assert_persona.py

def assert_valid_persona_request():
    """Send the assertion to Mozilla's verifier service"""
    assertion_key = flask.request.headers.get("PERSONA_ASSERTION")
    if assertion_key is None:
        raise PersonaAuthenticationError()
    audience = flask.request.headers.get("Origin", None)
    if audience is None:
        audience = flask.request.url_root

    assertion = {"assertion": assertion_key, "audience": audience}
    resp = requests.post("https://verifier.login.persona.org/verify", data=assertion, verify=True)
    if not resp.ok or resp.json().get('status') != "okay":
        raise PersonaAuthenticationError()