Produits Entr'ouvert » Authentic 2

    _id = 'multifactor-totp'

        return self._id

{% extends "authentic2/base-page.html" %}

{% load i18n %}

{% block content %}

<div>

  <p>

    {% blocktrans %}

      Enable this factor in order to secure authentication with a one-time

      verification code. It will be requested at login on top of username and

      password.

    {% endblocktrans %}<br />

    {% blocktrans %}

      Install any application capable of generating such codes (refer to the

      documentation for recommendations). Then scan the QR code below, and enter a

      valid code in order to complete the setup.

    {% endblocktrans %}

  </p>

</div>

<div>

  <p>

    <img src="data:image/png;base64,{{ uri }}">

  </p>

  <p>

    {% trans "For manual setup when unable to scan the code, use the following key : " %}

    {{ secret }}

  </p>

</div>

<div>

<form method="post" autocomplete="off" action="">

{% csrf_token %}

{{ form.as_p }}

<button class="submit-button" name="{{ submit_name }}">{% trans "Activate" %}</button>

</form>

</div>

{% endblock %}

{% if enabled %}

  <h4>QR Code</h4>

  <div>

    <p>

      <img src="data:image/png;base64,{{ uri }}">

    </p>

  </div>

  <a onclick="return confirm('{% trans "Warning: you will have to configure your devices again." %}')" href="{% url 'totp-change-secret' %}">{% trans "Generate new code" %}</a><br />

  <a href="{% url 'totp-disable' %}">{% trans "Disable factor" %}</a>

{% else %}

  {% if login_url %}

    <a href="{{ login_url }}">

        {% trans "Insufficient authentication level to view, click here to increase." %}

    </a>

  {% else %}

    <a href="{{ enable_url }}">

        {% trans "This authentication factor is disabled, click here to set it up." %}

    </a>

  {% endif %}

{% endif %}

    url(r'enable', views.enable, name='totp-enable'),

    url(r'disable', views.disable, name='totp-disable'),

from base64 import b64encode, b32encode

from binascii import unhexlify

def get_encoded_secret(user):

    key = user.oath_totp_secret.key

    return b32encode(unhexlify(key)).decode('ascii')

def get_authenticator_id():

    from .authenticators import TOTPAuthenticator

    return TOTPAuthenticator._id

from authentic2.utils import redirect, get_next_url, csrf_token_check, make_url

from .utils import (get_qrcode, set_secret, get_authenticator_level,

                    get_authenticator_id, get_encoded_secret)

    try:

        request.user.enabled_auth_factors.get(

            authenticator_id=get_authenticator_id())

    except request.user.enabled_auth_factors.model.DoesNotExist:

        context['enabled'] = False

        if 'auth_level' in request.GET:

            # Forced enabling flow

            context['enable_url'] = make_url('totp-enable', keep_params=True,

                                             request=request)

        else:

            context['enable_url'] = make_url('totp-enable',

                                             params={'next': request.get_full_path()})

    else:

        auth_level = get_authenticator_level()

        if request.session.get('auth_level', 1) < auth_level:

            params = {

                'next': request.get_full_path(),

                'auth_level': auth_level,

            }

            context['login_url'] = make_url('auth_login', params=params)

        else:

            context['enabled'] = True

            self.set_auth_level()

    def set_auth_level(self):

        self.request.session['auth_level'] = get_authenticator_level()

class Enable(Login):

    """Allow the user to setup TOTP authentication.

    Require a valid OTP in order to complete the process, ensuring that the

    user setup is successful.

    """

    template_name = 'auth_oath/totp_enable.html'

    def dispatch(self, request, *args, **kwargs):

        try:

            # Verify that the factor is not already enabled

            request.user.enabled_auth_factors.get(

                authenticator_id=get_authenticator_id())

            return redirect(request, 'account_management')

        except request.user.enabled_auth_factors.model.DoesNotExist:

            return super(Enable, self).dispatch(request, *args, **kwargs)

    def get_context_data(self, **kwargs):

        kwargs['uri'] = get_qrcode(self.request.user)

        # Also allow for manual input

        secret = get_encoded_secret(self.request.user)

        kwargs['secret'] = ' '.join(secret[i:i + 4]

                                    for i in range(0, len(secret), 4))

        return super(Enable, self).get_context_data(**kwargs)

    def set_auth_level(self):

        self.request.user.enabled_auth_factors.create(

            authenticator_id=get_authenticator_id())

        return super(Enable, self).set_auth_level()

enable = login_required(Enable.as_view())

@login_required

def disable(request):

    try:

        factor = request.user.enabled_auth_factors.get(

            authenticator_id=get_authenticator_id())

        factor.delete()

    except request.user.enabled_auth_factors.model.DoesNotExist:

        pass

    return redirect(request, 'account_management')