python-app.yml

# This workflow will install Python dependencies, run tests and lint with a single version of Python
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions

name: Satosa-Saml2Spid

on:
  push:
    branches: [ master, dev ]
  pull_request:
    branches: [ master, dev ]

jobs:
  build:

    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        python-version:
          - '3.9'
          - '3.10'
          - '3.11'

    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v4
      with:
        python-version: ${{ matrix.python-version }}
    - name: Install system dependencies
      run: |
        sudo apt update
        sudo apt install -y libffi-dev libssl-dev python3-pip xmlsec1 procps libpcre3 libpcre3-dev
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        if [ -f requirements-dev.txt ]; then pip install -r requirements-dev.txt; fi
        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
        pip install -r example_sp/djangosaml2_sp/requirements.txt
        pip install spid-sp-test>=1.2.8
        pip install flake8
        pip install satosa_oidcop>=1.0
    - name: Lint with flake8
      run: |
        ## stop the build if there are Python syntax errors or undefined names
        flake8 --count --select=E9,F63,F7,F82 --show-source --statistics example
        ## exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
        flake8 --max-line-length 120 --count --exit-zero --statistics example
    - name: run djangosaml2 SP
      run: |
        cd example_sp/djangosaml2_sp/
        bash run.sh &
        sleep 5
    - name: djangosaml2 SP metadata to Proxy
      run: |
        wget http://localhost:8000/saml2/metadata -O example/metadata/sp/djangosaml2_sp.xml
    - name: run satosa-saml2spid
      run: |
        cd example
        mkdir -p metadata/idp
        mkdir -p metadata/sp
        export SATOSA_APP=`python3 -c 'import sysconfig; print(sysconfig.get_paths()["purelib"])'`
        uwsgi --wsgi-file $SATOSA_APP/satosa/wsgi.py  --https 0.0.0.0:10000,./pki/cert.pem,./pki/privkey.pem --callable app -b 32768 &
        sleep 5
    - name: Metadata proxy to djangosaml2 SP
      run: |
        wget --no-check-certificate https://localhost:10000/Saml2IDP/metadata -O example_sp/djangosaml2_sp/saml2_sp/saml2_config/satosa-saml2spid.xml
    - name: spid-sp-test SPID metadata, requests and responses
      run: |
        cd example
        spid_sp_test --idp-metadata > metadata/idp/spid-sp-test.xml
        spid_sp_test --metadata-url https://localhost:10000/spidSaml2/metadata --authn-url "http://localhost:8000/saml2/login/?idp=https://localhost:10000/Saml2IDP/metadata&next=/saml2/echo_attributes&idphint=https%253A%252F%252Flocalhost%253A8080" -ap spid_sp_test.plugins.authn_request.SatosaSaml2Spid --extra --debug ERROR -tr
    - name: spid-sp-test CIE id metadata
      run: |
        cd example
        spid_sp_test --profile cie-sp-public --metadata-url https://localhost:10000/cieSaml2/metadata
    - name: spid-sp-test eIDAS FiCEP metadata
      run: |
        cd example
        spid_sp_test --profile ficep-eidas-sp --metadata-url https://localhost:10000/spidSaml2/metadata