Produits Entr'ouvert » Authentic 2

recursive-include src/authentic2/auth2_multifactor/auth_oath/templates *.html

          'qrcode',

          'oath',

              'authentic2-auth-oath = authentic2.auth2_multifactor.auth_oath:Plugin',

"""

This package contains authentification modules that are not to be used as primary

modes of authentification, but rather as supplementary authentication factors in

order to guarantee higher levels of trust.

"""

class Plugin(object):

    def get_before_urls(self):

        from . import urls

        return urls.urlpatterns

    def get_apps(self):

        return [__name__]

    def get_authenticators(self):

        return ['authentic2.auth2_multifactor.auth_oath.authenticators.TOTPAuthenticator']

class AppSettings(object):

    __DEFAULTS = {

        'ENABLE': True,

        'LEVEL': 2,

    }

    def __init__(self, prefix):

        self.prefix = prefix

    def _setting(self, name, dflt):

        from django.conf import settings

        return getattr(settings, self.prefix+name, dflt)

    def __getattr__(self, name):

        if name not in self.__DEFAULTS:

            raise AttributeError(name)

        return self._setting(name, self.__DEFAULTS[name])

import sys

app_settings = AppSettings('A2_AUTH_OATH_')

app_settings.__name__ = __name__

sys.modules[__name__] = app_settings

from django.shortcuts import render

from django.utils.translation import ugettext as _, ugettext_lazy

from oath import accept_totp

from . import app_settings

from .views import totp_profile, totp_login

class TOTPAuthenticator(object):

    submit_name = 'oath-totp-submit'

    auth_level = app_settings.LEVEL

    def enabled(self):

        return app_settings.ENABLE

    def name(self):

        return ugettext_lazy('One-time password')

    def id(self):

        return 'multifactor-totp'

    def login(self, request, *args, **kwargs):

        return totp_login(request, *args, **kwargs)

    def profile(self, request, *args, **kwargs):

        return totp_profile(request, *args, **kwargs)

from django import forms

from django.core.exceptions import ValidationError

from django.utils.translation import ugettext as _

def validate_number(value):

    try:

        int(value)

    except ValueError:

        raise ValidationError(

            _('Code must be a number.'),

        )

class TOTPForm(forms.Form):

    code = forms.CharField(max_length=6, min_length=6,

                           validators=[validate_number])

# -*- coding: utf-8 -*-

# Generated by Django 1.11.18 on 2019-04-01 08:21

from __future__ import unicode_literals

from django.conf import settings

from django.db import migrations, models

import django.db.models.deletion

class Migration(migrations.Migration):

    initial = True

    dependencies = [

        ('custom_user', '0016_auto_20180925_1107'),

    ]

    operations = [

        migrations.CreateModel(

            name='OATHTOTPSecret',

            fields=[

                ('user', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, primary_key=True, related_name='oath_totp_secret', serialize=False, to=settings.AUTH_USER_MODEL, verbose_name='utilisateur')),

                ('key', models.CharField(max_length=40)),

                ('drift', models.IntegerField(default=0)),

            ],

        ),

    ]

from django.conf import settings

from django.db import models

from django.utils.translation import ugettext as _

class OATHTOTPSecret(models.Model):

    user = models.OneToOneField(settings.AUTH_USER_MODEL, primary_key=True,

                                related_name='oath_totp_secret', verbose_name=_('user'))

    key = models.CharField(max_length=40)

    drift = models.IntegerField(default=0)

{% load i18n staticfiles %}

<div>

<form method="post" autocomplete="off" action="">

{% csrf_token %}

{{ form.as_p }}

<button class="submit-button" name="{{ submit_name }}">{% trans "Submit" %}</button>

{% if cancel %}

<button class="cancel-button" name="cancel">{% trans 'Cancel' %}</button>

{% endif %}

</form>

</div>

{% load i18n %}

<h4>QR Code</h4>

<div>

  <p>

    <img src="data:image/png;base64,{{ uri }}">

  </p>

</div>

<a onclick="return confirm('{% trans "Warning: you will have to configure your devices again." %}')" href="{% url 'totp-change-secret' %}">{% trans "Generate new code" %}</a><br />

from django.conf.urls import url

from . import views

urlpatterns = [

    url(r'change_secret', views.change_secret, name='totp-change-secret'),

]

from base64 import b64encode

from io import BytesIO

from random import SystemRandom

from qrcode import QRCode

from oath import google_authenticator

from .models import OATHTOTPSecret

def get_qrcode(user):

    try:

        secret = user.oath_totp_secret

    except OATHTOTPSecret.DoesNotExist:

        secret = set_secret(user)

    ga = google_authenticator.GoogleAuthenticatorURI()

    account = user.get_full_name().encode('utf-8')

    uri = ga.generate(secret.key, account=account, issuer='Publik')

    qr = QRCode(box_size=5)

    qr.add_data(uri)

    qr.make(fit=True)

    img = qr.make_image()

    img_bytes = BytesIO()

    img.save(img_bytes, format='png')

    uri = b64encode(img_bytes.getvalue())

    return uri

def set_secret(user):

    key = format(SystemRandom().getrandbits(160), '040x')

    secret = OATHTOTPSecret(user.id, key)

    secret.save()

    return secret

def get_authenticator_level():

    from .authenticators import TOTPAuthenticator

    return TOTPAuthenticator.auth_level

from django.contrib.auth.decorators import login_required

from django.template.loader import render_to_string

from django.utils.translation import ugettext as _, ugettext_lazy

from django.views.generic.edit import FormView

from oath import accept_totp

from authentic2.utils import redirect, get_next_url, csrf_token_check

from .forms import TOTPForm

from .utils import get_qrcode, set_secret, get_authenticator_level

def totp_profile(request, *args, **kwargs):

    context = {}

    context['uri'] = get_qrcode(request.user)

    return render_to_string('auth_oath/totp_profile.html', context, request=request)

class Login(FormView):

    template_name = 'auth_oath/totp_form.html'

    form_class = TOTPForm

    def get_context_data(self, **kwargs):

        kwargs['submit_name'] = 'oath-totp-submit'

        return super(Login, self).get_context_data(**kwargs)

    def get_success_url(self):

        return get_next_url(self.request.GET)

    def form_valid(self, form):

        code = form.cleaned_data['code']

        secret = self.request.user.oath_totp_secret

        success, drift = accept_totp(secret.key, str(code), drift=secret.drift)

        csrf_token_check(self.request, form)

        if success:

            secret.drift = drift

            secret.save()

            self.request.session['auth_level'] = get_authenticator_level()

            return super(Login, self).form_valid(form)

        form.add_error('code', _('Invalid code.'))

        return self.form_invalid(form)

totp_login = Login.as_view()

@login_required

def change_secret(request):

    set_secret(request.user)

    return redirect(request, 'account_management')