1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
|
#
# Copyright (c) 2016 ThoughtWorks, Inc.
#
# Pixelated is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Pixelated is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
import logging
import os
from xml.sax import SAXParseException
from twisted.cred import credentials
from twisted.internet import defer
from twisted.python.filepath import FilePath
from twisted.web import util
from twisted.web.http import UNAUTHORIZED, OK
from twisted.web.resource import IResource, NoResource
from twisted.web.server import NOT_DONE_YET
from twisted.web.static import File
from twisted.web.template import Element, XMLFile, renderElement, renderer
from pixelated.adapter.welcome_mail import add_welcome_mail
from pixelated.resources import BaseResource, UnAuthorizedResource, IPixelatedSession
log = logging.getLogger(__name__)
def _get_startup_folder():
path = os.path.dirname(os.path.abspath(__file__))
return os.path.join(path, '..', 'assets')
def _get_static_folder():
static_folder = os.path.abspath(os.path.join(os.path.abspath(__file__), "..", "..", "..", "web-ui", "app"))
# this is a workaround for packaging
if not os.path.exists(static_folder):
static_folder = os.path.abspath(
os.path.join(os.path.abspath(__file__), "..", "..", "..", "..", "web-ui", "app"))
if not os.path.exists(static_folder):
static_folder = os.path.join('/', 'usr', 'share', 'pixelated-user-agent')
return static_folder
class DisclaimerElement(Element):
loader = XMLFile(FilePath(os.path.join(_get_startup_folder(), '_login_disclaimer_banner.html')))
def __init__(self, banner):
super(DisclaimerElement, self).__init__()
self._set_loader(banner)
self._banner_filename = banner or "_login_disclaimer_banner.html"
def _set_loader(self, banner):
if banner:
current_path = os.path.dirname(os.path.abspath(__file__))
banner_file_path = os.path.join(current_path, "..", "..", "..", banner)
self.loader = XMLFile(FilePath(banner_file_path))
def render(self, request):
try:
return super(DisclaimerElement, self).render(request)
except SAXParseException:
return ["Invalid XML template format for %s." % self._banner_filename]
except IOError:
return ["Disclaimer banner file %s could not be read or does not exit." % self._banner_filename]
class LoginWebSite(Element):
loader = XMLFile(FilePath(os.path.join(_get_startup_folder(), 'login.html')))
def __init__(self, error_msg=None, disclaimer_banner_file=None):
super(LoginWebSite, self).__init__()
self._error_msg = error_msg
self.disclaimer_banner_file = disclaimer_banner_file
@renderer
def error_msg(self, request, tag):
if self._error_msg is not None:
return tag(self._error_msg)
return tag('')
@renderer
def disclaimer(self, request, tag):
return DisclaimerElement(self.disclaimer_banner_file).render(request)
class LoginResource(BaseResource):
BASE_URL = 'login'
def __init__(self, services_factory, portal=None, disclaimer_banner=None):
BaseResource.__init__(self, services_factory)
self._static_folder = _get_static_folder()
self._startup_folder = _get_startup_folder()
self._portal = portal
self._disclaimer_banner = disclaimer_banner
self.putChild('startup-assets', File(self._startup_folder))
def set_portal(self, portal):
self._portal = portal
def getChild(self, path, request):
if path == '':
return self
if path == 'login':
return self
if not self.is_logged_in(request):
return UnAuthorizedResource()
return NoResource()
def render_GET(self, request):
request.setResponseCode(OK)
return self._render_template(request)
def _render_template(self, request, error_msg=None):
site = LoginWebSite(error_msg=error_msg, disclaimer_banner_file=self._disclaimer_banner)
return renderElement(request, site)
def render_POST(self, request):
if self.is_logged_in(request):
return util.redirectTo("/", request)
def render_response(leap_session):
request.setResponseCode(OK)
request.write(open(os.path.join(self._startup_folder, 'Interstitial.html')).read())
request.finish()
self._setup_user_services(leap_session, request)
def render_error(error):
log.info('Login Error for %s' % request.args['username'][0])
log.info('%s' % error)
request.setResponseCode(UNAUTHORIZED)
return self._render_template(request, 'Invalid credentials')
d = self._handle_login(request)
d.addCallbacks(render_response, render_error)
return NOT_DONE_YET
@defer.inlineCallbacks
def _handle_login(self, request):
self.creds = self._get_creds_from(request)
iface, leap_session, logout = yield self._portal.login(self.creds, None, IResource)
defer.returnValue(leap_session)
def _get_creds_from(self, request):
username = request.args['username'][0]
password = request.args['password'][0]
return credentials.UsernamePassword(username, password)
@defer.inlineCallbacks
def _setup_user_services(self, leap_session, request):
user_id = leap_session.user_auth.uuid
if not self._services_factory.is_logged_in(user_id):
yield self._services_factory.create_services_from(leap_session)
self._init_http_session(request, user_id)
@defer.inlineCallbacks
def _initialize_services(self, leap_session):
yield self._services_factory.create_services_from(leap_session)
if leap_session.fresh_account:
yield add_welcome_mail(leap_session.mail_store)
def _init_http_session(self, request, user_id):
session = IPixelatedSession(request.getSession())
session.user_uuid = user_id
|
