views.py 文件源码

def begin(request):
    sso = discourse_sso.DiscourseSigner(settings.DISCOURSE_SSO_SECRET)

    raw_payload = request.GET.get('sso', '')
    raw_signature = request.GET.get('sig', '')
    try:
        payload = sso.unsign(raw_payload, raw_signature)
    except discourse_sso.SignatureError:
        return HttpResponseForbidden()

    if b'return_sso_url' not in payload:
        return HttpResponseForbidden()

    out_payload, out_signature = sso.sign(
        utils.make_payload(request.user, payload[b'nonce']))
    redirect_to = '{}?{}'.format(
        payload[b'return_sso_url'].decode('utf8'),
        urllib.parse.urlencode({
            'sso': out_payload,
            'sig': out_signature}))
    return redirect(redirect_to)