0001-ldap-move-messages-from-hard-coded-to-templates-5129.patch

Loïc Dachary, 04 mars 2021 12:31

Voir les différences: en ligne côte à côte

Subject: [PATCH] ldap: move messages from hard coded to templates (#51294)

Fixes: #51294

Licenses: MIT

 src/authentic2/backends/ldap_backend.py | 63 ++++++++++++++-----------
 1 file changed, 35 insertions(+), 28 deletions(-)

     from django.contrib import messages
     from django.contrib.auth import get_user_model
     from django.contrib.auth.models import Group
     from django.template import loader
     from django.utils.encoding import force_bytes, force_text
     from django.utils import six
     from django.utils.six.moves.urllib import parse as urlparse
-...
     def map_text(d):
         if d is None:
         if d is None or callable(d):
             return d
         elif isinstance(d, six.string_types):
             return force_text(d)
-...
         raise NotImplementedError
     def password_policy_control_messages(ctrl):
         messages = []
     def password_policy_control_messages(ctrl, control_messages):
         results = []
         if ctrl.error:
             error = ppolicy.PasswordPolicyError.namedValues[ctrl.error]
             error2message = {
                 'passwordExpired': _('The password expired'),
                 'accountLocked': _('The account is locked.'),
                 'changeAfterReset': _('The password was reset and must be changed.'),
                 'passwordModNotAllowed': _('It is not possible to modify the password.'),
                 'mustSupplyOldPassword': _('The old password must be supplied.'),
                 'insufficientPasswordQuality': _('The password does not meet the quality requirements.'),
                 'passwordTooShort': _('The password is too short.'),
                 'passwordTooYoung': _('It is too soon to change the password.'),
                 'passwordInHistory': _('This password was recently used and cannot be used again.'),
+            }
             messages.append(error2message.get(error, _('Unexpected error {error}').format(error=error)))
             return messages
             if error not in control_messages:
                 results.append(_('Unexpected error {error}').format(error=error))
             else:
                 results.append(control_messages[error]())
             return results
         if ctrl.timeBeforeExpiration:
             timeBeforeExpiration = time.asctime(time.localtime(time.time() + ctrl.timeBeforeExpiration))
             messages.append(_('The password will expire at {timeBeforeExpiration}.').format(
                 timeBeforeExpiration=timeBeforeExpiration))
             expiration_date = time.asctime(time.localtime(time.time() + ctrl.timeBeforeExpiration))
             results.append(control_messages['expiration_date']().format(expiration_date=expiration_date))
         if ctrl.graceAuthNsRemaining:
             messages.append(ngettext(
                 'This password expired: this is the last time it can be used.',
                 'This password expired and can only be used {graceAuthNsRemaining} times, including this one.',
                 ctrl.graceAuthNsRemaining).format(graceAuthNsRemaining=ctrl.graceAuthNsRemaining))
         return messages
             results.append(control_messages['graceAuthNsRemaining'](ctrl.graceAuthNsRemaining).format(
                 graceAuthNsRemaining=ctrl.graceAuthNsRemaining))
         return results
     class LDAPUser(User):
         SESSION_LDAP_DATA_KEY = 'ldap-data'
-...
             'user_attributes': [],
             # https://www.python-ldap.org/en/python-ldap-3.3.0/reference/ldap.html#ldap-controls
             'use_controls': True,
             'ppolicy_messages': {
                 'passwordExpired': lambda *args: _('The password expired'),
                 'accountLocked': lambda *args: _('The account is locked.'),
                 'changeAfterReset': lambda *args: _('The password was reset and must be changed.'),
                 'passwordModNotAllowed': lambda *args: _('It is not possible to modify the password.'),
                 'mustSupplyOldPassword': lambda *args: _('The old password must be supplied.'),
                 'insufficientPasswordQuality': lambda *args: _('The password does not meet the quality requirements.'),
                 'passwordTooShort': lambda *args: _('The password is too short.'),
                 'passwordTooYoung': lambda *args: _('It is too soon to change the password.'),
                 'passwordInHistory': lambda *args: _('This password was recently used and cannot be used again.'),
                 'expiration_date': lambda *args: _('The password will expire at {expiration_date}.'),
                 'graceAuthNsRemaining': lambda *args: ngettext(
                     'This password expired: this is the last time it can be used.',
                     'This password expired and can only be used {graceAuthNsRemaining} times, including this one.',
                     *args),
             },
+        }
         _REQUIRED = ('url', 'basedn')
         _TO_ITERABLE = ('url', 'groupsu', 'groupstaff', 'groupactive')
-...
             return blocks
         @staticmethod
         def process_controls(request, authz_id, ctrls):
         def process_controls(request, authz_id, ctrls, block):
             for c in ctrls:
                 if c.controlType == ppolicy.PasswordPolicyControl.controlType:
                     message = ' '.join(password_policy_control_messages(c))
                     message = ' '.join(password_policy_control_messages(c, block['ppolicy_messages']))
                     if request is not None:
                         messages.add_message(request, messages.WARNING, message)
                 else:
-...
                                 else:
                                     serverctrls = []
                                 results = conn.simple_bind_s(authz_id, password, serverctrls=serverctrls)
                                 self.process_controls(request, authz_id, results[3])
                                 self.process_controls(request, authz_id, results[3], block)
                                 user_login_success(authz_id)
                                 if not block['connect_with_user_credentials']:
                                     try:
-...
                                 break
                             except ldap.INVALID_CREDENTIALS as e:
                                 if block.get('use_controls') and len(e.args) > 0 and 'ctrls' in e.args[0]:
                                     self.process_controls(request, authz_id, DecodeControlTuples(e.args[0]['ctrls']))
                                     self.process_controls(request, authz_id,
                                                           DecodeControlTuples(e.args[0]['ctrls']), block)
                                 user_login_failure(authz_id)
                                 pass
                         else:
+    -

Projet

Général

Profil

Produits Entr'ouvert » Authentic 2

0001-ldap-move-messages-from-hard-coded-to-templates-5129.patch