
+### Changed
+- [#273]: Allow webfinger accept `kwargs`.
+
+[#273]: https://github.com/OpenIDC/pyoidc/pull/273
+
+### Fixed
+- [#286]: Account for missing code in the SessionDB.
+
+[#286]: https://github.com/OpenIDC/pyoidc/pulls/286
+
+## 0.9.4.0 [2016-12-22]
+No change log folks. Sorry.

Diff for: LICENSE.txt

@@ -0,0 +1,13 @@
+Copyright (C) 2017 Roland Hedberg, Sweden
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

Diff for: Makefile

@@ -0,0 +1,55 @@
+PROJECT_ROOT:=.
+
+SPHINXOPTS    =
+SPHINXBUILD   = sphinx-build
+SPHINXABUILD  = sphinx-autobuild
+BUILDDIR      = doc/_build
+DOCDIR        = doc/
+OICDIR        = src/oicmsg
+TESTDIR       = tests
+
+help:
+	@echo "Please use \`make <target>' where <target> is one of"
+	@echo "  html       to make HTML documentation files"
+	@echo "  livehtml   to make HTML documentation files (live reload!)"
+	@echo "  install    to install the python dependencies for development"
+	@echo "  isort      to sort imports"
+.PHONY: help
+
+clean:
+	rm -rf $(BUILDDIR)/*
+.PHONY: clean
+
+ALLSPHINXOPTS=-W
+html:
+	@pipenv run $(SPHINXBUILD) -b html $(DOCDIR) $(BUILDDIR)/html $(ALLSPHINXOPTS)
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
+.PHONY: html
+
+livehtml:
+	@pipenv run $(SPHINXABUILD) -b html $(DOCDIR) $(BUILDDIR)/html $(ALLSPHINXOPTS)
+	@echo "Build finished. Watching for change ..."
+.PHONY: livehtml
+
+install:
+	@pipenv install --dev
+.PHONY: install
+
+test:
+	@pipenv run pytest $(TESTDIR)
+.PHONY: test
+
+isort:
+	@pipenv run isort --recursive $(OICDIR) $(TESTDIR)
+
+check-isort:
+	@pipenv run isort --recursive --diff --check-only $(OICDIR) $(TESTDIR)
+.PHONY: isort check-isort
+
+check-pylama:
+	@pipenv run pylama $(OICDIR) $(TESTDIR)
+.PHONY: check-pylama
+
+release:
+	@pipenv run python setup.py sdist upload -r pypi
+.PHONY: release

Diff for: pylama.ini

@@ -0,0 +1,5 @@
+[pylama:pycodestyle]
+max_line_length = 120
+
+[pylama:mccabe]
+complexity = 40

Diff for: setup.py

@@ -0,0 +1,80 @@
+#!/usr/bin/env python
+#
+# Copyright (C) 2017 Roland Hedberg, Sweden
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+import re
+import sys
+
+from setuptools import setup
+from setuptools.command.test import test as TestCommand
+
+__author__ = 'Roland Hedberg'
+
+
+class PyTest(TestCommand):
+    def finalize_options(self):
+        TestCommand.finalize_options(self)
+        self.test_args = []
+        self.test_suite = True
+
+    def run_tests(self):
+        # import here, cause outside the eggs aren't loaded
+        import pytest
+
+        errno = pytest.main(self.test_args)
+        sys.exit(errno)
+
+
+# Python 2.7 and later ship with importlib and argparse
+if sys.version_info[0] == 2 and sys.version_info[1] == 6:
+    extra_install_requires = ["importlib", "argparse"]
+else:
+    extra_install_requires = []
+
+version = ''
+with open('src/oiccli/__init__.py', 'r') as fd:
+    version = re.search(r'^__version__\s*=\s*[\'"]([^\'"]*)[\'"]',
+                        fd.read(), re.MULTILINE).group(1)
+
+setup(
+    name="oiccli",
+    version=version,
+    description="Python implementation of OAuth2 and OpenID Connect client",
+    author="Roland Hedberg",
+    author_email="[email protected]",
+    license="Apache 2.0",
+    url='https://github.com/IdentityPython/oicmsg/',
+    packages=["oiccli", "oiccli/oauth2", "oiccli/oic"],
+    package_dir={"": "src"},
+    classifiers=[
+        "Development Status :: 4 - Beta",
+        "License :: OSI Approved :: Apache Software License",
+        "Programming Language :: Python :: 2.7",
+        "Programming Language :: Python :: 3.4",
+        "Programming Language :: Python :: 3.5",
+        "Programming Language :: Python :: 3.6",
+        "Topic :: Software Development :: Libraries :: Python Modules"],
+    install_requires=[
+        "pyjwkest>=1.3.6",
+        "future",
+        "six",
+    ],
+    tests_require=[
+        "responses",
+        "testfixtures",
+    ],
+    zip_safe=False,
+    cmdclass={'test': PyTest},
+)

Diff for: src/oiccli/__init__.py

@@ -0,0 +1,49 @@
+import hashlib
+import string
+
+# Since SystemRandom is not available on all systems
+try:
+    import random.SystemRandom as rnd
+except ImportError:
+    import random as rnd
+
+__author__ = 'Roland Hedberg'
+__version__ = '0.0.1'
+
+
+OIDCONF_PATTERN = "%s/.well-known/openid-configuration"
+CC_METHOD = {
+    'S256': hashlib.sha256,
+    'S384': hashlib.sha384,
+    'S512': hashlib.sha512,
+}
+
+
+def rndstr(size=16):
+    """
+    Returns a string of random ascii characters or digits
+
+    :param size: The length of the string
+    :return: string
+    """
+    _basech = string.ascii_letters + string.digits
+    return "".join([rnd.choice(_basech) for _ in range(size)])
+
+
+BASECH = string.ascii_letters + string.digits + '-._~'
+
+
+def unreserved(size=64):
+    """
+    Returns a string of random ascii characters, digits and unreserved
+    characters
+
+    :param size: The length of the string
+    :return: string
+    """
+
+    return "".join([rnd.choice(BASECH) for _ in range(size)])
+
+
+def sanitize(str):
+    return str