264 lines
9.2 KiB
Nix
264 lines
9.2 KiB
Nix
{ lib, fetchFromGitHub, cacert, openssl, nixosTests
|
|
, python310, fetchPypi, fetchpatch
|
|
}:
|
|
|
|
let
|
|
dropDocOutput = { outputs, ... }: {
|
|
outputs = lib.filter (x: x != "doc") outputs;
|
|
};
|
|
|
|
# Follow issue below for Python 3.11 support
|
|
# https://github.com/privacyidea/privacyidea/issues/3593
|
|
python3' = python310.override {
|
|
packageOverrides = self: super: {
|
|
django = super.django_3;
|
|
|
|
sqlalchemy = super.sqlalchemy.overridePythonAttrs (oldAttrs: rec {
|
|
version = "1.3.24";
|
|
src = fetchPypi {
|
|
inherit (oldAttrs) pname;
|
|
inherit version;
|
|
hash = "sha256-67t3fL+TEjWbiXv4G6ANrg9ctp+6KhgmXcwYpvXvdRk=";
|
|
};
|
|
doCheck = false;
|
|
});
|
|
# version 3.3.0+ does not support SQLAlchemy 1.3
|
|
factory-boy = super.factory-boy.overridePythonAttrs (oldAttrs: rec {
|
|
version = "3.2.1";
|
|
src = oldAttrs.src.override {
|
|
inherit version;
|
|
hash = "sha256-qY0newwEfHXrbkq4UIp/gfsD0sshmG9ieRNUbveipV4=";
|
|
};
|
|
postPatch = "";
|
|
});
|
|
# fails with `no tests ran in 1.75s`
|
|
alembic = super.alembic.overridePythonAttrs (lib.const {
|
|
doCheck = false;
|
|
});
|
|
flask-migrate = super.flask-migrate.overridePythonAttrs (oldAttrs: rec {
|
|
version = "2.7.0";
|
|
src = fetchPypi {
|
|
pname = "Flask-Migrate";
|
|
inherit version;
|
|
hash = "sha256-ri8FZxWIdi3YOiHYsYxR/jVehng+JFlJlf+Nc4Df/jg=";
|
|
};
|
|
});
|
|
flask-sqlalchemy = super.flask-sqlalchemy.overridePythonAttrs (old: rec {
|
|
version = "2.5.1";
|
|
format = "setuptools";
|
|
src = fetchPypi {
|
|
pname = "Flask-SQLAlchemy";
|
|
inherit version;
|
|
hash = "sha256:2bda44b43e7cacb15d4e05ff3cc1f8bc97936cc464623424102bfc2c35e95912";
|
|
};
|
|
});
|
|
# Taken from by https://github.com/NixOS/nixpkgs/pull/173090/commits/d2c0c7eb4cc91beb0a1adbaf13abc0a526a21708
|
|
werkzeug = super.werkzeug.overridePythonAttrs (old: rec {
|
|
version = "1.0.1";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-bICx5a02ZSkOo5MguR4b4eDV9gZSuWSjBwIW3oPS5Hw=";
|
|
};
|
|
nativeCheckInputs = old.nativeCheckInputs ++ (with self; [
|
|
requests
|
|
]);
|
|
doCheck = false;
|
|
});
|
|
# Required by flask-1.1
|
|
jinja2 = super.jinja2.overridePythonAttrs (old: rec {
|
|
version = "2.11.3";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-ptWEM94K6AA0fKsfowQ867q+i6qdKeZo8cdoy4ejM8Y=";
|
|
};
|
|
patches = [
|
|
# python 3.10 compat fixes. In later upstream releases, but these
|
|
# are not compatible with flask 1 which we need here :(
|
|
(fetchpatch {
|
|
url = "https://github.com/thmo/jinja/commit/1efb4cc918b4f3d097c376596da101de9f76585a.patch";
|
|
hash = "sha256-GFaSvYxgzOEFmnnDIfcf0ImScNTh1lR4lxt2Uz1DYdU=";
|
|
})
|
|
(fetchpatch {
|
|
url = "https://github.com/mkrizek/jinja/commit/bd8bad37d1c0e2d8995a44fd88e234f5340afec5.patch";
|
|
hash = "sha256-Uow+gaO+/dH6zavC0X/SsuMAfhTLRWpamVlL87DXDRA=";
|
|
excludes = [ "CHANGES.rst" ];
|
|
})
|
|
];
|
|
});
|
|
# Required by jinja2-2.11.3
|
|
markupsafe = super.markupsafe.overridePythonAttrs (old: rec {
|
|
version = "2.0.1";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-WUxngH+xYjizDES99082wCzfItHIzake+KDtjav1Ygo=";
|
|
};
|
|
});
|
|
itsdangerous = super.itsdangerous.overridePythonAttrs (old: rec {
|
|
version = "1.1.0";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-MhsDPQfypBNtPsdi6snxahDM1g9TwMka+QIXrOe6Hxk=";
|
|
};
|
|
});
|
|
flask = super.flask.overridePythonAttrs (old: rec {
|
|
version = "1.1.4";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-D762GA04OpGG0NbtlU4AQq2fGODo3giLK0GdUmkn0ZY=";
|
|
};
|
|
});
|
|
sqlsoup = super.sqlsoup.overrideAttrs ({ meta ? {}, ... }: {
|
|
meta = meta // { broken = false; };
|
|
});
|
|
click = super.click.overridePythonAttrs (old: rec {
|
|
version = "7.1.2";
|
|
src = old.src.override {
|
|
inherit version;
|
|
hash = "sha256-0rUlXHxjSbwb0eWeCM0SrLvWPOZJ8liHVXg6qU37axo=";
|
|
};
|
|
disabledTests = [ "test_bytes_args" ]; # https://github.com/pallets/click/commit/6e05e1fa1c2804
|
|
});
|
|
# Now requires `lingua` as check input that requires a newer `click`,
|
|
# however `click-7` is needed by the older flask we need here. Since it's just
|
|
# for the test-suite apparently, let's skip it for now.
|
|
mako = super.mako.overridePythonAttrs (lib.const {
|
|
nativeCheckInputs = [];
|
|
doCheck = false;
|
|
});
|
|
# Requires pytest-httpserver as checkInput now which requires Werkzeug>=2 which is not
|
|
# supported by current privacyIDEA.
|
|
responses = super.responses.overridePythonAttrs (lib.const {
|
|
doCheck = false;
|
|
});
|
|
flask-babel = (super.flask-babel.override {
|
|
sphinxHook = null;
|
|
furo = null;
|
|
}).overridePythonAttrs (old: (dropDocOutput old) // rec {
|
|
pname = "Flask-Babel";
|
|
version = "2.0.0";
|
|
format = "setuptools";
|
|
src = fetchPypi {
|
|
inherit pname;
|
|
inherit version;
|
|
hash = "sha256:f9faf45cdb2e1a32ea2ec14403587d4295108f35017a7821a2b1acb8cfd9257d";
|
|
};
|
|
disabledTests = [
|
|
# AssertionError: assert 'Apr 12, 2010...46:00\u202fPM' == 'Apr 12, 2010, 1:46:00 PM'
|
|
# Note the `\u202f` (narrow, no-break space) vs space.
|
|
"test_basics"
|
|
"test_init_app"
|
|
"test_custom_locale_selector"
|
|
"test_refreshing"
|
|
];
|
|
});
|
|
psycopg2 = (super.psycopg2.override {
|
|
sphinxHook = null;
|
|
sphinx-better-theme = null;
|
|
}).overridePythonAttrs dropDocOutput;
|
|
pyjwt = (super.pyjwt.override {
|
|
sphinxHook = null;
|
|
sphinx-rtd-theme = null;
|
|
}).overridePythonAttrs (old: (dropDocOutput old) // { format = "setuptools"; });
|
|
beautifulsoup4 = (super.beautifulsoup4.override {
|
|
sphinxHook = null;
|
|
}).overridePythonAttrs dropDocOutput;
|
|
pydash = (super.pydash.override {
|
|
sphinx-rtd-theme = null;
|
|
}).overridePythonAttrs (old: rec {
|
|
version = "5.1.0";
|
|
src = fetchPypi {
|
|
inherit (old) pname;
|
|
inherit version;
|
|
hash = "sha256-GysFCsG64EnNB/WSCxT6u+UmOPSF2a2h6xFanuv/aDU=";
|
|
};
|
|
format = "setuptools";
|
|
doCheck = false;
|
|
});
|
|
pyopenssl = (super.pyopenssl.override {
|
|
sphinxHook = null;
|
|
sphinx-rtd-theme = null;
|
|
}).overridePythonAttrs dropDocOutput;
|
|
deprecated = (super.deprecated.override {
|
|
sphinxHook = null;
|
|
}).overridePythonAttrs dropDocOutput;
|
|
wrapt = (super.wrapt.override {
|
|
sphinxHook = null;
|
|
sphinx-rtd-theme = null;
|
|
}).overridePythonAttrs dropDocOutput;
|
|
};
|
|
};
|
|
in
|
|
python3'.pkgs.buildPythonPackage rec {
|
|
pname = "privacyIDEA";
|
|
version = "3.8.1";
|
|
format = "setuptools";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = pname;
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-SYXw8PBCb514v3rcy15W/vZS5JyMsu81D2sJmviLRtw=";
|
|
fetchSubmodules = true;
|
|
};
|
|
|
|
patches = [
|
|
# https://github.com/privacyidea/privacyidea/pull/3611
|
|
(fetchpatch {
|
|
url = "https://github.com/privacyidea/privacyidea/commit/7db6509721726a34e8528437ddbd4210019b11ef.patch";
|
|
sha256 = "sha256-ZvtauCs1vWyxzGbA0B2+gG8q5JyUO8DF8nm/3/vcYmE=";
|
|
})
|
|
];
|
|
|
|
propagatedBuildInputs = with python3'.pkgs; [
|
|
cryptography pyrad pymysql python-dateutil flask-versioned flask-script
|
|
defusedxml croniter flask-migrate pyjwt configobj sqlsoup pillow
|
|
python-gnupg passlib pyopenssl beautifulsoup4 smpplib flask-babel
|
|
ldap3 huey pyyaml qrcode oauth2client requests lxml cbor2 psycopg2
|
|
pydash ecdsa google-auth importlib-metadata argon2-cffi bcrypt segno
|
|
];
|
|
|
|
passthru.tests = { inherit (nixosTests) privacyidea; };
|
|
|
|
nativeCheckInputs = with python3'.pkgs; [ openssl mock pytestCheckHook responses testfixtures ];
|
|
preCheck = "export HOME=$(mktemp -d)";
|
|
postCheck = "unset HOME";
|
|
disabledTests = [
|
|
# expects `/home/` to exist, fails with `FileNotFoundError: [Errno 2] No such file or directory: '/home/'`.
|
|
"test_01_loading_scripts"
|
|
|
|
# Tries to connect to `fcm.googleapis.com`.
|
|
"test_02_api_push_poll"
|
|
"test_04_decline_auth_request"
|
|
|
|
# Timezone info not available in build sandbox
|
|
"test_14_convert_timestamp_to_utc"
|
|
|
|
# Fails because of different logger configurations
|
|
"test_01_create_default_app"
|
|
"test_03_logging_config_file"
|
|
"test_04_logging_config_yaml"
|
|
"test_05_logging_config_broken_yaml"
|
|
];
|
|
|
|
pythonImportsCheck = [ "privacyidea" ];
|
|
|
|
postPatch = ''
|
|
patchShebangs tests/testdata/scripts
|
|
substituteInPlace privacyidea/lib/resolvers/LDAPIdResolver.py --replace \
|
|
"/etc/privacyidea/ldap-ca.crt" \
|
|
"${cacert}/etc/ssl/certs/ca-bundle.crt"
|
|
'';
|
|
|
|
postInstall = ''
|
|
rm -r $out/${python3'.sitePackages}/tests
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "Multi factor authentication system (2FA, MFA, OTP Server)";
|
|
license = licenses.agpl3Plus;
|
|
homepage = "http://www.privacyidea.org";
|
|
maintainers = with maintainers; [ ma27 ];
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|