4915205678
* core: start migrating to flows for authorisation * sources/oauth: start type-hinting * core: create default user * core: only show user delete button if an unenrollment flow exists * flows: Correctly check initial policies on flow with context * policies: add more verbosity to engine * sources/oauth: migrate to flows * sources/oauth: fix typing errors * flows: add more tests * sources/oauth: start implementing unittests * sources/ldap: add option to disable user sync, move connection init to model * sources/ldap: re-add default PropertyMappings * providers/saml: re-add default PropertyMappings * admin: fix missing stage count * stages/identification: fix sources not being shown * crypto: fix being unable to save with private key * crypto: re-add default self-signed keypair * policies: rewrite cache_key to prevent wrong cache * sources/saml: migrate to flows for auth and enrollment * stages/consent: add new stage * admin: fix PropertyMapping widget not rendering properly * core: provider.authorization_flow is mandatory * flows: add support for "autosubmit" attribute on form * flows: add InMemoryStage for dynamic stages * flows: optionally allow empty flows from FlowPlanner * providers/saml: update to authorization_flow * sources/*: fix flow executor URL * flows: fix pylint error * flows: wrap responses in JSON object to easily handle redirects * flow: dont cache plan's context * providers/oauth: rewrite OAuth2 Provider to use flows * providers/*: update docstrings of models * core: fix forms not passing help_text through safe * flows: fix HttpResponses not being converted to JSON * providers/oidc: rewrite to use flows * flows: fix linting
87 lines
2.9 KiB
Python
87 lines
2.9 KiB
Python
"""passbook pretend GitHub Views"""
|
|
from django.core.exceptions import PermissionDenied
|
|
from django.http import HttpRequest, HttpResponse, JsonResponse
|
|
from django.shortcuts import get_object_or_404
|
|
from django.views import View
|
|
from oauth2_provider.models import AccessToken
|
|
|
|
from passbook.core.models import User
|
|
|
|
|
|
class GitHubPretendView(View):
|
|
"""Emulate GitHub's API Endpoints"""
|
|
|
|
def verify_access_token(self) -> User:
|
|
"""Verify access token manually since github uses /user?access_token=..."""
|
|
if "HTTP_AUTHORIZATION" in self.request.META:
|
|
full_token = self.request.META.get("HTTP_AUTHORIZATION")
|
|
_, token = full_token.split(" ")
|
|
elif "access_token" in self.request.GET:
|
|
token = self.request.GET.get("access_token", "")
|
|
else:
|
|
raise PermissionDenied("No access token passed.")
|
|
return get_object_or_404(AccessToken, token=token).user
|
|
|
|
|
|
class GitHubUserView(GitHubPretendView):
|
|
"""Emulate GitHub's /user API Endpoint"""
|
|
|
|
def get(self, request: HttpRequest) -> HttpResponse:
|
|
"""Emulate GitHub's /user API Endpoint"""
|
|
user = self.verify_access_token()
|
|
return JsonResponse(
|
|
{
|
|
"login": user.username,
|
|
"id": user.pk,
|
|
"node_id": "",
|
|
"avatar_url": "",
|
|
"gravatar_id": "",
|
|
"url": "",
|
|
"html_url": "",
|
|
"followers_url": "",
|
|
"following_url": "",
|
|
"gists_url": "",
|
|
"starred_url": "",
|
|
"subscriptions_url": "",
|
|
"organizations_url": "",
|
|
"repos_url": "",
|
|
"events_url": "",
|
|
"received_events_url": "",
|
|
"type": "User",
|
|
"site_admin": False,
|
|
"name": user.name,
|
|
"company": "",
|
|
"blog": "",
|
|
"location": "",
|
|
"email": user.email,
|
|
"hireable": False,
|
|
"bio": "",
|
|
"public_repos": 0,
|
|
"public_gists": 0,
|
|
"followers": 0,
|
|
"following": 0,
|
|
"created_at": user.date_joined,
|
|
"updated_at": user.date_joined,
|
|
"private_gists": 0,
|
|
"total_private_repos": 0,
|
|
"owned_private_repos": 0,
|
|
"disk_usage": 0,
|
|
"collaborators": 0,
|
|
"two_factor_authentication": True,
|
|
"plan": {
|
|
"name": "None",
|
|
"space": 0,
|
|
"private_repos": 0,
|
|
"collaborators": 0,
|
|
},
|
|
}
|
|
)
|
|
|
|
|
|
class GitHubUserTeamsView(GitHubPretendView):
|
|
"""Emulate GitHub's /user/teams API Endpoint"""
|
|
|
|
def get(self, request: HttpRequest) -> HttpResponse:
|
|
"""Emulate GitHub's /user/teams API Endpoint"""
|
|
return JsonResponse([], safe=False)
|