如何在SAML SSO响应中添加用户属性

from saml2 import assertion, client, config, saml
from saml2.saml import Attribute

# 创建一个SAML断言
assertion = assertion.Assertion()
assertion.version = saml.VERSION_20
assertion.id = "1234567890"
assertion.issue_instant = "2023-04-01T12:00:00Z"

# 添加用户属性
attributes = {
    "email": ["user@example.com"],
    "role": ["admin"]
}
for attr_name, attr_values in attributes.items():
    attribute = Attribute(name=attr_name)
    attribute.attribute_value = [saml.AttributeValue(text=value) for value in attr_values]
    assertion.attribute_statement.append(attribute)

# 签名断言（省略签名代码）

from saml2 import BINDING_HTTP_POST, client
from saml2.saml import NAMEID_FORMAT_EMAILADDRESS

# 解析SAML断言
saml_response = "..."  # 从请求中获取SAML响应
sp_config = config.SPConfig()
sp_client = client.Saml2Client(config=sp_config)

# 验证和解析断言
authn_response = sp_client.parse_authn_request_response(saml_response, BINDING_HTTP_POST)
assertion = authn_response.assertion

# 获取用户属性
user_attributes = {attr.name: [value.text for value in attr.attribute_value] for attr in assertion.attribute_statement}
print(user_attributes)