* feat: session authentication and god-mode implementation (#4302) * dev: move authentication to base class for credentials * chore: new account creation * dev: return error as query parameter * dev: accounts and profile endpoints for user * fix: user store updates * fix: store fixes * fix: type fixes * dev: set is_password_autoset and is_email_verifier for auth providers * dev: move all auth configuration to different apps * dev: fix circular imports * dev: remove unused imports * dev: fix imports for authentication * dev: update endpoints to use rest framework api viewa * fix: onboarding fixes * dev: session model changes * fix: session model and add check for last name first name and avatar * dev: fix referer redirect * dev: remove auth imports * dev: fix imports * dev: update migrations * fix: instance admin login * comflict: conflicts resolved * dev: fix import errors and email check endpoint * fix: error messages and redirects after login * dev: configs api * fix: is github enabled boolean * dev: merge config and instance api * conflict: merge conflict resolved * dev: instance admin sign up endpoint * dev: enable magic link login * dev: configure instance variables for github and google enabled * chore: typo fixes * fix: god mode docker file changes * build-error: resolved build errors * fix: docker compose changes * dev: add email credential check endpoint * fix: minor package changes * fix: docker related changes * dev: add nginx rules in the nginx template * dev: refactor the url patterns * fix: docker changes * fix: docker files for god-mode * fix: static export * fix: nginx conf * dev: smtp sender refused exception * fix: godmode fixes * chore: god mode revamp. * dev: add csrf secured flag * fix: oauth redirect uri and session settings * chore: god mode app changes. (#3982) * chore: send test email functionality. * style: authentication methods page UI revamp. * chore: create workspace popup. * fix: user me endpoint * dev: fix redirection after authentication * dev: handle god mode redirection * fix: redirections * fix: auth related hooks * fix: store related fixes * dev: fix session authentication for rest apis * fix: linting errors * fix: removing references of useStore= * dev: fix redirection and password validation * dev: add useUser hook * fix: build fixes and lint issues * fix: removing useApplication hook * fix: build errors * fix: delete unused files * fix: auth build fixes * fix: bugfixes * dev: alter avatar to support more than 255 chars * dev: fix profile endpoint and increase session expiry time and update session on every request * chore: resolved the migration * chore: resolved merge conflicts * dev: error codes and error messages for the auth flow * dev: instance admin sign up and sign in endpoint * dev: use zxcvbn to validate password strength * dev: add extra parameters when error handling on instance god mode * chore: auth init * chore: signin/ signup form ui updates and password strength meter. * chore: update password fields. * chore: validations and error handling. * chore: updated sign-up form * chore: updated workflow and updated the code structure * chore: instance empty state for god-mode. * chore: instance and auth wrappers update * fix: renaming godmode * fix: docker changes * chore: updated authentication wrappers * chore: updated the authentication workflow and rendered all pages * fix: build errors * fix: docker related fixes * fix: tailing slash added to space and admin for valid nginx locations * chore: seperate pages for signup and login * git-action modified for admin file changes * feature build action updated for admin app * self host modified * chore: resolved build errors and handled signin and signup in a seperate route * chore: sign-in and sign-up revamp. * fix: migration conflicts * dev: migrations * chore: handled redirection * dev: admin url * dev: create seperate endpoint for instance admin me * dev: instance admin endpoint * git action fixed * chore: handled auth wrappers * dev: add serializer and remove print logs * fix: build errors * dev: fix migrations * dev: instance folder structuring * fix: linting errors * chore: resolved build errors * chore: updated store and auth workflow and updates api service types * chore: Replaced Next Link with Anchoer tag for god-mode redirection * add 3333 port to allowed origins * make password login working again * dev: fix redirection, add admin signout endpoint and fix email credential check endpoint * fix unique code sign in * fix small build error * enable sign out * dev: add google client secret variable to configure instance * dev: add referer for redirection * fix origin urls for oauths * admin setup and login separation * dev: fix user redirection and tour completed endpoint * fix build errors * dev: add set password endpoint * dev: remove user creation logic for redirection * fix unique code page * fix forgot password * chore: onboarding revamp. * dev: fix workspace slug redirection in login * chore: invited user onboarding flow update. * chore: fix switch or delete account modal. * fix members exception * refactor auth flows and add invitations to auth flow * fix sig in sign up url * fix action url * fix build errors * dev: fix user set password when logging in * dev: reset password endpoint * chore: confirm password validation for signup and onboarding. * enable reset password * fix build error * chore: minor UI updates. * chore: forgot and reset password UI revamp. * fix authentication re directions * dev: auth redirections * change url paths for signup and signin * dev: make the user logged in when changing passwords * dev: next path redirection for web and space app * dev: next path for magic sign in endpoint * dev: github space endpoint * chore: minor ui updates and fixes in web app. * set password screen * fix multiple unique code generation * dev: next path base redirection * dev: remove print logs * dev: auth space endpoints * fix build errors * dev: invalidate cache on configuration update, god mode exception errors and authentication failed code * dev: fix space endpoints and add extra endpoints * chore: space auth revamp. * dev: add sign up for space app * fix: build errors. * fix: auth redirection logic. * chore: space app onboarding revamp. --------- Co-authored-by: pablohashescobar <nikhilschacko@gmail.com> Co-authored-by: NarayanBavisetti <narayan3119@gmail.com> Co-authored-by: gurusainath <gurusainath007@gmail.com> Co-authored-by: Prateek Shourya <prateekshourya29@gmail.com> Co-authored-by: Manish Gupta <59428681+mguptahub@users.noreply.github.com> Co-authored-by: Manish Gupta <manish@mgupta.me> Co-authored-by: = <=> Co-authored-by: rahulramesha <rahulramesham@gmail.com> * chore: updated file structure for admin * chore: updated admin-sidebar * chore: auth error handling * chore: onboarding UI updates and dark mode fixes. * chore: add `user personalization` step to onboarding profile setup screen. * chore: fix minor UI bugs * chore: authentication workflow changes * chore: handled signin workflow * style: switch or delete account workflow * chore: god mode redirection URL * feat(dashboard): improve label readability (#4321) change none label for all time in dashbard filters * chore: god-mode redirection * chore: onboarding ui updates and accept invitation workflow updates. * chore: rename unique code auth form. * style: space auth ux copy. * chore: updated intance and auth wrapper logic * chore: update default layout style. * chore: update confirm password. * chore: backend redirection * style: update banner ui * chore: minor ui updates and validation fix. * chore: removed old auth hook * chore: handled auth wrapper * chore: handled store loaders in the user * chore: handled logs * chore: add loading spinners for all auth and onboarding form buttons. * chore: add background pattern in admin auth forms and minor ui fixes. * chore: UI changes and revamp components for authentication * chore: auth UI consistency in web, space and admin. * chore: resolved build errors * chore: removed old auth hooks * chore: handled lint errors in use accounts * chore: updated authentication wrapper logic in web app * [WEB -1149] dev: update dependencies (#4333) * dev: upgrade dependencies remove unwanted dependency and add ruff as local dependency * dev: add comments * chore: authentication wrapper fetch user * chore: updated store loader * chore: removed old auth wrapper and replaced the imports with new auth wrapper * chore: join workspace invitation workflow updates * chore: build error resolved in deploy * chore: handled onboarding step error in web app * chore: SMTP Name and Password validation removed * chore: handled seo and signout logic and new user popup * chore: added redirection to plane in the sidebar * chore: resolved build errors * dev: admin session cookie update * chore: updated cookie session time for admin * dev: add start date and end date to projects (#4355) * chore: add email security dropdown and remove SMTP username and password validation. * chore: add tooltip to admin sidebar help-section. * chore: add dropdown to collapsed admin sidebar. * chore: profile themning * chore: updated page error messages and theme in command palette * dev: add email validation in email check apis * dev: remove start date and end date from project * chore: updated space folder structure and updated the store hooks * dev: error codes for authentication * chore: handled authentication in space and web apps * chore: banner redirect handling the email * dev: god mode error codes * chore: updated error codes * chore: updated onboarding images * dev: signout endpoints and saving login domain while creating sessions * feat: Self Host Data Backup (#4383) * feat: implemented backup , support for docker-compose tool, readme updated * minor fix in shell script * codacy fixes * chore: handled build errors in web * chore: updated react, react-dom, and next versions * chore: updated password autioset in the signin * dev: add logo prop to views and pages * chore: updated api service and handled the set password in store * chore: handled build errors and code cleanup * dev: return 401 when the session is not valid * dev: users/me exception for api * chore: installed lodash in space app * dev: add auth route in nginx --------- Co-authored-by: pablohashescobar <nikhilschacko@gmail.com> Co-authored-by: NarayanBavisetti <narayan3119@gmail.com> Co-authored-by: gurusainath <gurusainath007@gmail.com> Co-authored-by: Prateek Shourya <prateekshourya29@gmail.com> Co-authored-by: Manish Gupta <59428681+mguptahub@users.noreply.github.com> Co-authored-by: Manish Gupta <manish@mgupta.me> Co-authored-by: rahulramesha <rahulramesham@gmail.com> Co-authored-by: Aaryan Khandelwal <aaryankhandu123@gmail.com> Co-authored-by: Daniel Alba <56451942+redrum15@users.noreply.github.com> Co-authored-by: Nikhil <118773738+pablohashescobar@users.noreply.github.com>
216 lines
6.7 KiB
Python
216 lines
6.7 KiB
Python
# Python imports
|
|
import random
|
|
import string
|
|
import uuid
|
|
|
|
import pytz
|
|
from django.contrib.auth.models import (
|
|
AbstractBaseUser,
|
|
PermissionsMixin,
|
|
UserManager,
|
|
)
|
|
|
|
# Django imports
|
|
from django.db import models
|
|
from django.db.models.signals import post_save
|
|
from django.dispatch import receiver
|
|
from django.utils import timezone
|
|
|
|
# Module imports
|
|
from ..mixins import TimeAuditModel
|
|
|
|
|
|
def get_default_onboarding():
|
|
return {
|
|
"profile_complete": False,
|
|
"workspace_create": False,
|
|
"workspace_invite": False,
|
|
"workspace_join": False,
|
|
}
|
|
|
|
|
|
class User(AbstractBaseUser, PermissionsMixin):
|
|
id = models.UUIDField(
|
|
default=uuid.uuid4,
|
|
unique=True,
|
|
editable=False,
|
|
db_index=True,
|
|
primary_key=True,
|
|
)
|
|
username = models.CharField(max_length=128, unique=True)
|
|
# user fields
|
|
mobile_number = models.CharField(max_length=255, blank=True, null=True)
|
|
email = models.CharField(
|
|
max_length=255, null=True, blank=True, unique=True
|
|
)
|
|
|
|
# identity
|
|
display_name = models.CharField(max_length=255, default="")
|
|
first_name = models.CharField(max_length=255, blank=True)
|
|
last_name = models.CharField(max_length=255, blank=True)
|
|
avatar = models.TextField(blank=True)
|
|
cover_image = models.URLField(blank=True, null=True, max_length=800)
|
|
|
|
# tracking metrics
|
|
date_joined = models.DateTimeField(
|
|
auto_now_add=True, verbose_name="Created At"
|
|
)
|
|
created_at = models.DateTimeField(
|
|
auto_now_add=True, verbose_name="Created At"
|
|
)
|
|
updated_at = models.DateTimeField(
|
|
auto_now=True, verbose_name="Last Modified At"
|
|
)
|
|
last_location = models.CharField(max_length=255, blank=True)
|
|
created_location = models.CharField(max_length=255, blank=True)
|
|
|
|
# the is' es
|
|
is_superuser = models.BooleanField(default=False)
|
|
is_managed = models.BooleanField(default=False)
|
|
is_password_expired = models.BooleanField(default=False)
|
|
is_active = models.BooleanField(default=True)
|
|
is_staff = models.BooleanField(default=False)
|
|
is_email_verified = models.BooleanField(default=False)
|
|
is_password_autoset = models.BooleanField(default=False)
|
|
|
|
# random token generated
|
|
token = models.CharField(max_length=64, blank=True)
|
|
|
|
last_active = models.DateTimeField(default=timezone.now, null=True)
|
|
last_login_time = models.DateTimeField(null=True)
|
|
last_logout_time = models.DateTimeField(null=True)
|
|
last_login_ip = models.CharField(max_length=255, blank=True)
|
|
last_logout_ip = models.CharField(max_length=255, blank=True)
|
|
last_login_medium = models.CharField(
|
|
max_length=20,
|
|
default="email",
|
|
)
|
|
last_login_uagent = models.TextField(blank=True)
|
|
token_updated_at = models.DateTimeField(null=True)
|
|
# my_issues_prop = models.JSONField(null=True)
|
|
|
|
is_bot = models.BooleanField(default=False)
|
|
|
|
# timezone
|
|
USER_TIMEZONE_CHOICES = tuple(zip(pytz.all_timezones, pytz.all_timezones))
|
|
user_timezone = models.CharField(
|
|
max_length=255, default="UTC", choices=USER_TIMEZONE_CHOICES
|
|
)
|
|
|
|
USERNAME_FIELD = "email"
|
|
REQUIRED_FIELDS = ["username"]
|
|
|
|
objects = UserManager()
|
|
|
|
class Meta:
|
|
verbose_name = "User"
|
|
verbose_name_plural = "Users"
|
|
db_table = "users"
|
|
ordering = ("-created_at",)
|
|
|
|
def __str__(self):
|
|
return f"{self.username} <{self.email}>"
|
|
|
|
def save(self, *args, **kwargs):
|
|
self.email = self.email.lower().strip()
|
|
self.mobile_number = self.mobile_number
|
|
|
|
if self.token_updated_at is not None:
|
|
self.token = uuid.uuid4().hex + uuid.uuid4().hex
|
|
self.token_updated_at = timezone.now()
|
|
|
|
if not self.display_name:
|
|
self.display_name = (
|
|
self.email.split("@")[0]
|
|
if len(self.email.split("@"))
|
|
else "".join(
|
|
random.choice(string.ascii_letters) for _ in range(6)
|
|
)
|
|
)
|
|
|
|
if self.is_superuser:
|
|
self.is_staff = True
|
|
|
|
super(User, self).save(*args, **kwargs)
|
|
|
|
|
|
class Profile(TimeAuditModel):
|
|
id = models.UUIDField(
|
|
default=uuid.uuid4,
|
|
unique=True,
|
|
editable=False,
|
|
db_index=True,
|
|
primary_key=True,
|
|
)
|
|
# User
|
|
user = models.OneToOneField(
|
|
"db.User", on_delete=models.CASCADE, related_name="profile"
|
|
)
|
|
# General
|
|
theme = models.JSONField(default=dict)
|
|
# Onboarding
|
|
is_tour_completed = models.BooleanField(default=False)
|
|
onboarding_step = models.JSONField(default=get_default_onboarding)
|
|
use_case = models.TextField(blank=True, null=True)
|
|
role = models.CharField(max_length=300, null=True, blank=True) # job role
|
|
is_onboarded = models.BooleanField(default=False)
|
|
# Last visited workspace
|
|
last_workspace_id = models.UUIDField(null=True)
|
|
# address data
|
|
billing_address_country = models.CharField(max_length=255, default="INDIA")
|
|
billing_address = models.JSONField(null=True)
|
|
has_billing_address = models.BooleanField(default=False)
|
|
company_name = models.CharField(max_length=255, blank=True)
|
|
|
|
class Meta:
|
|
verbose_name = "Profile"
|
|
verbose_name_plural = "Profiles"
|
|
db_table = "profiles"
|
|
ordering = ("-created_at",)
|
|
|
|
|
|
class Account(TimeAuditModel):
|
|
id = models.UUIDField(
|
|
default=uuid.uuid4,
|
|
unique=True,
|
|
editable=False,
|
|
db_index=True,
|
|
primary_key=True,
|
|
)
|
|
user = models.ForeignKey(
|
|
"db.User", on_delete=models.CASCADE, related_name="accounts"
|
|
)
|
|
provider_account_id = models.CharField(max_length=255)
|
|
provider = models.CharField(
|
|
choices=(("google", "Google"), ("github", "Github")),
|
|
)
|
|
access_token = models.TextField()
|
|
access_token_expired_at = models.DateTimeField(null=True)
|
|
refresh_token = models.TextField(null=True, blank=True)
|
|
refresh_token_expired_at = models.DateTimeField(null=True)
|
|
last_connected_at = models.DateTimeField(default=timezone.now)
|
|
metadata = models.JSONField(default=dict)
|
|
|
|
class Meta:
|
|
unique_together = ["provider", "provider_account_id"]
|
|
verbose_name = "Account"
|
|
verbose_name_plural = "Accounts"
|
|
db_table = "accounts"
|
|
ordering = ("-created_at",)
|
|
|
|
|
|
@receiver(post_save, sender=User)
|
|
def create_user_notification(sender, instance, created, **kwargs):
|
|
# create preferences
|
|
if created and not instance.is_bot:
|
|
# Module imports
|
|
from plane.db.models import UserNotificationPreference
|
|
|
|
UserNotificationPreference.objects.create(
|
|
user=instance,
|
|
property_change=False,
|
|
state_change=False,
|
|
comment=False,
|
|
mention=False,
|
|
issue_completed=False,
|
|
)
|