pas.plugins.oidc 2.0.0a1__tar.gz → 2.0.0b2__tar.gz

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/.pre-commit-config.yaml

@@ -1,5 +1,5 @@
 # Generated from:
-# https://github.com/plone/meta/tree/master/config/default
+# https://github.com/plone/meta/tree/main/config/default
 # See the inline comments on how to expand/tweak this configuration file
 ci:
     autofix_prs: false
@@ -7,16 +7,16 @@ ci:
 
 repos:
 -   repo: https://github.com/asottile/pyupgrade
-    rev: v3.15.0
+    rev: v3.15.2
     hooks:
     -   id: pyupgrade
         args: [--py38-plus]
 -   repo: https://github.com/pycqa/isort
-    rev: 5.12.0
+    rev: 5.13.2
     hooks:
     -   id: isort
 -   repo: https://github.com/psf/black
-    rev: 23.10.1
+    rev: 24.4.2
     hooks:
     -   id: black
 -   repo: https://github.com/collective/zpretty
@@ -32,7 +32,7 @@ repos:
 #  """
 ##
 -   repo: https://github.com/PyCQA/flake8
-    rev: 6.1.0
+    rev: 7.0.0
     hooks:
     -   id: flake8
 
@@ -71,7 +71,7 @@ repos:
     -   id: check-python-versions
         args: ['--only', 'setup.py,pyproject.toml']
 -   repo: https://github.com/collective/i18ndude
-    rev: "6.1.0"
+    rev: "6.2.0"
     hooks:
     -   id: i18ndude
 

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/CHANGES.md

@@ -9,6 +9,44 @@
 
 <!-- towncrier release notes start -->
 
+## 2.0.0b2 (2024-12-09)
+
+
+### New features:
+
+- Update the Deutsch translation [macagua] [#60](https://github.com/collective/pas.plugins.oidc/issues/60)
+- Implement control panel to configure pas.plugins.oidc [@ericof] [#65](https://github.com/collective/pas.plugins.oidc/issues/65)
+
+
+### Documentation:
+
+- Fixed port numbers on README file [macagua] [#51](https://github.com/collective/pas.plugins.oidc/issues/51)
+
+
+## 2.0.0b1 (2024-06-25)
+
+
+### New features:
+
+- Added Deutsch translation
+  [@macagua] [#45](https://github.com/collective/pas.plugins.oidc/issues/45)
+- Allow multiple instances of OIDC plugin in a given Plone site @erral [#48](https://github.com/collective/pas.plugins.oidc/issues/48)
+- Notify user events on creation and authentication. [@Arkusm][@ericof] [#53](https://github.com/collective/pas.plugins.oidc/issues/53)
+- Updated the latest .po templates for translate
+  Updated Spanish translation
+  [@macagua] [#55](https://github.com/collective/pas.plugins.oidc/issues/55)
+
+
+### Internal:
+
+- Update configuration files @plone 
+
+
+### Documentation:
+
+- Recommend using `[pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/)` for groups support with Keycloak [@ericof] [#42](https://github.com/collective/pas.plugins.oidc/issues/42)
+
+
 ## 2.0.0a1 (2023-11-23)
 
 

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/MANIFEST.in

@@ -10,4 +10,6 @@ recursive-include tests *.py
 recursive-include tests *.gitkeep
 recursive-include tests *.json
 recursive-include tests *.yml
+recursive-exclude docs/_build *
+recursive-exclude docs/ .DS_Store
 include tests/keycloak/Dockerfile

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.1
 Name: pas.plugins.oidc
-Version: 2.0.0a1
-Summary: An add-on for Plone
+Version: 2.0.0b2
+Summary: OIDC support for Plone sites
 Home-page: https://github.com/collective/pas.plugins.oidc
 Author: mamico
 Author-email: mauro.amico@gmail.com
@@ -9,8 +9,8 @@ License: GPL version 2
 Project-URL: PyPI, https://pypi.python.org/pypi/pas.plugins.oidc
 Project-URL: Source, https://github.com/collective/pas.plugins.oidc
 Project-URL: Tracker, https://github.com/collective/pas.plugins.oidc/issues
-Keywords: Python Plone CMS
-Classifier: Development Status :: 3 - Alpha
+Keywords: Python Plone CMS PAS Authentication OAuth OIDC
+Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Web Environment
 Classifier: Framework :: Plone
 Classifier: Framework :: Plone :: Addon
@@ -28,13 +28,21 @@ License-File: LICENSE.GPL
 License-File: LICENSE.md
 Requires-Dist: setuptools
 Requires-Dist: Plone
+Requires-Dist: Zope
+Requires-Dist: Products.CMFCore
 Requires-Dist: plone.api
+Requires-Dist: plone.app.registry
+Requires-Dist: plone.base
+Requires-Dist: plone.protect
 Requires-Dist: plone.restapi>=8.34.0
 Requires-Dist: oic
+Requires-Dist: z3c.form
 Provides-Extra: test
-Requires-Dist: gocept.pytestlayer; extra == "test"
+Requires-Dist: zope.pytestlayer; extra == "test"
+Requires-Dist: plone.app.contenttypes; extra == "test"
 Requires-Dist: plone.app.testing; extra == "test"
 Requires-Dist: plone.restapi[test]; extra == "test"
+Requires-Dist: plone.testing; extra == "test"
 Requires-Dist: pytest-cov; extra == "test"
 Requires-Dist: pytest-plone>=0.2.0; extra == "test"
 Requires-Dist: pytest-docker; extra == "test"
@@ -46,7 +54,7 @@ Requires-Dist: pytest-mock; extra == "test"
 Requires-Dist: requests-mock; extra == "test"
 
 
-<div align="center"><img alt="logo" src="./docs/icon.png" width="70" /></div>
+<div align="center"><img alt="pas.plugins.oidc logo" src="https://raw.githubusercontent.com/collective/pas.plugins.oidc/main/docs/icon.png" width="70" /></div>
 
 <h1 align="center">pas.plugins.oidc</h1>
 
@@ -78,10 +86,13 @@ OAuth 2.0 should work as well because OpenID Connect is built on top of this pro
 - PAS plugin, although currently no interfaces are activated.
 - Three browser views for this PAS plugin, which are the main interaction with the outside world.
 
+### Group Enumeration
+
+If you need to support group enumeration from a Keycloak server, we recommend installing the package [pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/).
 
 ## Installation
 
-This package supports Plone sites using Volto and ClassicUI.
+This package supports Plone sites using Volto and Classic UI.
 
 For proper Volto support, the requirements are:
 
@@ -129,7 +140,7 @@ When using this plugin with a [Volto frontend](https://6.docs.plone.org/volto/in
 * **Login URL**: `<Path to your Plone site>`/login
 * **Logout URL**: `<Path to your Plone site>`/logout
 
-Also, on the OpenID provider, configure the Redirect URL as **`<Path to your Plone site>`/login_oidc/oidc**.
+Also, on the OpenID provider, configure the Redirect URL as **`<Path to your Plone site>`/login-oidc/oidc**.
 
 
 #### Classic UI
@@ -209,9 +220,9 @@ So, for Keycloak, it does not matter if we use the default or legacy mode if the
 *Notes:*
 
 * If legacy `redirect_uri` parameter is disabled in Keycloak, this is the default since version 18 of Keycloak according
-  to this comment in *Starck Overflow*: https://stackoverflow.com/a/72142887.
+  to this comment in *Stack Overflow*: https://stackoverflow.com/a/72142887.
 * The plugin will work only if the `Use deprecated redirect_uri for logout url(/Plone/acl_users/oidc/logout)`
-  option is un-checked at the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm.
+  option is un-checked at the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm.
 
 #### Additional Documentation
 
@@ -223,9 +234,9 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 * Make sure **pas.plugins.oidc** is installed.
 * Start Plone and create a Plone site with id Plone.
 * In the Add-ons control panel, install `pas.plugins.oidc`.
-* In the ZMI go to the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm
+* In the ZMI go to the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm
 * Set these properties:
-  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8081/realms/plone/
+  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8180/realms/plone/
   * `Client ID`: *plone* (**Warning:** This property must match the `Client ID` you have set in Keycloak.)
   * `Client secret`: *12345678* (**Warning:** This property must match the `Client secret` you have get in Keycloak.)
   * `Use deprecated redirect_uri for logout url` checked. Use this if you need to run old versions of Keycloak.
@@ -239,14 +250,14 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 
 See this screenshot:
 
-.. image:: docs/screenshot-settings.png
+![](https://raw.githubusercontent.com/collective/pas.plugins.oidc/main/docs/screenshot-settings.png "Setup Plone as a client")
 
 #### Login
 
-Go to the other browser, or logout as admin from [Keycloak Admin Console](http://localhost:8080/admin).
+Go to the other browser, or logout as admin from [Keycloak Admin Console](http://127.0.0.1:8180/admin).
 Currently, the Plone login form is unchanged.
 
-Instead, for testing go to the login page of the plugin: http://localhost:8081/Plone/acl_users/oidc/login,
+Instead, for testing go to the login page of the plugin: http://localhost:8080/Plone/acl_users/oidc/login,
 this will take you to Keycloak to login, and then return. You should now be logged in to Plone, and see the
 *full name* and *email*, if you have set this in Keycloak.
 
@@ -255,7 +266,7 @@ this will take you to Keycloak to login, and then return. You should now be logg
 If the login did work as expected you can try to Plone logout.
 Currently, the Plone logout form is unchanged.
 
-Instead, for testing go to the logout page of the plugin: http://localhost:8081/Plone/acl_users/oidc/logout,
+Instead, for testing go to the logout page of the plugin: http://localhost:8080/Plone/acl_users/oidc/logout,
 this will take you to Keycloak to logout, and then return to the post-logout redirect URL.
 
 ## Technical Decisions
@@ -268,8 +279,8 @@ and comes back from there.
 The plugin has 2 ways of working with sessions:
 
 - Use the Zope Session Management: if the `Use Zope session data manager` option in the plugin configuration is enabled,
-  the plugin will use the sessioning configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
-  to save the session data in a memcached based storage. Otherwise Zope will try to use ZODB based sessioning
+  the plugin will use the session configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
+  to save the session data in a memcached based storage. Otherwise, Zope will try to use a ZODB-based session
   which has shown several problems in the past.
 
 - Use the cookie-based session management: if the `Use Zope session data manager` option in the plugin
@@ -399,6 +410,44 @@ The project is licensed under the GPLv2.
 
 <!-- towncrier release notes start -->
 
+## 2.0.0b2 (2024-12-09)
+
+
+### New features:
+
+- Update the Deutsch translation [macagua] [#60](https://github.com/collective/pas.plugins.oidc/issues/60)
+- Implement control panel to configure pas.plugins.oidc [@ericof] [#65](https://github.com/collective/pas.plugins.oidc/issues/65)
+
+
+### Documentation:
+
+- Fixed port numbers on README file [macagua] [#51](https://github.com/collective/pas.plugins.oidc/issues/51)
+
+
+## 2.0.0b1 (2024-06-25)
+
+
+### New features:
+
+- Added Deutsch translation
+  [@macagua] [#45](https://github.com/collective/pas.plugins.oidc/issues/45)
+- Allow multiple instances of OIDC plugin in a given Plone site @erral [#48](https://github.com/collective/pas.plugins.oidc/issues/48)
+- Notify user events on creation and authentication. [@Arkusm][@ericof] [#53](https://github.com/collective/pas.plugins.oidc/issues/53)
+- Updated the latest .po templates for translate
+  Updated Spanish translation
+  [@macagua] [#55](https://github.com/collective/pas.plugins.oidc/issues/55)
+
+
+### Internal:
+
+- Update configuration files @plone 
+
+
+### Documentation:
+
+- Recommend using `[pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/)` for groups support with Keycloak [@ericof] [#42](https://github.com/collective/pas.plugins.oidc/issues/42)
+
+
 ## 2.0.0a1 (2023-11-23)
 
 

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/README.md

@@ -1,4 +1,4 @@
-<div align="center"><img alt="logo" src="./docs/icon.png" width="70" /></div>
+<div align="center"><img alt="pas.plugins.oidc logo" src="https://raw.githubusercontent.com/collective/pas.plugins.oidc/main/docs/icon.png" width="70" /></div>
 
 <h1 align="center">pas.plugins.oidc</h1>
 
@@ -30,10 +30,13 @@ OAuth 2.0 should work as well because OpenID Connect is built on top of this pro
 - PAS plugin, although currently no interfaces are activated.
 - Three browser views for this PAS plugin, which are the main interaction with the outside world.
 
+### Group Enumeration
+
+If you need to support group enumeration from a Keycloak server, we recommend installing the package [pas.plugins.keycloakgroups](https://pypi.org/project/pas.plugins.keycloakgroups/).
 
 ## Installation
 
-This package supports Plone sites using Volto and ClassicUI.
+This package supports Plone sites using Volto and Classic UI.
 
 For proper Volto support, the requirements are:
 
@@ -81,7 +84,7 @@ When using this plugin with a [Volto frontend](https://6.docs.plone.org/volto/in
 * **Login URL**: `<Path to your Plone site>`/login
 * **Logout URL**: `<Path to your Plone site>`/logout
 
-Also, on the OpenID provider, configure the Redirect URL as **`<Path to your Plone site>`/login_oidc/oidc**.
+Also, on the OpenID provider, configure the Redirect URL as **`<Path to your Plone site>`/login-oidc/oidc**.
 
 
 #### Classic UI
@@ -161,9 +164,9 @@ So, for Keycloak, it does not matter if we use the default or legacy mode if the
 *Notes:*
 
 * If legacy `redirect_uri` parameter is disabled in Keycloak, this is the default since version 18 of Keycloak according
-  to this comment in *Starck Overflow*: https://stackoverflow.com/a/72142887.
+  to this comment in *Stack Overflow*: https://stackoverflow.com/a/72142887.
 * The plugin will work only if the `Use deprecated redirect_uri for logout url(/Plone/acl_users/oidc/logout)`
-  option is un-checked at the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm.
+  option is un-checked at the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm.
 
 #### Additional Documentation
 
@@ -175,9 +178,9 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 * Make sure **pas.plugins.oidc** is installed.
 * Start Plone and create a Plone site with id Plone.
 * In the Add-ons control panel, install `pas.plugins.oidc`.
-* In the ZMI go to the plugin properties at http://localhost:8081/Plone/acl_users/oidc/manage_propertiesForm
+* In the ZMI go to the plugin properties at http://localhost:8080/Plone/acl_users/oidc/manage_propertiesForm
 * Set these properties:
-  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8081/realms/plone/
+  * `OIDC/Oauth2 Issuer`: http://127.0.0.1:8180/realms/plone/
   * `Client ID`: *plone* (**Warning:** This property must match the `Client ID` you have set in Keycloak.)
   * `Client secret`: *12345678* (**Warning:** This property must match the `Client secret` you have get in Keycloak.)
   * `Use deprecated redirect_uri for logout url` checked. Use this if you need to run old versions of Keycloak.
@@ -191,14 +194,14 @@ Specifically, here we will use a Docker image, so follow the instructions on how
 
 See this screenshot:
 
-.. image:: docs/screenshot-settings.png
+![](https://raw.githubusercontent.com/collective/pas.plugins.oidc/main/docs/screenshot-settings.png "Setup Plone as a client")
 
 #### Login
 
-Go to the other browser, or logout as admin from [Keycloak Admin Console](http://localhost:8080/admin).
+Go to the other browser, or logout as admin from [Keycloak Admin Console](http://127.0.0.1:8180/admin).
 Currently, the Plone login form is unchanged.
 
-Instead, for testing go to the login page of the plugin: http://localhost:8081/Plone/acl_users/oidc/login,
+Instead, for testing go to the login page of the plugin: http://localhost:8080/Plone/acl_users/oidc/login,
 this will take you to Keycloak to login, and then return. You should now be logged in to Plone, and see the
 *full name* and *email*, if you have set this in Keycloak.
 
@@ -207,7 +210,7 @@ this will take you to Keycloak to login, and then return. You should now be logg
 If the login did work as expected you can try to Plone logout.
 Currently, the Plone logout form is unchanged.
 
-Instead, for testing go to the logout page of the plugin: http://localhost:8081/Plone/acl_users/oidc/logout,
+Instead, for testing go to the logout page of the plugin: http://localhost:8080/Plone/acl_users/oidc/logout,
 this will take you to Keycloak to logout, and then return to the post-logout redirect URL.
 
 ## Technical Decisions
@@ -220,8 +223,8 @@ and comes back from there.
 The plugin has 2 ways of working with sessions:
 
 - Use the Zope Session Management: if the `Use Zope session data manager` option in the plugin configuration is enabled,
-  the plugin will use the sessioning configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
-  to save the session data in a memcached based storage. Otherwise Zope will try to use ZODB based sessioning
+  the plugin will use the session configuration configured in Zope. To do so we advise using [Products.mcdutils](https://pypi.org/project/Products.mcdutils/)
+  to save the session data in a memcached based storage. Otherwise, Zope will try to use a ZODB-based session
   which has shown several problems in the past.
 
 - Use the cookie-based session management: if the `Use Zope session data manager` option in the plugin

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/pyproject.toml

@@ -1,5 +1,5 @@
 # Generated from:
-# https://github.com/plone/meta/tree/master/config/default
+# https://github.com/plone/meta/tree/main/config/default
 # See the inline comments on how to expand/tweak this configuration file
 [build-system]
 requires = ["setuptools>=68.2"]
@@ -122,7 +122,7 @@ Zope = [
   'Products.CMFCore', 'Products.CMFDynamicViewFTI',
 ]
 python-dateutil = ['dateutil']
-ignore-packages = ['plone.restapi', 'plone.volto', 'zestreleaser.towncrier', 'zest.releaser', 'pytest', 'pytest-cov', 'pytest-plone', 'pytest-docker', 'pytest-vcr', 'pytest-mock', 'gocept.pytestlayer', 'requests-mock', 'vcrpy']
+ignore-packages = ['plone.restapi', 'plone.volto', 'zestreleaser.towncrier', 'zest.releaser', 'pytest', 'pytest-cov', 'pytest-plone', 'pytest-docker', 'pytest-vcr', 'pytest-mock', 'zope.pytestlayer', 'requests-mock', 'vcrpy']
 Plone = ['Products.CMFPlone', 'Products.CMFCore', 'Products.GenericSetup', 'Products.PluggableAuthService', 'Products.PlonePAS']
 
 ##
@@ -138,16 +138,18 @@ Plone = ['Products.CMFPlone', 'Products.CMFCore', 'Products.GenericSetup', 'Prod
 [tool.check-manifest]
 ignore = [
     ".editorconfig",
+    ".flake8",
     ".meta.toml",
     ".pre-commit-config.yaml",
-    "tox.ini",
-    ".flake8",
+    "dependabot.yml",
     "mx.ini",
+    "tox.ini",
     "news/*",
     "constraints-mxdev.txt",
     "requirements-mxdev.txt",
 
 ]
+
 ##
 # Add extra configuration options in .meta.toml:
 #  [pyproject]
@@ -155,6 +157,11 @@ ignore = [
 #      "*.map.js",
 #      "*.pyc",
 #  """
+#  check_manifest_extra_lines = """
+#  ignore-bad-ideas = [
+#      "some/test/file/PKG-INFO",
+#  ]
+#  """
 ##
 
 [tool.coverage.run]

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/setup.py

@@ -1,4 +1,5 @@
 """Installer for the pas.plugins.oidc package."""
+
 from pathlib import Path
 from setuptools import find_packages
 from setuptools import setup
@@ -13,13 +14,13 @@ long_description = f"""
 
 setup(
     name="pas.plugins.oidc",
-    version="2.0.0a1",
-    description="An add-on for Plone",
+    version="2.0.0b2",
+    description="OIDC support for Plone sites",
     long_description=long_description,
     long_description_content_type="text/markdown",
     # Get more from https://pypi.org/classifiers/
     classifiers=[
-        "Development Status :: 3 - Alpha",
+        "Development Status :: 4 - Beta",
         "Environment :: Web Environment",
         "Framework :: Plone",
         "Framework :: Plone :: Addon",
@@ -32,7 +33,7 @@ setup(
         "Operating System :: OS Independent",
         "License :: OSI Approved :: GNU General Public License v2 (GPLv2)",
     ],
-    keywords="Python Plone CMS",
+    keywords="Python Plone CMS PAS Authentication OAuth OIDC",
     author="mamico",
     author_email="mauro.amico@gmail.com",
     url="https://github.com/collective/pas.plugins.oidc",
@@ -52,15 +53,23 @@ setup(
     install_requires=[
         "setuptools",
         "Plone",
+        "Zope",
+        "Products.CMFCore",
         "plone.api",
+        "plone.app.registry",
+        "plone.base",
+        "plone.protect",
         "plone.restapi>=8.34.0",
         "oic",
+        "z3c.form",
     ],
     extras_require={
         "test": [
-            "gocept.pytestlayer",
+            "zope.pytestlayer",
+            "plone.app.contenttypes",
             "plone.app.testing",
             "plone.restapi[test]",
+            "plone.testing",
             "pytest-cov",
             "pytest-plone>=0.2.0",
             "pytest-docker",

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/src/pas/plugins/oidc/__init__.py

@@ -1,4 +1,5 @@
 """Init and utils."""
+
 from AccessControl.Permissions import manage_users as ManageUsers
 from Products.PluggableAuthService import PluggableAuthService as PAS
 from zope.i18nmessageid import MessageFactory
@@ -23,5 +24,6 @@ def initialize(context):  # pragma: no cover
     context.registerClass(
         plugins.OIDCPlugin,
         permission=ManageUsers,
-        constructors=(plugins.add_oidc_plugin,),
+        constructors=(plugins.manage_addOIDCPluginForm, plugins.addOIDCPlugin),
+        visibility=None,
     )

{pas.plugins.oidc-2.0.0a1 → pas.plugins.oidc-2.0.0b2}/src/pas/plugins/oidc/configure.zcml

@@ -20,6 +20,7 @@
   <i18n:registerTranslations directory="locales" />
 
   <include package=".browser" />
+  <include package=".controlpanel" />
   <include package=".services" />
 
   <genericsetup:registerProfile
@@ -40,13 +41,7 @@
       post_handler=".setuphandlers.uninstall"
       />
 
-  <genericsetup:upgradeStep
-      title="Activate challenge plugin"
-      profile="pas.plugins.oidc:default"
-      source="1000"
-      destination="1001"
-      handler=".setuphandlers.activate_challenge_plugin"
-      />
+  <include package=".upgrades" />
 
   <utility
       factory=".setuphandlers.HiddenProfiles"