Merge pull request #3249 from TIM-JYU/refactor-saml

Refactor SAML to use PySAML2

pyproject.toml

@@ -57,7 +57,6 @@ PyLaTeX = "^1.4.1"
 pypandoc = "^1.8.1"
 python-dateutil = "^2.8.2"
 python-magic = "^0.4.26"
-python3-saml = "^1.14.0"
 pytz = "^2022.1"
 recommonmark = "^0.7.1"
 responses = "^0.21.0"
@@ -71,6 +70,7 @@ Wand = "^0.6.7"
 requests = "^2.27.1"
 six = "^1.16.0"
 python-gnupg = "^0.5.0"
+pysaml2 = "^7.2.1"
 
 [tool.poetry.group.dev.dependencies]
 mypy = "^0.971"
@@ -89,6 +89,7 @@ Flask = "<2.2.0"
 Authlib = "1.0.0rc1"
 langcodes = "^3.3.0"
 black = "^22.6.0"
+types-pysaml2 = "^1.0.0"
 
 [build-system]
 requires = ["poetry-core>=1.0.0"]
@@ -163,6 +164,8 @@ module = [
     "celery.schedules",
     "lxml",
     "lxml.*",
+    "saml2",
+    "saml2.*",
     "sqlalchemy",
     "sqlalchemy.dialects",
     "sqlalchemy.exc",
@@ -191,7 +194,6 @@ module = [
     "timApp.answer.routes",
     "timApp.auth.accesshelper",
     "timApp.auth.auth_models",
-    "timApp.auth.saml",
     "timApp.auth.sessioninfo",
     "timApp.defaultconfig",
     "timApp.document.attributeparser",

timApp/Dockerfile

@@ -118,6 +118,9 @@ RUN bash -c "${APT_INSTALL} \
 
 RUN wget -q https://bootstrap.pypa.io/get-pip.py && python3.10 get-pip.py && rm get-pip.py
 
+# Install xmlsec binary which is needed for PySAML2
+RUN bash -c "${APT_INSTALL} xmlsec1 && ${APT_CLEANUP}"
+
 ENV PIP_INSTALL="python3.10 -m pip install"
 RUN bash -c "${PIP_INSTALL} --upgrade poetry==1.2.1 requests && ${APT_CLEANUP}"