Produits Entr'ouvert » Authentic 2

from ldap.filter import filter_format

from ldap.ldapobject import ReconnectLDAPObject as NativeLDAPObject

from authentic2.a2_rbac.models import OrganizationalUnit, Role

from authentic2.a2_rbac.utils import get_default_ou

from authentic2.backends import is_user_authenticable

from authentic2.middleware import StoreRequestMiddleware

from authentic2.models import UserExternalId

from authentic2.user_login_failure import user_login_failure, user_login_success

from authentic2.utils.misc import PasswordChangeError, to_list

# code originaly copied from by now merely inspired by

from django.contrib import messages

from django.contrib.auth import get_user_model

from django.contrib.contenttypes.models import ContentType

from django.core.exceptions import PermissionDenied, ValidationError

from django.core.paginator import EmptyPage, Paginator

from django.db import transaction

from authentic2.a2_rbac.utils import get_default_ou

from authentic2.apps.journal.views import JournalViewWithContext

from authentic2.forms.profile import modelform_factory

from authentic2.utils.misc import redirect

from . import forms, resources, tables, views

        field_id = self.kwargs.get('field_id', self.request.GET.get('field_id', None))

        try:

            raise Http404('Invalid or expired signature.')

        search_term = request.GET.get('term', '')

import pickle

from django.contrib.messages.views import SuccessMessageMixin

from django.core.exceptions import PermissionDenied, ValidationError

from django.db import transaction

from django.forms import MediaDefiningClass

from authentic2.data_transfer import ImportContext, export_site, import_site

from authentic2.decorators import json as json_view

from authentic2.forms.profile import modelform_factory

from authentic2.utils.misc import batch_queryset, redirect

from . import app_settings, forms, utils, widgets

            raise Http404('Invalid user')

        field_data = self.kwargs.get('field_id', self.request.GET.get('field_id', None))

        try:

            raise Http404('Invalid or expired signature.')

        widget_class = field_data.get('class')

        if not widget_class or not hasattr(widgets, widget_class):

import pickle

from django.contrib.auth import get_user_model

from django.utils.encoding import force_text

from django_select2.forms import ModelSelect2MultipleWidget, ModelSelect2Widget

from authentic2.a2_rbac.models import Role

from authentic2_idp_oidc.models import OIDCAuthorization

from . import utils

            'class': self.__class__.__name__,

            'where_clause': force_text(base64.b64encode(pickle.dumps(self.queryset.query.where))),

        }

        return attrs

    @classmethod

from model_utils.managers import QueryManager

from authentic2.a2_rbac.models import Role

# install our natural_key implementation

from . import managers

from django.contrib.auth import authenticate as dj_authenticate

from django.contrib.auth import get_user_model

from django.contrib.auth import login as auth_login

from django.core.exceptions import FieldDoesNotExist, ImproperlyConfigured

from django.core.mail import EmailMessage, send_mail

from django.forms.utils import ErrorList, to_current_timezone

from django.utils.translation import ungettext

from authentic2.saml.saml2utils import filter_attribute_private_key, filter_element_private_key

from .service import set_service_ref

def build_deletion_url(request, **kwargs):

    data = kwargs.copy()

    data['user_pk'] = request.user.pk

    delete_url = request.build_absolute_uri(

        reverse('validate_deletion', kwargs={'deletion_token': deletion_token})

    )

        legacy_body_templates = None

    # build verify email URL containing a signed token

        {

            'email': email,

            'user_pk': user.pk,

from django.contrib.auth import logout as auth_logout

from django.contrib.auth.decorators import login_required

from django.contrib.auth.views import PasswordChangeView as DjPasswordChangeView

from django.core.exceptions import ValidationError

from django.db.models.fields import FieldDoesNotExist

from django.db.models.query import Q

from .forms import passwords as passwords_forms

from .forms import profile as profile_forms

from .forms import registration as registration_forms

from .utils import misc as utils_misc

from .utils import switch_user as utils_switch_user

from .utils.evaluate import make_condition_context

    def get(self, request, *args, **kwargs):

        if 'token' in request.GET:

            try:

                    request.GET['token'], max_age=app_settings.A2_EMAIL_CHANGE_TOKEN_LIFETIME

                )

                user_pk = token['user_pk']

                    old_email=old_email,

                    new_email=user.email,

                )

                messages.error(request, _('your request for changing your email is too old, try again'))

                messages.error(request, _('your request for changing your email is invalid, try again'))

            except ValueError:

                messages.error(

        # load pre-filled values

        if request.GET.get('token'):

            try:

                    request.GET.get('token'), max_age=settings.ACCOUNT_ACTIVATION_DAYS * 3600 * 24

                )

                logger.warning('registration_view: invalid token: %s', e)

                return HttpResponseBadRequest('invalid token', content_type='text/plain')

            if 'ou' in self.token:

    def dispatch(self, request, *args, **kwargs):

        try:

                kwargs['deletion_token'], max_age=app_settings.A2_DELETION_REQUEST_LIFETIME

            )

            user_pk = deletion_token['user_pk']

            if not self.user.is_active:

                raise ValidationError(_('This account is inactive, it cannot be deleted.'))

            logger.info('user %s confirmed the deletion of their own account', self.user)

            error = _('The account deletion request is too old, try again')

            error = _('The account deletion request is invalid, try again')

        except ValueError:

            error = _('The account deletion request was not on this site, try again')

from authentic2 import constants, hooks

from authentic2 import models as a2_models

from authentic2.a2_rbac.utils import get_default_ou

from authentic2.forms.passwords import SetPasswordForm

from authentic2.utils import misc as utils_misc

from authentic2.utils import views as utils_views

from authentic2.utils.models import safe_get_or_create

from authentic2.utils.service import get_service_from_ref, get_service_from_request, service_ref

from authentic2 import app_settings, hooks

from authentic2.a2_rbac.models import OrganizationalUnit

from authentic2.utils.template import Template

from . import models, utils

from django.conf import settings

from django.contrib import messages

from django.contrib.auth import REDIRECT_FIELD_NAME

from django.http import HttpResponseBadRequest

from django.urls import reverse

from django.utils.translation import get_language

from django.views.generic.base import View

from authentic2.decorators import setting_enabled

from authentic2.utils.misc import authenticate, good_next_url, login, redirect

from . import app_settings, models

        'scope': ' '.join(scopes),

        'response_type': 'code',

        'redirect_uri': request.build_absolute_uri(reverse('oidc-login-callback')),

        'nonce': nonce,

    }

    if provider.claims_parameter_supported:

        if not raw_state:

            return redirect(request, settings.LOGIN_REDIRECT_URL)

        try:

            return redirect(request, settings.LOGIN_REDIRECT_URL)

        state = state_content['state_id']

from jwcrypto.jwk import JWK, InvalidJWKValue, JWKSet

from jwcrypto.jwt import JWT

from authentic2.attributes_ng.engine import get_attributes

from authentic2.decorators import GlobalCache

from authentic2.utils.template import Template

from . import app_settings

from ldap.dn import escape_dn_chars

from ldaptools.slapd import Slapd, has_slapd

from authentic2.a2_rbac.models import OrganizationalUnit, Role

from authentic2.a2_rbac.utils import get_default_ou

from authentic2.backends import ldap_backend

from authentic2.models import Service

from authentic2.utils.misc import PasswordChangeError, authenticate

from . import utils