mirror of https://github.com/jumpserver/jumpserver
77 lines
2.6 KiB
Python
77 lines
2.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
|
|
from __future__ import unicode_literals
|
|
|
|
from django.shortcuts import redirect, reverse
|
|
from django.views.generic.edit import FormView
|
|
|
|
from common.utils import get_logger
|
|
from users.views import UserFaceCaptureView
|
|
from .utils import redirect_to_guard_view
|
|
from .. import forms, errors, mixins
|
|
from ..const import MFAType
|
|
|
|
logger = get_logger(__name__)
|
|
__all__ = ['UserLoginMFAView', 'UserLoginMFAFaceView']
|
|
|
|
|
|
class UserLoginMFAView(mixins.AuthMixin, FormView):
|
|
template_name = 'authentication/login_mfa.html'
|
|
form_class = forms.UserCheckOtpCodeForm
|
|
redirect_field_name = 'next'
|
|
|
|
def get(self, *args, **kwargs):
|
|
try:
|
|
user = self.get_user_from_session()
|
|
except errors.SessionEmptyError:
|
|
return redirect_to_guard_view('session_empty')
|
|
|
|
try:
|
|
self._check_if_no_active_mfa(user)
|
|
except errors.MFAUnsetError as e:
|
|
return redirect(e.url + '?_=login_mfa')
|
|
|
|
return super().get(*args, **kwargs)
|
|
|
|
def form_valid(self, form):
|
|
code = form.cleaned_data.get('code')
|
|
mfa_type = form.cleaned_data.get('mfa_type')
|
|
|
|
if mfa_type == MFAType.Face:
|
|
return redirect(reverse('authentication:login-face-capture'))
|
|
elif mfa_type == MFAType.Passkey:
|
|
return redirect('/api/v1/authentication/passkeys/login/')
|
|
return self.do_mfa_check(form, code, mfa_type)
|
|
|
|
def do_mfa_check(self, form, code, mfa_type):
|
|
from users.utils import MFABlockUtils
|
|
|
|
try:
|
|
self._do_check_user_mfa(code, mfa_type)
|
|
user, ip = self.get_user_from_session(), self.get_request_ip()
|
|
MFABlockUtils(user.username, ip).clean_failed_count()
|
|
query_string = self.request.GET.urlencode()
|
|
return redirect_to_guard_view('mfa_ok', query_string)
|
|
except (errors.MFAFailedError, errors.BlockMFAError) as e:
|
|
form.add_error('code', e.msg)
|
|
return super().form_invalid(form)
|
|
except errors.SessionEmptyError:
|
|
return redirect_to_guard_view('session_empty')
|
|
except Exception as e:
|
|
logger.error(e)
|
|
import traceback
|
|
traceback.print_exc()
|
|
return redirect_to_guard_view('unexpect')
|
|
|
|
def get_context_data(self, **kwargs):
|
|
user = self.get_user_from_session()
|
|
mfa_context = self.get_user_mfa_context(user)
|
|
kwargs.update(mfa_context)
|
|
return kwargs
|
|
|
|
|
|
class UserLoginMFAFaceView(UserFaceCaptureView, UserLoginMFAView):
|
|
def form_valid(self, form):
|
|
return self.do_mfa_check(form, self.code, self.mfa_type)
|