This is a Consumer Financial Protection Bureau (CFPB) information system. The CFPB is an independent agency of the United States Government. CFPB information systems are provided for the processing of official information only. Unauthorized or improper use of this system may result in administrative action, as well as civil and criminal penalties.
Because this is a CFPB information system, you have no reasonable expectation of privacy regarding any communication or data, transiting or stored, on this information system. All data contained in CFPB information systems is owned by the CFPB, and your use of the CFPB information system serves as your consent to your usage being monitored, intercepted, recorded, read, copied, captured, or otherwise audited in any manner by authorized personnel, including, but not limited to, employees, contractors, and/or agents of the United States Government.
{% endblock %} diff --git a/cfgov/login/tests/test_views.py b/cfgov/login/tests/test_views.py new file mode 100644 index 00000000000..1e169192dd8 --- /dev/null +++ b/cfgov/login/tests/test_views.py @@ -0,0 +1,16 @@ +from django.test import TestCase, override_settings +from django.urls import reverse + + +class LoginViewTestCase(TestCase): + + @override_settings(ENABLE_SSO=True) + def test_view_gets_sso_enabled_context(self): + response = self.client.get(reverse("cfgov_login")) + self.assertTrue(response.context["sso_enabled"]) + pass + + @override_settings(ENABLE_SSO=False) + def test_view_gets_sso_disabled_context(self): + response = self.client.get(reverse("cfgov_login")) + self.assertFalse(response.context["sso_enabled"]) diff --git a/cfgov/login/urls.py b/cfgov/login/urls.py index 836a37fe9e9..2b3f47a625d 100644 --- a/cfgov/login/urls.py +++ b/cfgov/login/urls.py @@ -2,49 +2,32 @@ from django.urls import include, re_path, reverse_lazy from django.views.generic.base import RedirectView +from login.views import LoginView -if settings.ENABLE_SSO: # pragma: no cover - urlpatterns = [ - # If SSO auth is enabled, /login will redirect to /oidc/login, - # which in turn will redirect to the configured identity provider. - re_path(r"^oidc/", include("mozilla_django_oidc.urls")), - re_path( - r"^admin/login/$", - RedirectView.as_view( - url=reverse_lazy("oidc_authentication_init"), query_string=True - ), - ), - re_path( - r"^admin/logout/$", - RedirectView.as_view( - url=reverse_lazy("oidc_logout"), - query_string=True, - ), - ), - ] -else: - urlpatterns = [ - # When SSO is not enabled, the Django login should redirect to Wagtail - re_path( - r"^django-admin/login/$", - RedirectView.as_view( - url=reverse_lazy("wagtailadmin_login"), query_string=True - ), - ), - ] -urlpatterns = urlpatterns + [ - # Redirect root-level /login and /logout to Wagtail's URLs +urlpatterns = [ + # Include OIDC URLs + re_path(r"^oidc/", include("mozilla_django_oidc.urls")), + # Override Wagtail's login URL with our subclass + re_path(r"^admin/login/", LoginView.as_view(), name="cfgov_login"), + # Redirect root-level /login and /logout re_path( r"^login/$", RedirectView.as_view( - url=reverse_lazy("wagtailadmin_login"), query_string=True + url=reverse_lazy("cfgov_login"), query_string=True ), ), re_path( r"^logout/$", RedirectView.as_view( - url=reverse_lazy("wagtailadmin_logout"), query_string=True + url=reverse_lazy("cfgov_login"), query_string=True + ), + ), + # Redirect the Django admin login to Wagtail + re_path( + r"^django-admin/login/$", + RedirectView.as_view( + url=reverse_lazy("cfgov_login"), query_string=True ), ), # Redirect Django's password change view to Wagtail's @@ -55,3 +38,16 @@ ), ), ] + +if settings.ENABLE_SSO: # pragma: no cover + urlpatterns = urlpatterns + [ + # Redirect logout to the OIDC logout to make sure we clear our OIDC + # session information + re_path( + r"^admin/logout/$", + RedirectView.as_view( + url=reverse_lazy("oidc_logout"), + query_string=True, + ), + ), + ] diff --git a/cfgov/login/views.py b/cfgov/login/views.py new file mode 100644 index 00000000000..d4cc12e421b --- /dev/null +++ b/cfgov/login/views.py @@ -0,0 +1,12 @@ +from django.conf import settings + +from wagtail.admin.views.account import LoginView as WagtailLoginView + + +class LoginView(WagtailLoginView): + template_name = "login/login.html" + + def get_context_data(self, **kwargs): + context = super().get_context_data(**kwargs) + context["sso_enabled"] = settings.ENABLE_SSO + return context