Parse SignedParts for bindings and assign

Author: tpazderka

src/zeep/ns.py

@@ -12,6 +12,8 @@
 MIME = 'http://schemas.xmlsoap.org/wsdl/mime/'
 
 WSA = 'http://www.w3.org/2005/08/addressing'
+WSP = 'http://schemas.xmlsoap.org/ws/2004/09/policy'
+SP = 'http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702'
 
 
 DS = 'http://www.w3.org/2000/09/xmldsig#'

src/zeep/wsdl/definitions.py

@@ -119,6 +119,11 @@ def __init__(self, wsdl, name, port_name):
         self.port_type = None
         self.wsdl = wsdl
         self._operations = {}
+        self.signatures = {
+            'header': [],  # Elements of header, that should be signed
+            'body': False,   # If body should be signed
+            'everything': False,  # If every header should be signed
+        }
 
     def resolve(self, definitions):
         self.port_type = definitions.get('port_types', self.port_name.text)

src/zeep/wsdl/wsdl.py

@@ -14,6 +14,7 @@
 import six
 from lxml import etree
 
+from zeep import ns
 from zeep.exceptions import IncompleteMessage
 from zeep.loader import absolute_location, is_relative_path, load_external
 from zeep.settings import Settings
@@ -23,7 +24,10 @@
 
 
 NSMAP = {
-    'wsdl': 'http://schemas.xmlsoap.org/wsdl/',
+    'wsdl': ns.WSDL,
+    'wsp':  ns.WSP,
+    'sp': ns.SP,
+    'wsu': ns.WSU,
 }
 
 logger = logging.getLogger(__name__)
@@ -422,6 +426,25 @@ def parse_binding(self, doc):
                         logger.debug("Ignoring binding: %s", exc)
                         continue
 
+                    # Begin heuristics for signed parts...
+                    binding_policy = binding.name.localname + '_policy'
+                    signed_parts = doc.xpath('wsp:Policy[@wsu:Id="{}"]//sp:SignedParts'.format(binding_policy),
+                                             namespaces=NSMAP)
+                    for sign in signed_parts:
+                        if len(sign.getchildren()) == 0:
+                            # No children, we should sign everything
+                            binding.signatures['body'] = True
+                            binding.signatures['everything'] = True
+                            break
+
+                        for child in sign.iterchildren():
+                            if len(child.items()) > 0:
+                                # Header ...
+                                part = {attr: value for attr, value in child.items()}
+                                binding.signatures['header'].append(part)
+                            elif child.tag.split('}')[-1].lower() == 'body':
+                                # Body ...
+                                binding.signatures['body'] = True
                     logger.debug("Adding binding: %s", binding.name.text)
                     result[binding.name.text] = binding
                     break