Add plugin to extract users from Google profiles..

product/ERP5Security/ERP5ExternalOauth2ExtractionPlugin.py

@@ -47,6 +47,13 @@ try:
 except ImportError:
   facebook = None
 
+try:
+  import apiclient.discovery
+  import httplib2
+  import oauth2client.client
+except ImportError:
+  httplib2 = None
+
 #Form for new plugin in ZMI
 manage_addERP5FacebookExtractionPluginForm = PageTemplateFile(
   'www/ERP5Security_addERP5FacebookExtractionPlugin', globals(),
@@ -65,6 +72,24 @@ def addERP5FacebookExtractionPlugin(dispatcher, id, title=None, REQUEST=None):
           'ERP5FacebookExtractionPlugin+added.'
           % dispatcher.absolute_url())
 
+#Form for new plugin in ZMI
+manage_addERP5GoogleExtractionPluginForm = PageTemplateFile(
+  'www/ERP5Security_addERP5GoogleExtractionPlugin', globals(),
+  __name__='manage_addERP5GoogleExtractionPluginForm')
+
+def addERP5GoogleExtractionPlugin(dispatcher, id, title=None, REQUEST=None):
+  """ Add a ERP5GoogleExtractionPlugin to a Pluggable Auth Service. """
+
+  plugin = ERP5GoogleExtractionPlugin(id, title)
+  dispatcher._setObject(plugin.getId(), plugin)
+
+  if REQUEST is not None:
+      REQUEST['RESPONSE'].redirect(
+          '%s/manage_workspace'
+          '?manage_tabs_message='
+          'ERP5GoogleExtractionPlugin+added.'
+          % dispatcher.absolute_url())
+
 class ERP5ExternalOauth2ExtractionPlugin:
 
   cache_factory_name = 'extrenal_oauth2_token_cache_factory'
@@ -136,7 +161,6 @@ class ERP5ExternalOauth2ExtractionPlugin:
       # no token
       return DumbHTTPExtractor().extractCredentials(request)
 
-
     # token is available
     user = None
     user_entry = None
@@ -226,6 +250,49 @@ class ERP5FacebookExtractionPlugin(ERP5ExternalOauth2ExtractionPlugin, BasePlugi
         user_entry = None
     return user_entry
 
+class ERP5GoogleExtractionPlugin(ERP5ExternalOauth2ExtractionPlugin, BasePlugin):
+  """
+  Plugin to authenicate as machines.
+  """
+
+  meta_type = "ERP5 Google Extraction Plugin"
+  prefix = 'go_'
+  header_string = 'google'
+
+  def getUserEntry(self, token):
+    if httplib2 is None:
+      LOG('ERP5GoogleExtractionPlugin', INFO,
+        'No Google modules available, please install google-api-python-client '
+        'package. Authentication disabled..')
+      return None
+    timeout = socket.getdefaulttimeout()
+    try:
+      # require really fast interaction
+      socket.setdefaulttimeout(5)
+      http = oauth2client.client.AccessTokenCredentials(token, 'ERP5 Client'
+        ).authorize(httplib2.Http())
+      service = apiclient.discovery.build("oauth2", "v1", http=http)
+      google_entry = service.userinfo().get().execute()
+    except Exception:
+      google_entry = None
+    finally:
+      socket.setdefaulttimeout(timeout)
+
+    user_entry = {}
+    if google_entry is not None:
+      # sanitise value
+      try:
+        for k in (('first_name', 'name'),
+            ('last_name', 'family_name'),
+            ('reference', 'id'),
+            ('email', 'email')):
+          value = google_entry[k[1]].encode('utf-8')
+          if k[0] == 'reference':
+            value = self.prefix + value
+          user_entry[k[0]] = value
+      except KeyError:
+        user_entry = None
+    return user_entry
 
 #List implementation of class
 classImplements( ERP5FacebookExtractionPlugin,
@@ -233,3 +300,8 @@ classImplements( ERP5FacebookExtractionPlugin,
                )
 InitializeClass(ERP5FacebookExtractionPlugin)
 
+classImplements( ERP5GoogleExtractionPlugin,
+                plugins.ILoginPasswordHostExtractionPlugin
+               )
+InitializeClass(ERP5GoogleExtractionPlugin)
+

product/ERP5Security/__init__.py

@@ -66,6 +66,7 @@ registerMultiPlugin(ERP5KeyAuthPlugin.ERP5KeyAuthPlugin.meta_type)
 registerMultiPlugin(ERP5ExternalAuthenticationPlugin.ERP5ExternalAuthenticationPlugin.meta_type)
 registerMultiPlugin(ERP5BearerExtractionPlugin.ERP5BearerExtractionPlugin.meta_type)
 registerMultiPlugin(ERP5ExternalOauth2ExtractionPlugin.ERP5FacebookExtractionPlugin.meta_type)
+registerMultiPlugin(ERP5ExternalOauth2ExtractionPlugin.ERP5GoogleExtractionPlugin.meta_type)
 
 def initialize(context):
 
@@ -141,6 +142,15 @@ def initialize(context):
                          , icon='www/portal.gif'
                          )
 
+    context.registerClass( ERP5ExternalOauth2ExtractionPlugin.ERP5GoogleExtractionPlugin
+                         , permission=ManageUsers
+                         , constructors=(
+                            ERP5ExternalOauth2ExtractionPlugin.manage_addERP5GoogleExtractionPluginForm,
+                            ERP5ExternalOauth2ExtractionPlugin.addERP5GoogleExtractionPlugin, )
+                         , visibility=None
+                         , icon='www/portal.gif'
+                         )
+
 from AccessControl.SecurityInfo import ModuleSecurityInfo
 ModuleSecurityInfo('Products.ERP5Security.ERP5UserManager').declarePublic(
   'getUserByLogin')

product/ERP5Security/www/ERP5Security_addERP5GoogleExtractionPlugin.zpt

+<h1 tal:replace="structure context/manage_page_header">PAGE HEADER</h1>
+<h2 tal:define="form_title string:Add ERP5 Google Extraction Plugin"
+    tal:replace="structure context/manage_form_title">FORM TITLE</h2>
+
+<p class="form-help">Please input the configuration</p>
+
+<form action="addERP5GoogleExtractionPlugin" method="POST">
+<table cellspacing="0" cellpadding="2" border="0">
+  <tr>
+    <td align="left" valign="top">
+    <div class="form-label">
+    Id
+    </div>
+    </td>
+    <td align="left" valign="top">
+    <input type="text" name="id" size="40" />
+    </td>
+  </tr>
+  <tr>
+    <td align="left" valign="top">
+    <div class="form-label">
+    Title
+    </div>
+    </td>
+    <td align="left" valign="top">
+    <input type="text" name="title" size="40" />
+    </td>
+  </tr>
+  <tr>
+    <td colspan="2"> <input type="submit" value="add plugin"/>
+    </td>
+  </tr>
+</table>
+</form>
+
+<h1 tal:replace="structure context/manage_page_footer">PAGE FOOTER</h1>