Skip to content
  • Thomas Woerner's avatar
    ipaidp: Fix validation and reset of parameters · ff084fbd
    Thomas Woerner authored
    The uri parameters auth_uri, dev_auth_uri, token_uri, userinfo_uri and
    keys_uri have not been validated before. Also the base_url was not
    normalized. The auth_uri, dev_auth_uri, token_uri and userinfo_uri need
    to be set for new entries, but might be empty or empty string for reset
    or updates.
    
    The ipaidpclientsecret needs to be decoded from binary string in
    find_idp result to not trigger no change ipd_mod calls.
    
    The code for validate_uri and base_url normalization has been copied
    from the ipaserver idp plugin.
    
    ansible_freeipa_module:
    urlparse from urllib.parse with a fallback to six.moves.urllib.parse is
    imported and also exported. urlparse is needed for validate_uri in ipaidp
    module.
    
    Resolves: RHEL-17954, RHEL-17955, RHEL-17957 and RHEL-17958
    ff084fbd