UdoChudo
52e31864b3
- Implemented the initial version of the web interface. refactor: Begin Telegram bot refactoring - Started restructuring the bot’s code for better maintainability. chore: Migrate to Flask project structure - Reorganized the application to follow Flask's project structure. cleanup: Extensive code cleanup - Removed redundant code and improved readability. Signed-off-by: UdoChudo <stream@udochudo.ru>
54 lines
2.0 KiB
Python
54 lines
2.0 KiB
Python
|
|
from flask import current_app
|
|
from flask_ldap3_login import LDAP3LoginManager, AuthenticationResponseStatus
|
|
from werkzeug.middleware.proxy_fix import ProxyFix
|
|
import config
|
|
|
|
def init_ldap(app):
|
|
app.config['LDAP_HOST'] = config.LDAP_HOST
|
|
app.config['LDAP_PORT'] = config.LDAP_PORT
|
|
app.config['LDAP_USE_SSL'] = config.LDAP_USE_SSL
|
|
app.config['LDAP_BASE_DN'] = config.LDAP_BASE_DN
|
|
app.config['LDAP_BIND_DIRECT_CREDENTIALS'] = False
|
|
app.config['LDAP_BIND_USER_DN'] = config.LDAP_BIND_USER_DN
|
|
app.config['LDAP_BIND_USER_PASSWORD'] = config.LDAP_USER_PASSWORD
|
|
app.config['LDAP_USER_DN'] = config.LDAP_USER_DN
|
|
app.config['LDAP_USER_PASSWORD'] = config.LDAP_USER_PASSWORD
|
|
app.config['LDAP_USER_OBJECT_FILTER'] = config.LDAP_USER_OBJECT_FILTER
|
|
app.config['LDAP_USER_LOGIN_ATTR'] = config.LDAP_USER_LOGIN_ATTR
|
|
app.config['LDAP_USER_SEARCH_SCOPE'] = config.LDAP_USER_SEARCH_SCOPE
|
|
app.config['LDAP_SCHEMA'] = config.LDAP_SCHEMA
|
|
|
|
ldap_manager = LDAP3LoginManager(app)
|
|
app.extensions['ldap3_login'] = ldap_manager
|
|
ldap_manager.init_app(app)
|
|
app.wsgi_app = ProxyFix(app.wsgi_app, x_proto=1)
|
|
|
|
def authenticate_user(username, password):
|
|
ldap_manager = current_app.extensions['ldap3_login']
|
|
response = ldap_manager.authenticate(username, password)
|
|
if response.status == AuthenticationResponseStatus.success:
|
|
return True, response.user_info, None
|
|
elif response.status == AuthenticationResponseStatus.fail:
|
|
return False, None, "Invalid username or password."
|
|
else:
|
|
return False, None, f"LDAP Error: {response.status}"
|
|
|
|
def parse_ldap_user(user_info):
|
|
def get(attr):
|
|
value = user_info.get(attr)
|
|
if isinstance(value, list) and value:
|
|
return str(value[0])
|
|
elif value:
|
|
return str(value)
|
|
else:
|
|
return None
|
|
|
|
return {
|
|
'sam_account_name': get("sAMAccountName"),
|
|
'email': get("mail"),
|
|
'user_name': get("givenName"),
|
|
'user_middle_name': get("middleName"),
|
|
'user_surname': get("sn"),
|
|
}
|