ScoDoc/app/auth/routes.py

212 lines
7.2 KiB
Python
Raw Permalink Normal View History

2021-05-29 18:22:51 +02:00
# -*- coding: UTF-8 -*
"""
auth.routes.py
"""
2023-02-26 21:24:07 +01:00
import flask
from flask import current_app, flash, render_template
from flask import redirect, url_for, request
2023-03-19 10:26:03 +01:00
from flask_login import login_user, current_user
2022-09-14 22:47:31 +02:00
from sqlalchemy import func
2021-05-29 18:22:51 +02:00
from app import db
2023-03-19 10:26:03 +01:00
from app.auth import bp, cas, logic
2021-05-29 18:22:51 +02:00
from app.auth.forms import (
CASUsersImportConfigForm,
2021-05-29 18:22:51 +02:00
LoginForm,
ResetPasswordForm,
ResetPasswordRequestForm,
UserCreationForm,
2021-05-29 18:22:51 +02:00
)
from app.auth.models import Role, User, invalid_user_name
2021-05-29 18:22:51 +02:00
from app.auth.email import send_password_reset_email
from app.decorators import admin_required
from app.forms.generic import SimpleConfirmationForm
2023-02-26 21:24:07 +01:00
from app.models.config import ScoDocSiteConfig
from app.scodoc.sco_roles_default import SCO_ROLES_DEFAULTS
from app.scodoc import sco_utils as scu
2021-05-29 18:22:51 +02:00
_ = lambda x: x # sans babel
_l = _
def _login_form():
"""le formulaire de login, avec un lien CAS s'il est configuré."""
2021-05-29 18:22:51 +02:00
form = LoginForm()
if form.validate_on_submit():
# note: ceci est la première requête SQL déclenchée par un utilisateur arrivant
if invalid_user_name(form.user_name.data):
user = None
else:
user = User.query.filter_by(user_name=form.user_name.data).first()
2021-05-29 18:22:51 +02:00
if user is None or not user.check_password(form.password.data):
2021-09-09 12:49:23 +02:00
current_app.logger.info("login: invalid (%s)", form.user_name.data)
2021-09-11 15:59:06 +02:00
flash(_("Nom ou mot de passe invalide"))
2021-05-29 18:22:51 +02:00
return redirect(url_for("auth.login"))
2021-05-29 18:22:51 +02:00
login_user(user, remember=form.remember_me.data)
2021-09-09 12:49:23 +02:00
current_app.logger.info("login: success (%s)", form.user_name.data)
2022-07-26 16:05:30 +02:00
return form.redirect("scodoc.index")
return render_template(
2023-02-26 21:24:07 +01:00
"auth/login.j2",
title=_("Sign In"),
form=form,
is_cas_enabled=ScoDocSiteConfig.is_cas_enabled(),
is_cas_forced=ScoDocSiteConfig.is_cas_forced(),
)
2021-05-29 18:22:51 +02:00
@bp.route("/login", methods=["GET", "POST"])
def login():
"""ScoDoc Login form
Si paramètre cas_force, redirige vers le CAS.
"""
if current_user.is_authenticated:
return redirect(url_for("scodoc.index"))
if ScoDocSiteConfig.get("cas_force"):
current_app.logger.info("login: forcing CAS")
return redirect(url_for("cas.login"))
return _login_form()
@bp.route("/login_scodoc", methods=["GET", "POST"])
def login_scodoc():
"""ScoDoc Login form.
Formulaire login, sans redirection immédiate sur CAS si ce dernier est configuré.
Sans CAS, ce formulaire est identique à /login
"""
if current_user.is_authenticated:
return redirect(url_for("scodoc.index"))
return _login_form()
2021-05-29 18:22:51 +02:00
@bp.route("/logout")
2023-02-26 21:24:07 +01:00
def logout() -> flask.Response:
"Logout a scodoc user. If CAS session, logout from CAS. Redirect."
2023-03-19 10:26:03 +01:00
return logic.logout()
2021-05-29 18:22:51 +02:00
@bp.route("/create_user", methods=["GET", "POST"])
@admin_required
def create_user():
"Form creating new user"
form = UserCreationForm()
if form.validate_on_submit():
user = User(user_name=form.user_name.data, email=form.email.data)
2021-05-29 18:22:51 +02:00
user.set_password(form.password.data)
db.session.add(user)
db.session.commit()
flash(f"Utilisateur {user.user_name} créé")
2021-08-17 22:11:35 +02:00
return redirect(url_for("scodoc.index"))
return render_template("auth/register.j2", title="Création utilisateur", form=form)
2021-05-29 18:22:51 +02:00
@bp.route("/reset_password_request", methods=["GET", "POST"])
def reset_password_request():
"""Form demande renvoi de mot de passe par mail
Si l'utilisateur est déjà authentifié, le renvoie simplement sur
la page d'accueil.
"""
2021-05-29 18:22:51 +02:00
if current_user.is_authenticated:
2021-08-17 22:11:35 +02:00
return redirect(url_for("scodoc.index"))
2021-05-29 18:22:51 +02:00
form = ResetPasswordRequestForm()
if form.validate_on_submit():
2022-09-14 22:47:31 +02:00
users = User.query.filter(
func.lower(User.email) == func.lower(form.email.data)
).all()
if len(users) == 1:
send_password_reset_email(users[0])
elif len(users) > 1:
current_app.logger.info(
2022-09-14 22:47:31 +02:00
f"reset_password_request: multiple users with email '{form.email.data}' (ignoring)"
)
2021-05-29 18:22:51 +02:00
else:
current_app.logger.info(
2022-09-14 22:47:31 +02:00
f"reset_password_request: for unkown user '{form.email.data}'"
2021-05-29 18:22:51 +02:00
)
2021-10-17 11:19:01 +02:00
flash(
_("Voir les instructions envoyées par mail (pensez à regarder vos spams)")
)
2021-05-29 18:22:51 +02:00
return redirect(url_for("auth.login"))
return render_template(
2023-03-19 10:26:03 +01:00
"auth/reset_password_request.j2",
title=_("Reset Password"),
form=form,
is_cas_enabled=ScoDocSiteConfig.is_cas_enabled(),
2021-05-29 18:22:51 +02:00
)
@bp.route("/reset_password/<token>", methods=["GET", "POST"])
def reset_password(token):
"Reset password après demande par mail"
2021-05-29 18:22:51 +02:00
if current_user.is_authenticated:
2021-08-17 22:11:35 +02:00
return redirect(url_for("scodoc.index"))
user: User = User.verify_reset_password_token(token)
2022-05-03 13:35:17 +02:00
if user is None:
2021-08-17 22:11:35 +02:00
return redirect(url_for("scodoc.index"))
2021-05-29 18:22:51 +02:00
form = ResetPasswordForm()
if form.validate_on_submit():
user.set_password(form.password.data)
db.session.commit()
flash(_("Votre mot de passe a été changé."))
2021-05-29 18:22:51 +02:00
return redirect(url_for("auth.login"))
return render_template("auth/reset_password.j2", form=form, user=user)
@bp.route("/reset_standard_roles_permissions", methods=["GET", "POST"])
@admin_required
def reset_standard_roles_permissions():
"Réinitialise (recrée au besoin) les rôles standards de ScoDoc et leurs permissions"
form = SimpleConfirmationForm()
if request.method == "POST" and form.cancel.data:
return redirect(url_for("scodoc.configuration"))
if form.validate_on_submit():
Role.reset_standard_roles_permissions()
flash("rôles standards réinitialisés !")
return redirect(url_for("scodoc.configuration"))
return render_template(
"form_confirmation.j2",
title="Réinitialiser les roles standards de ScoDoc ?",
form=form,
info_message=f"""<p>Les rôles standards seront recréés et leurs permissions
réinitialisées aux valeurs par défaut de ScoDoc.
</p>
<p>
Les rôles standards sont: <tt>{', '.join(SCO_ROLES_DEFAULTS.keys())}</tt>
</p>
""",
)
@bp.route("/cas_users_generate_excel_sample")
@admin_required
def cas_users_generate_excel_sample():
"une feuille excel pour importation config CAS"
data = cas.cas_users_generate_excel_sample()
return scu.send_file(data, "ImportConfigCAS", scu.XLSX_SUFFIX, scu.XLSX_MIMETYPE)
@bp.route("/cas_users_import_config", methods=["GET", "POST"])
@admin_required
def cas_users_import_config():
"""Import utilisateurs depuis feuille Excel"""
form = CASUsersImportConfigForm()
if form.validate_on_submit():
if form.cancel.data: # cancel button
return redirect(url_for("scodoc.configuration"))
datafile = request.files[form.user_config_file.name]
nb_modif = cas.cas_users_import_excel_file(datafile)
current_app.logger.info(f"cas_users_import_config: {nb_modif} comptes modifiés")
flash(f"Config. CAS de {nb_modif} comptes modifiée.")
return redirect(url_for("scodoc.configuration"))
return render_template(
"auth/cas_users_import_config.j2",
title=_("Importation configuration CAS utilisateurs"),
form=form,
)