mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
1.2 KiB
40 lines
1.2 KiB
5 years ago
|
# -*- coding: utf-8 -*-
|
||
|
|
#
|
||
|
|
from django.contrib.auth import get_user_model
|
||
|
|
|
||
|
|
UserModel = get_user_model()
|
||
|
|
|
||
|
|
__all__ = ['PublicKeyAuthBackend']
|
||
|
|
|
||
|
|
|
||
|
|
class PublicKeyAuthBackend:
|
||
|
|
def authenticate(self, request, username=None, public_key=None, **kwargs):
|
||
|
|
if not public_key:
|
||
|
|
return None
|
||
|
|
if username is None:
|
||
|
|
username = kwargs.get(UserModel.USERNAME_FIELD)
|
||
|
|
try:
|
||
|
|
user = UserModel._default_manager.get_by_natural_key(username)
|
||
|
|
except UserModel.DoesNotExist:
|
||
|
|
return None
|
||
|
|
else:
|
||
|
|
if user.check_public_key(public_key) and \
|
||
|
|
self.user_can_authenticate(user):
|
||
|
|
return user
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def user_can_authenticate(user):
|
||
|
|
"""
|
||
|
|
Reject users with is_active=False. Custom user models that don't have
|
||
|
|
that attribute are allowed.
|
||
|
|
"""
|
||
|
|
is_active = getattr(user, 'is_active', None)
|
||
|
|
return is_active or is_active is None
|
||
|
|
|
||
|
|
def get_user(self, user_id):
|
||
|
|
try:
|
||
|
|
user = UserModel._default_manager.get(pk=user_id)
|
||
|
|
except UserModel.DoesNotExist:
|
||
|
|
return None
|
||
|
|
return user if self.user_can_authenticate(user) else None
|