Produits Entr'ouvert » Authentic 2

class RecoveryForm(forms.Form):

    code = forms.CharField(

        max_length=10, min_length=10, label=_('Recovery code'),

        help_text=_("Use one of your recovery code. Remember these are for one-time "

                    "use, hence the code you choose won't be valid next time.")

    )

# -*- coding: utf-8 -*-

# Generated by Django 1.11.18 on 2019-06-25 12:40

from __future__ import unicode_literals

from django.conf import settings

from django.db import migrations, models

import django.db.models.deletion

class Migration(migrations.Migration):

    dependencies = [

        migrations.swappable_dependency(settings.AUTH_USER_MODEL),

        ('auth_oath', '0001_initial'),

    ]

    operations = [

        migrations.CreateModel(

            name='RecoveryCode',

            fields=[

                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),

                ('code', models.CharField(max_length=10)),

                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='totp_recovery_codes', to=settings.AUTH_USER_MODEL, verbose_name='utilisateur')),

            ],

        ),

    ]

class RecoveryCode(models.Model):

    user = models.ForeignKey(settings.AUTH_USER_MODEL, related_name='totp_recovery_codes',

                             verbose_name=_('user'))

    code = models.CharField(max_length=10)

{% if recovery_url %}

  <div>

    <p>

      {% trans "If missing your device, " %}

      <a href="{{ recovery_url }}">{% trans "click here to use a recovery code." %}</a>

    </p>

  </div>

{% endif %}

  <a href={% url 'totp-recovery-display' %}>{% trans "View recovery codes" %}</a><br />

      Recovery codes will also be discarded.

{% extends "authentic2/base-page.html" %}

{% load i18n %}

{% block content %}

  <h2>Recovery codes</h2>

  <p>

  {% blocktrans %}

    Please store the following one-time codes in a safe place. If you ever lose

    your device, they can be used to pass the verification step and regain

    access to your account.

  {% endblocktrans %}

  <ul>

    {% for code in object_list %}

      <li>{{ code.code }}</li>

    {% endfor %}

  </ul>

  {% if next_url %}

    <a href="{{ next_url }}">{% trans "Continue" %}</a>

  {% else %}

    <a href="{% url 'authenticators_profile' %}">{% trans "Back" %}</a>

  {% endif %}

{% endblock %}

{% extends "authentic2/base-page.html" %}

{% load i18n %}

{% block content %}

  {% include "auth_oath/totp_form.html" %}

{% endblock %}

        url(r'recovery-codes', views.recovery_display, name='totp-recovery-display'),

    url(r'recovery', login_required(views.recovery), name='totp-recovery'),

from django.views.generic.list import ListView

from .forms import LoginForm, EnableForm, RecoveryForm

from .models import OATHTOTPSecret, RecoveryCode

        kwargs['recovery_url'] = make_url('totp-recovery', keep_params=True,

                                          request=self.request)

        return make_url('totp-recovery-display', keep_params=True,

                        request=self.request)

            self.generate_recovery_codes()

    def generate_recovery_codes(self):

        for _ in range(10):

            code = format(SystemRandom().getrandbits(40), '010x')

            RecoveryCode.objects.create(user=self.request.user, code=code)

        request.user.totp_recovery_codes.all().delete()

class RecoveryCodesDisplay(ListView):

    template_name = 'auth_oath/totp_recovery_display.html'

    def get_context_data(self, **kwargs):

        kwargs['next_url'] = get_next_url(self.request.GET)

        return super(RecoveryCodesDisplay, self).get_context_data(**kwargs)

    def get_queryset(self):

        return self.request.user.totp_recovery_codes.all()

recovery_display = RecoveryCodesDisplay.as_view()

class RecoveryFormView(FormView):

    template_name = 'auth_oath/totp_recovery_form.html'

    form_class = RecoveryForm

    def get_success_url(self):

        return get_next_url(self.request.GET)

    def form_valid(self, form):

        code = form.cleaned_data['code']

        try:

            recovery_code = self.request.user.totp_recovery_codes.get(code=code)

        except self.request.user.totp_recovery_codes.model.DoesNotExist:

            form.add_error('code', _('Invalid code.'))

            return self.form_invalid(form)

        recovery_code.delete()

        self.request.session['auth_level'] = get_authenticator_level()

        return super(RecoveryFormView, self).form_valid(form)

recovery = RecoveryFormView.as_view()