Canonical SSO provider

- openid.consumer.discoverURI now normalizes the urls so we need to make
this change in some test assertions
- openid.server.Server now requires that the op_endpoint is an actual
endpoint string. So the old method of just dumping the whole request in
the Server initialization does not work and we have to get the provider
url to actually pass the op_endpoint
- OpenID spec defines that "openid.claimed_id" and "openid.identity"
SHALL be either both present or both absent. So we need to pass it in
tests where we didn't but at the same time we were passing
openid.identity because now the openid.server honours that specification
and actually checks for it
- openid.urinorm now properly escapes `~` character so we need to add
that character sequence to our regex validations

074a242... by John Paraskevopoulos on 2022-04-18

Set different versions for django-piston for py3

b85610d... by John Paraskevopoulos on 2022-03-10

Update dependencies for python 3

- Bumps dependencies to use saml2idp 1.2 which adds python 3 support.
This comes with a number of needed changes so that there are no clashing
pinned dependencies. six needs to be bumped to make use of `ensure_str`,
cryptography needs to be bumped to properly support pyOpenSSL version
and with it cffi needs to be bumped as well
- Fixes some tests that were importing stuff from saml2idp tests(!)
- Bumps requirements to package versions that support python 3.5

8e878fb... by Kevin Nasto on 2022-04-13

This adds an ax attribute which can be requested during login via the ax uri (alias "extra_emails"). This attribute contains a comma separated list of additional verified email addresses not including the preferred one.

This is useful to get emails associated with an ubuntu login id. In Landscape we would want to prevent using notification emails not associated with the current ubuntu login. Also tie invitations to current ubuntu login, and verify emails in one interface.

Merged from https://code.launchpad.net/~silverdrake11/canonical-identity-provider/+git/canonical-identity-provider/+merge/419248

5c23068... by Kevin Nasto on 2022-04-13