9b7b23f5a2
* dev: magic link login and email password disable * dev: user account deactivation * dev: change nginx conf routes * feat: changemod space * fix: space app dir fixes * dev: invalidate cache for instances when creating workspace * dev: update email templates for test email * dev: fix build errors * fix: auth fixes and improvement (#4452) * chore: change password api updated and missing password error code added * chore: auth helper updated * chore: disable send code input suggestion * chore: change password function updated * fix: application error on sign in page * chore: change password validation added and enhancement * dev: space base path in web * dev: admin user deactivated * dev: user and instance admin session endpoint * fix: last_workspace_id endpoint updated * fix: magic sign in and email password check added --------- Co-authored-by: pablohashescobar <nikhilschacko@gmail.com> Co-authored-by: sriram veeraghanta <veeraghanta.sriram@gmail.com> Co-authored-by: guru_sainath <gurusainath007@gmail.com>
247 lines
8.9 KiB
Python
247 lines
8.9 KiB
Python
# Python imports
|
|
from urllib.parse import urlencode, urljoin
|
|
|
|
# Django imports
|
|
from django.core.validators import validate_email
|
|
from django.http import HttpResponseRedirect
|
|
from django.views import View
|
|
|
|
# Third party imports
|
|
from rest_framework import status
|
|
from rest_framework.permissions import AllowAny
|
|
from rest_framework.response import Response
|
|
from rest_framework.views import APIView
|
|
|
|
# Module imports
|
|
from plane.authentication.provider.credentials.magic_code import (
|
|
MagicCodeProvider,
|
|
)
|
|
from plane.authentication.utils.login import user_login
|
|
from plane.authentication.utils.redirection_path import get_redirection_path
|
|
from plane.authentication.utils.workspace_project_join import (
|
|
process_workspace_project_invitations,
|
|
)
|
|
from plane.bgtasks.magic_link_code_task import magic_link
|
|
from plane.license.models import Instance
|
|
from plane.authentication.utils.host import base_host
|
|
from plane.db.models import User, Profile
|
|
from plane.authentication.adapter.error import (
|
|
AuthenticationException,
|
|
AUTHENTICATION_ERROR_CODES,
|
|
)
|
|
|
|
|
|
class MagicGenerateEndpoint(APIView):
|
|
|
|
permission_classes = [
|
|
AllowAny,
|
|
]
|
|
|
|
def post(self, request):
|
|
# Check if instance is configured
|
|
instance = Instance.objects.first()
|
|
if instance is None or not instance.is_setup_done:
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"INSTANCE_NOT_CONFIGURED"
|
|
],
|
|
error_message="INSTANCE_NOT_CONFIGURED",
|
|
)
|
|
return Response(
|
|
exc.get_error_dict(), status=status.HTTP_400_BAD_REQUEST
|
|
)
|
|
|
|
origin = request.META.get("HTTP_ORIGIN", "/")
|
|
email = request.data.get("email", False)
|
|
try:
|
|
# Clean up the email
|
|
email = email.strip().lower()
|
|
validate_email(email)
|
|
adapter = MagicCodeProvider(request=request, key=email)
|
|
key, token = adapter.initiate()
|
|
# If the smtp is configured send through here
|
|
magic_link.delay(email, key, token, origin)
|
|
return Response({"key": str(key)}, status=status.HTTP_200_OK)
|
|
except AuthenticationException as e:
|
|
params = e.get_error_dict()
|
|
return Response(
|
|
params,
|
|
status=status.HTTP_400_BAD_REQUEST,
|
|
)
|
|
|
|
|
|
class MagicSignInEndpoint(View):
|
|
|
|
def post(self, request):
|
|
|
|
# set the referer as session to redirect after login
|
|
code = request.POST.get("code", "").strip()
|
|
email = request.POST.get("email", "").strip().lower()
|
|
next_path = request.POST.get("next_path")
|
|
|
|
if code == "" or email == "":
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"MAGIC_SIGN_IN_EMAIL_CODE_REQUIRED"
|
|
],
|
|
error_message="MAGIC_SIGN_IN_EMAIL_CODE_REQUIRED",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"sign-in?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
# Existing User
|
|
existing_user = User.objects.filter(email=email).first()
|
|
|
|
if not existing_user:
|
|
if not existing_user.is_active:
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"USER_ACCOUNT_DEACTIVATED"
|
|
],
|
|
error_message="USER_ACCOUNT_DEACTIVATED",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"sign-in?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES["USER_DOES_NOT_EXIST"],
|
|
error_message="USER_DOES_NOT_EXIST",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"sign-in?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
try:
|
|
provider = MagicCodeProvider(
|
|
request=request, key=f"magic_{email}", code=code
|
|
)
|
|
user = provider.authenticate()
|
|
profile = Profile.objects.get(user=user)
|
|
# Login the user and record his device info
|
|
user_login(request=request, user=user, is_app=True)
|
|
# Process workspace and project invitations
|
|
process_workspace_project_invitations(user=user)
|
|
if user.is_password_autoset and profile.is_onboarded:
|
|
path = "accounts/set-password"
|
|
else:
|
|
# Get the redirection path
|
|
path = (
|
|
str(next_path)
|
|
if next_path
|
|
else str(process_workspace_project_invitations(user=user))
|
|
)
|
|
# redirect to referer path
|
|
url = urljoin(base_host(request=request, is_app=True), path)
|
|
return HttpResponseRedirect(url)
|
|
|
|
except AuthenticationException as e:
|
|
params = e.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"sign-in?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
|
|
class MagicSignUpEndpoint(View):
|
|
|
|
def post(self, request):
|
|
|
|
# set the referer as session to redirect after login
|
|
code = request.POST.get("code", "").strip()
|
|
email = request.POST.get("email", "").strip().lower()
|
|
next_path = request.POST.get("next_path")
|
|
|
|
if code == "" or email == "":
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"MAGIC_SIGN_UP_EMAIL_CODE_REQUIRED"
|
|
],
|
|
error_message="MAGIC_SIGN_UP_EMAIL_CODE_REQUIRED",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
# Existing user
|
|
existing_user = User.objects.filter(email=email).first()
|
|
if not existing_user:
|
|
if not existing_user.is_active:
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES[
|
|
"USER_ACCOUNT_DEACTIVATED"
|
|
],
|
|
error_message="USER_ACCOUNT_DEACTIVATED",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
exc = AuthenticationException(
|
|
error_code=AUTHENTICATION_ERROR_CODES["USER_ALREADY_EXIST"],
|
|
error_message="USER_ALREADY_EXIST",
|
|
)
|
|
params = exc.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|
|
|
|
try:
|
|
provider = MagicCodeProvider(
|
|
request=request, key=f"magic_{email}", code=code
|
|
)
|
|
user = provider.authenticate()
|
|
# Login the user and record his device info
|
|
user_login(request=request, user=user, is_app=True)
|
|
# Process workspace and project invitations
|
|
process_workspace_project_invitations(user=user)
|
|
# Get the redirection path
|
|
if next_path:
|
|
path = str(next_path)
|
|
else:
|
|
path = get_redirection_path(user=user)
|
|
# redirect to referer path
|
|
url = urljoin(base_host(request=request, is_app=True), path)
|
|
return HttpResponseRedirect(url)
|
|
|
|
except AuthenticationException as e:
|
|
params = e.get_error_dict()
|
|
if next_path:
|
|
params["next_path"] = str(next_path)
|
|
url = urljoin(
|
|
base_host(request=request, is_app=True),
|
|
"?" + urlencode(params),
|
|
)
|
|
return HttpResponseRedirect(url)
|