mirror of
https://github.com/simple-login/app.git
synced 2024-11-14 08:01:13 +01:00
c2bb6488e4
* Allow to login with proton to enter sudo mode * Updated wording * lint * Only enabled if the user has the account linked * Add exit-sudo route for tests Co-authored-by: Adrià Casajús <adria.casajus@proton.ch>
69 lines
2.2 KiB
Python
69 lines
2.2 KiB
Python
from functools import wraps
|
|
from time import time
|
|
|
|
from flask import render_template, flash, redirect, url_for, session, request
|
|
from flask_login import login_required, current_user
|
|
from flask_wtf import FlaskForm
|
|
from wtforms import PasswordField, validators
|
|
|
|
from app.dashboard.base import dashboard_bp
|
|
from app.log import LOG
|
|
from app.models import PartnerUser
|
|
from app.proton.utils import is_connect_with_proton_enabled, get_proton_partner
|
|
from app.utils import sanitize_next_url
|
|
|
|
_SUDO_GAP = 900
|
|
|
|
|
|
class LoginForm(FlaskForm):
|
|
password = PasswordField("Password", validators=[validators.DataRequired()])
|
|
|
|
|
|
@dashboard_bp.route("/enter_sudo", methods=["GET", "POST"])
|
|
@login_required
|
|
def enter_sudo():
|
|
password_check_form = LoginForm()
|
|
|
|
if password_check_form.validate_on_submit():
|
|
password = password_check_form.password.data
|
|
|
|
if current_user.check_password(password):
|
|
session["sudo_time"] = int(time())
|
|
|
|
# User comes to sudo page from another page
|
|
next_url = sanitize_next_url(request.args.get("next"))
|
|
if next_url:
|
|
LOG.d("redirect user to %s", next_url)
|
|
return redirect(next_url)
|
|
else:
|
|
LOG.d("redirect user to dashboard")
|
|
return redirect(url_for("dashboard.index"))
|
|
else:
|
|
flash("Incorrect password", "warning")
|
|
|
|
proton_enabled = is_connect_with_proton_enabled()
|
|
if proton_enabled:
|
|
# Only for users that have the account linked
|
|
partner_user = PartnerUser.get_by(user_id=current_user.id)
|
|
if not partner_user or partner_user.partner_id != get_proton_partner().id:
|
|
proton_enabled = False
|
|
|
|
return render_template(
|
|
"dashboard/enter_sudo.html",
|
|
password_check_form=password_check_form,
|
|
next=request.args.get("next"),
|
|
connect_with_proton=proton_enabled,
|
|
)
|
|
|
|
|
|
def sudo_required(f):
|
|
@wraps(f)
|
|
def wrap(*args, **kwargs):
|
|
if (
|
|
"sudo_time" not in session
|
|
or (time() - int(session["sudo_time"])) > _SUDO_GAP
|
|
):
|
|
return redirect(url_for("dashboard.enter_sudo", next=request.path))
|
|
return f(*args, **kwargs)
|
|
|
|
return wrap
|