为ISV添加最低限度的SAML支持

from flask import Flask, redirect, url_for
from flask_saml2 import Saml2Login

app = Flask(__name__)

# 配置SAML
app.config['SAML2_LOGIN'] = {
    'strict': True,
    'sp': {
        'entityId': 'https://your-app.com/metadata',
        'assertionConsumerService': {
            'url': 'https://your-app.com/saml/acs'
        },
        'singleLogoutService': {
            'url': 'https://your-app.com/saml/sls'
        },
        'NameIDFormat': 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
        'x509cert': 'YOUR_SP_CERTIFICATE',
        'privateKey': 'YOUR_SP_PRIVATE_KEY'
    },
    'idp': {
        'entityId': 'https://idp.example.com/metadata',
        'singleSignOnService': {
            'url': 'https://idp.example.com/saml/sso'
        },
        'singleLogoutService': {
            'url': 'https://idp.example.com/saml/slo',
            'binding': 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
        },
        'x509cert': 'IDP_CERTIFICATE'
    }
}

saml2_login = Saml2Login(app)

@app.route('/')
def index():
    return 'Welcome to the home page!'

@app.route('/saml/login')
def saml_login():
    return redirect(url_for('saml2_login.login'))

@app.route('/saml/acs', methods=['POST'])
@saml2_login.authenticate()
def saml_acs():
    return 'You are logged in!'

@app.route('/saml/sls')
@saml2_login.logout()
def saml_sls():
    return 'You are logged out!'

if __name__ == '__main__':
    app.run(debug=True)