mpeltriaux
a12c2fb57e
* adds sso_identifier as new User model attribute * refactors minor code snippets on user-propagation data resolving * adds updating of username based on propagation data * adds sso_identifier on admin backend view
61 lines
1.8 KiB
Python
61 lines
1.8 KiB
Python
"""
|
|
Author: Michel Peltriaux
|
|
Organization: Struktur- und Genehmigungsdirektion Nord, Rhineland-Palatinate, Germany
|
|
Contact: ksp-servicestelle@sgdnord.rlp.de
|
|
Created on: 10.05.24
|
|
|
|
"""
|
|
import base64
|
|
import hashlib
|
|
import json
|
|
|
|
from cryptography.fernet import Fernet
|
|
from django.core.exceptions import ObjectDoesNotExist
|
|
from django.http import HttpRequest, JsonResponse
|
|
from django.utils.decorators import method_decorator
|
|
from django.views import View
|
|
from django.views.decorators.csrf import csrf_exempt
|
|
|
|
from konova.sub_settings.sso_settings import PROPAGATION_SECRET
|
|
from user.models import User
|
|
|
|
|
|
class PropagateUserView(View):
|
|
""" Receives user data to be stored in db
|
|
|
|
Used if new user gets access to application and needs to be created in application before first login (e.g.
|
|
proper rights management)
|
|
|
|
"""
|
|
|
|
@method_decorator(csrf_exempt)
|
|
def dispatch(self, request, *args, **kwargs):
|
|
return super().dispatch(request, *args, **kwargs)
|
|
|
|
def post(self, request: HttpRequest, *args, **kwargs):
|
|
# Decrypt
|
|
encrypted_body = request.body
|
|
_hash = hashlib.md5()
|
|
_hash.update(PROPAGATION_SECRET.encode("utf-8"))
|
|
key = base64.urlsafe_b64encode(_hash.hexdigest().encode("utf-8"))
|
|
fernet = Fernet(key)
|
|
body = fernet.decrypt(encrypted_body).decode("utf-8")
|
|
body = json.loads(body)
|
|
|
|
try:
|
|
status = "updated"
|
|
user = User.resolve_user_using_propagation_data(body)
|
|
user = user.update_user_using_propagation_data(body)
|
|
except ObjectDoesNotExist:
|
|
user = User(**body)
|
|
status = "created"
|
|
user.set_unusable_password()
|
|
user.save()
|
|
|
|
data = {
|
|
"success": True,
|
|
"status": status
|
|
}
|
|
|
|
return JsonResponse(data)
|