77 lines
1.6 KiB
Python
77 lines
1.6 KiB
Python
|
from flask import current_app
|
||
|
|
from .form.login import PasswordForm, TotpForm, Fido2Form
|
||
|
|
from ldap3 import Server, Connection
|
||
|
|
from ldap3.core.exceptions import LDAPException
|
||
|
|
|
||
|
|
import pyotp
|
||
|
|
|
||
|
|
class AuthProvider:
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def get_name(csl):
|
||
|
|
return csl.__name__
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def get_form():
|
||
|
|
return
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def check_auth(user, form) -> bool:
|
||
|
|
'''
|
||
|
|
checks the submited form is valid
|
||
|
|
return true if user is allowed to auth
|
||
|
|
'''
|
||
|
|
return False
|
||
|
|
|
||
|
|
|
||
|
|
class LdapAuthProvider(AuthProvider):
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def get_form():
|
||
|
|
return PasswordForm(prefix='password')
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def check_auth(user, form):
|
||
|
|
server = Server(current_app.config['LDAP_URL'])
|
||
|
|
ldap_conn = Connection(server, user.entry_dn, form.data['password'])
|
||
|
|
try:
|
||
|
|
return ldap_conn.bind()
|
||
|
|
except LDAPException:
|
||
|
|
return False
|
||
|
|
|
||
|
|
|
||
|
|
class U2FAuthProvider(AuthProvider):
|
||
|
|
@staticmethod
|
||
|
|
def get_from():
|
||
|
|
return Fido2Form(prefix='fido2')
|
||
|
|
|
||
|
|
|
||
|
|
class WebAuthProvider(AuthProvider):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class TotpAuthProvider(AuthProvider):
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def get_form():
|
||
|
|
return TotpForm(prefix='totp')
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def check_auth(user, form):
|
||
|
|
data = form.data['totp']
|
||
|
|
if data is not None:
|
||
|
|
print(f'data totp: {data}')
|
||
|
|
for totp in user.totps:
|
||
|
|
if pyotp.TOTP(totp).verify(data):
|
||
|
|
return True
|
||
|
|
return False
|
||
|
|
|
||
|
|
|
||
|
|
AUTH_PROVIDER_LIST = [
|
||
|
|
LdapAuthProvider,
|
||
|
|
TotpAuthProvider
|
||
|
|
]
|
||
|
|
|
||
|
|
print(LdapAuthProvider.get_name())
|
||
|
|
|