175 lines
4.8 KiB
Python
175 lines
4.8 KiB
Python
from json import load
|
|
from os import environ
|
|
|
|
from flask import Flask, flash, redirect, request, session, url_for
|
|
from ldap3 import ALL_ATTRIBUTES
|
|
from ldap3.core.exceptions import LDAPException
|
|
|
|
from .helpers.flask import template
|
|
from .helpers.ldap import (
|
|
admin_required,
|
|
get_user,
|
|
login_required,
|
|
try_auth,
|
|
update_user,
|
|
update_user_password,
|
|
)
|
|
|
|
app = Flask(__name__)
|
|
app.secret_key = environ.get("FLASK_SECRET_KEY", default="test")
|
|
|
|
with open(environ["APP_CONFIG"]) as f:
|
|
APP_CONFIG = load(f)
|
|
|
|
|
|
@app.route("/")
|
|
def slash():
|
|
return redirect(url_for("login"))
|
|
|
|
|
|
@app.route("/login", methods=["GET", "POST"])
|
|
def login():
|
|
session["is_logged_in"] = False
|
|
|
|
if request.method == "POST":
|
|
if try_auth(
|
|
request.form["username"],
|
|
request.form["password"],
|
|
):
|
|
session["is_logged_in"] = True
|
|
session["username"] = request.form["username"]
|
|
session["password"] = request.form["password"]
|
|
|
|
flash("logged in")
|
|
|
|
return redirect(url_for("selfservice"))
|
|
else:
|
|
flash("username or password is wrong")
|
|
|
|
return template(None, "login.html")
|
|
|
|
|
|
@app.route("/logout")
|
|
def logout():
|
|
session["is_logged_in"] = False
|
|
session["username"] = ""
|
|
session["password"] = ""
|
|
|
|
flash("logged out")
|
|
|
|
return redirect(url_for("login"))
|
|
|
|
|
|
@app.route("/selfservice", methods=["GET", "POST"])
|
|
@login_required
|
|
def selfservice(ldap):
|
|
if request.method == "POST":
|
|
if request.form.get("userdata"):
|
|
try:
|
|
update_user(
|
|
ldap,
|
|
session["username"],
|
|
{
|
|
"givenName": request.form["givenName"],
|
|
"sn": request.form["sn"],
|
|
"cn": "{} {}".format(
|
|
request.form["givenName"],
|
|
request.form["sn"],
|
|
),
|
|
"mail": request.form["mail"],
|
|
},
|
|
)
|
|
flash("data updated")
|
|
except LDAPException as e:
|
|
app.logger.error(
|
|
"Updating {} failed: {}\n{}".format(
|
|
APP_CONFIG["template"]["user_dn"].format(session["username"]),
|
|
repr(e),
|
|
repr(request.form),
|
|
),
|
|
)
|
|
flash(e)
|
|
elif request.form.get("passwordchange"):
|
|
validated = (True,)
|
|
if not try_auth(
|
|
session["username"],
|
|
request.form["current"],
|
|
):
|
|
validated = False
|
|
flash("current password does not match")
|
|
|
|
if request.form["new"] != request.form["repeat"]:
|
|
validated = False
|
|
flash("new passwords do not match")
|
|
|
|
if len(request.form["new"]) < 12:
|
|
validated = False
|
|
flash("new password must be atleast 12 characters")
|
|
|
|
if validated:
|
|
try:
|
|
update_user_password(
|
|
ldap,
|
|
session["username"],
|
|
request.form["new"],
|
|
)
|
|
session["password"] = request.form["new"]
|
|
flash("password changed")
|
|
except LDAPException as e:
|
|
app.logger.error(
|
|
"Updating {} failed: {}\n{}".format(
|
|
APP_CONFIG["template"]["user_dn"].format(
|
|
session["username"]
|
|
),
|
|
repr(e),
|
|
repr(request.form),
|
|
),
|
|
)
|
|
flash(e)
|
|
|
|
return redirect(url_for("selfservice"))
|
|
|
|
print(session)
|
|
return template(ldap, "selfservice.html")
|
|
|
|
|
|
@app.route("/groups", methods=["GET"])
|
|
@login_required
|
|
def groups(ldap):
|
|
ldap.search(
|
|
APP_CONFIG["ldap"]["group_base"],
|
|
"(objectclass=groupOfNames)",
|
|
attributes=ALL_ATTRIBUTES,
|
|
)
|
|
|
|
return template(
|
|
ldap,
|
|
"groups/list.html",
|
|
groups=ldap.entries,
|
|
)
|
|
|
|
|
|
@app.route("/groups/<ou>", methods=["GET", "POST"])
|
|
@admin_required
|
|
def group_edit(ldap, ou):
|
|
if request.method == "POST":
|
|
if request.form.get("remove"):
|
|
flash(
|
|
f"did not remove {request.form['remove']} because not yet implemented"
|
|
)
|
|
|
|
return redirect(url_for("group_edit", ou=ou))
|
|
|
|
ldap.search(
|
|
APP_CONFIG["ldap"]["user_base"],
|
|
APP_CONFIG["template"]["group_members"].format(ou),
|
|
attributes=ALL_ATTRIBUTES,
|
|
)
|
|
|
|
return template(
|
|
ldap,
|
|
"groups/members.html",
|
|
members=ldap.entries,
|
|
ou=ou,
|
|
)
|