60 lines
2.3 KiB
Python
60 lines
2.3 KiB
Python
from flask import Blueprint
|
||
from flask_restful import reqparse, Resource, Api
|
||
from itsdangerous import TimedJSONWebSignatureSerializer
|
||
import sys
|
||
sys.path.append("..")
|
||
from config import admin_passwd
|
||
from units import token_auth, consul_kv
|
||
from units.ldap.LdapUser import Ldap
|
||
secret_key = consul_kv.get_value('ConsulManager/assets/secret/skey')['sk']
|
||
s = TimedJSONWebSignatureSerializer(secret_key,expires_in=28800)
|
||
|
||
blueprint = Blueprint('login',__name__)
|
||
api = Api(blueprint)
|
||
|
||
parser = reqparse.RequestParser()
|
||
parser.add_argument('username',type=str)
|
||
parser.add_argument('password',type=str)
|
||
parser.add_argument('ldap',type=str)
|
||
|
||
class User(Resource):
|
||
@token_auth.auth.login_required
|
||
def get(self, user_opt):
|
||
if user_opt == 'info':
|
||
return {
|
||
"code": 20000,
|
||
"data": {"roles": ["admin"],"name": "admin","avatar": "/sl.png"}}
|
||
def post(self, user_opt):
|
||
args = parser.parse_args()
|
||
username = args.get('username')
|
||
password = args.get('password')
|
||
#ldap = args.get('ldap')
|
||
ldap = False if username == 'admin' else 'True'
|
||
#ldap认证
|
||
if user_opt == 'login' and ldap == "True":
|
||
print("ldap")
|
||
ldap_obj = Ldap()
|
||
ldap_result = ldap_obj.authpass(username,password)
|
||
if ldap_result == 1:
|
||
token = str(s.dumps(admin_passwd), encoding="utf-8")
|
||
return {"code": 20000, "data": {"token": "Bearer " + token,"username":username}}
|
||
elif ldap_result == 0:
|
||
return {"code": 40000, "data": "LDAP未开启。"}
|
||
elif ldap_result == 2:
|
||
return {"code": 40000, "data": "该LDAP用户不在白名单内。"}
|
||
else:
|
||
return {"code": 40000, "data": "LDAP用户密码错误！"}
|
||
else:
|
||
if user_opt == 'login':
|
||
print("非ldap")
|
||
if password == admin_passwd:
|
||
token = str(s.dumps(admin_passwd),encoding="utf-8")
|
||
return {"code": 20000,"data": {"token": "Bearer " + token,"username":username}}
|
||
else:
|
||
return {"code": 40000, "data": "密码错误！"}
|
||
|
||
elif user_opt == 'logout':
|
||
return {"code": 20000,"data": "success"}
|
||
|
||
api.add_resource(User, '/api/user/<user_opt>')
|