mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
75 lines
2.7 KiB
75 lines
2.7 KiB
# -*- coding: utf-8 -*-
|
|
#
|
|
import time
|
|
|
|
from django.utils.translation import gettext_lazy as _
|
|
from rest_framework import status
|
|
from rest_framework.decorators import action
|
|
from rest_framework.generics import RetrieveAPIView
|
|
from rest_framework.response import Response
|
|
|
|
from authentication.permissions import UserConfirmation
|
|
from common.api import JMSGenericViewSet
|
|
from common.permissions import IsValidUser
|
|
from ..const import ConfirmType
|
|
from ..serializers import ConfirmSerializer
|
|
|
|
|
|
class ConfirmBindORUNBindOAuth(RetrieveAPIView):
|
|
permission_classes = (IsValidUser, UserConfirmation.require(ConfirmType.RELOGIN),)
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
return Response('ok')
|
|
|
|
|
|
class UserConfirmationViewSet(JMSGenericViewSet):
|
|
permission_classes = (IsValidUser,)
|
|
serializer_class = ConfirmSerializer
|
|
|
|
@action(methods=['get'], detail=False)
|
|
def check(self, request):
|
|
confirm_type = request.query_params.get('confirm_type', 'password')
|
|
permission = UserConfirmation.require(confirm_type)()
|
|
permission.has_permission(request, self)
|
|
return Response('ok')
|
|
|
|
def get_confirm_backend(self, confirm_type):
|
|
backend_classes = ConfirmType.get_prop_backends(confirm_type)
|
|
if not backend_classes:
|
|
return
|
|
for backend_cls in backend_classes:
|
|
backend = backend_cls(self.request.user, self.request)
|
|
if not backend.check():
|
|
continue
|
|
return backend
|
|
|
|
def list(self, request, *args, **kwargs):
|
|
confirm_type = request.query_params.get('confirm_type', 'password')
|
|
backend = self.get_confirm_backend(confirm_type)
|
|
if backend is None:
|
|
msg = _('This action require verify your MFA')
|
|
return Response(data={'error': msg}, status=status.HTTP_400_BAD_REQUEST)
|
|
|
|
data = {
|
|
'confirm_type': backend.name,
|
|
'content': backend.content,
|
|
}
|
|
return Response(data=data)
|
|
|
|
def create(self, request, *args, **kwargs):
|
|
serializer = self.get_serializer(data=request.data)
|
|
serializer.is_valid(raise_exception=True)
|
|
validated_data = serializer.validated_data
|
|
|
|
confirm_type = validated_data.get('confirm_type', 'password')
|
|
mfa_type = validated_data.get('mfa_type')
|
|
secret_key = validated_data.get('secret_key')
|
|
|
|
backend = self.get_confirm_backend(confirm_type)
|
|
ok, msg = backend.authenticate(secret_key, mfa_type)
|
|
if ok:
|
|
request.session['CONFIRM_LEVEL'] = ConfirmType.values.index(confirm_type) + 1
|
|
request.session['CONFIRM_TIME'] = int(time.time())
|
|
return Response('ok')
|
|
return Response({'error': msg}, status=400)
|