9b7b23f5a2
* dev: magic link login and email password disable * dev: user account deactivation * dev: change nginx conf routes * feat: changemod space * fix: space app dir fixes * dev: invalidate cache for instances when creating workspace * dev: update email templates for test email * dev: fix build errors * fix: auth fixes and improvement (#4452) * chore: change password api updated and missing password error code added * chore: auth helper updated * chore: disable send code input suggestion * chore: change password function updated * fix: application error on sign in page * chore: change password validation added and enhancement * dev: space base path in web * dev: admin user deactivated * dev: user and instance admin session endpoint * fix: last_workspace_id endpoint updated * fix: magic sign in and email password check added --------- Co-authored-by: pablohashescobar <nikhilschacko@gmail.com> Co-authored-by: sriram veeraghanta <veeraghanta.sriram@gmail.com> Co-authored-by: guru_sainath <gurusainath007@gmail.com>
121 lines
3.8 KiB
Python
121 lines
3.8 KiB
Python
# Python imports
|
|
import os
|
|
import uuid
|
|
|
|
# Django imports
|
|
from django.utils import timezone
|
|
|
|
# Third party imports
|
|
from zxcvbn import zxcvbn
|
|
|
|
# Module imports
|
|
from plane.db.models import (
|
|
Profile,
|
|
User,
|
|
WorkspaceMemberInvite,
|
|
)
|
|
from plane.license.utils.instance_value import get_configuration_value
|
|
from .error import AuthenticationException, AUTHENTICATION_ERROR_CODES
|
|
|
|
|
|
class Adapter:
|
|
"""Common interface for all auth providers"""
|
|
|
|
def __init__(self, request, provider):
|
|
self.request = request
|
|
self.provider = provider
|
|
self.token_data = None
|
|
self.user_data = None
|
|
|
|
def get_user_token(self, data, headers=None):
|
|
raise NotImplementedError
|
|
|
|
def get_user_response(self):
|
|
raise NotImplementedError
|
|
|
|
def set_token_data(self, data):
|
|
self.token_data = data
|
|
|
|
def set_user_data(self, data):
|
|
self.user_data = data
|
|
|
|
def create_update_account(self, user):
|
|
raise NotImplementedError
|
|
|
|
def authenticate(self):
|
|
raise NotImplementedError
|
|
|
|
def complete_login_or_signup(self):
|
|
email = self.user_data.get("email")
|
|
user = User.objects.filter(email=email).first()
|
|
|
|
if not user:
|
|
# New user
|
|
(ENABLE_SIGNUP,) = get_configuration_value(
|
|
[
|
|
{
|
|
"key": "ENABLE_SIGNUP",
|
|
"default": os.environ.get("ENABLE_SIGNUP", "1"),
|
|
},
|
|
]
|
|
)
|
|
if (
|
|
ENABLE_SIGNUP == "0"
|
|
and not WorkspaceMemberInvite.objects.filter(
|
|
email=email,
|
|
).exists()
|
|
):
|
|
raise AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES["SIGNUP_DISABLED"],
|
|
error_message="SIGNUP_DISABLED",
|
|
payload={"email": email},
|
|
)
|
|
user = User(email=email, username=uuid.uuid4().hex)
|
|
|
|
if self.user_data.get("user").get("is_password_autoset"):
|
|
user.set_password(uuid.uuid4().hex)
|
|
user.is_password_autoset = True
|
|
user.is_email_verified = True
|
|
else:
|
|
# Validate password
|
|
results = zxcvbn(self.code)
|
|
if results["score"] < 3:
|
|
raise AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"INVALID_PASSWORD"
|
|
],
|
|
error_message="INVALID_PASSWORD",
|
|
payload={"email": email},
|
|
)
|
|
|
|
user.set_password(self.code)
|
|
user.is_password_autoset = False
|
|
|
|
avatar = self.user_data.get("user", {}).get("avatar", "")
|
|
first_name = self.user_data.get("user", {}).get("first_name", "")
|
|
last_name = self.user_data.get("user", {}).get("last_name", "")
|
|
user.avatar = avatar if avatar else ""
|
|
user.first_name = first_name if first_name else ""
|
|
user.last_name = last_name if last_name else ""
|
|
user.save()
|
|
Profile.objects.create(user=user)
|
|
|
|
if not user.is_active:
|
|
raise AuthenticationException(
|
|
AUTHENTICATION_ERROR_CODES["USER_ACCOUNT_DEACTIVATED"],
|
|
error_message="USER_ACCOUNT_DEACTIVATED",
|
|
)
|
|
|
|
# Update user details
|
|
user.last_login_medium = self.provider
|
|
user.last_active = timezone.now()
|
|
user.last_login_time = timezone.now()
|
|
user.last_login_ip = self.request.META.get("REMOTE_ADDR")
|
|
user.last_login_uagent = self.request.META.get("HTTP_USER_AGENT")
|
|
user.token_updated_at = timezone.now()
|
|
user.save()
|
|
|
|
if self.token_data:
|
|
self.create_update_account(user=user)
|
|
|
|
return user
|