Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
erp5
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Ludovic Kiefer
erp5
Commits
e3935374
Commit
e3935374
authored
Jul 06, 2012
by
Łukasz Nowak
Committed by
Rafael Monnerat
Sep 17, 2012
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Generalise in order to support more backends.
parent
713dbac5
Changes
22
Hide whitespace changes
Inline
Side-by-side
Showing
22 changed files
with
76 additions
and
74 deletions
+76
-74
bt5/erp5_credential_facebook/bt/change_log
bt5/erp5_credential_facebook/bt/change_log
+0
-2
bt5/erp5_credential_facebook/bt/description
bt5/erp5_credential_facebook/bt/description
+0
-1
bt5/erp5_credential_facebook/bt/revision
bt5/erp5_credential_facebook/bt/revision
+0
-1
bt5/erp5_credential_facebook/bt/template_path_list
bt5/erp5_credential_facebook/bt/template_path_list
+0
-2
bt5/erp5_credential_facebook/bt/template_skin_id_list
bt5/erp5_credential_facebook/bt/template_skin_id_list
+0
-1
bt5/erp5_credential_facebook/bt/title
bt5/erp5_credential_facebook/bt/title
+0
-1
bt5/erp5_credential_oauth2/PathTemplateItem/portal_caches/extrenal_oauth2_token_cache_factory.xml
...tem/portal_caches/extrenal_oauth2_token_cache_factory.xml
+1
-1
bt5/erp5_credential_oauth2/PathTemplateItem/portal_caches/extrenal_oauth2_token_cache_factory/volatile_cache_plugin.xml
...enal_oauth2_token_cache_factory/volatile_cache_plugin.xml
+0
-0
bt5/erp5_credential_oauth2/SkinTemplateItem/portal_skins/erp5_credential_oauth2.xml
.../SkinTemplateItem/portal_skins/erp5_credential_oauth2.xml
+1
-1
bt5/erp5_credential_oauth2/SkinTemplateItem/portal_skins/erp5_credential_oauth2/Base_createOauth2User.xml
...al_skins/erp5_credential_oauth2/Base_createOauth2User.xml
+1
-1
bt5/erp5_credential_oauth2/bt/change_log
bt5/erp5_credential_oauth2/bt/change_log
+5
-0
bt5/erp5_credential_oauth2/bt/copyright_list
bt5/erp5_credential_oauth2/bt/copyright_list
+0
-0
bt5/erp5_credential_oauth2/bt/description
bt5/erp5_credential_oauth2/bt/description
+1
-0
bt5/erp5_credential_oauth2/bt/license
bt5/erp5_credential_oauth2/bt/license
+0
-0
bt5/erp5_credential_oauth2/bt/revision
bt5/erp5_credential_oauth2/bt/revision
+1
-0
bt5/erp5_credential_oauth2/bt/template_format_version
bt5/erp5_credential_oauth2/bt/template_format_version
+0
-0
bt5/erp5_credential_oauth2/bt/template_path_list
bt5/erp5_credential_oauth2/bt/template_path_list
+2
-0
bt5/erp5_credential_oauth2/bt/template_skin_id_list
bt5/erp5_credential_oauth2/bt/template_skin_id_list
+1
-0
bt5/erp5_credential_oauth2/bt/title
bt5/erp5_credential_oauth2/bt/title
+1
-0
bt5/erp5_credential_oauth2/bt/version
bt5/erp5_credential_oauth2/bt/version
+0
-0
product/ERP5Security/ERP5ExternalOauth2ExtractionPlugin.py
product/ERP5Security/ERP5ExternalOauth2ExtractionPlugin.py
+57
-58
product/ERP5Security/__init__.py
product/ERP5Security/__init__.py
+5
-5
No files found.
bt5/erp5_credential_facebook/bt/change_log
deleted
100644 → 0
View file @
713dbac5
2012/07/04 Łukasz Nowak
* Initial version
\ No newline at end of file
bt5/erp5_credential_facebook/bt/description
deleted
100644 → 0
View file @
713dbac5
Facebook based credential system.
\ No newline at end of file
bt5/erp5_credential_facebook/bt/revision
deleted
100644 → 0
View file @
713dbac5
1
\ No newline at end of file
bt5/erp5_credential_facebook/bt/template_path_list
deleted
100644 → 0
View file @
713dbac5
portal_caches/facebook_token_cache_factory
portal_caches/facebook_token_cache_factory/volatile_cache_plugin
\ No newline at end of file
bt5/erp5_credential_facebook/bt/template_skin_id_list
deleted
100644 → 0
View file @
713dbac5
erp5_credential_facebook
\ No newline at end of file
bt5/erp5_credential_facebook/bt/title
deleted
100644 → 0
View file @
713dbac5
erp5_credential_facebook
\ No newline at end of file
bt5/erp5_credential_
facebook/PathTemplateItem/portal_caches/facebook
_token_cache_factory.xml
→
bt5/erp5_credential_
oauth2/PathTemplateItem/portal_caches/extrenal_oauth2
_token_cache_factory.xml
View file @
e3935374
...
...
@@ -36,7 +36,7 @@
</item>
<item>
<key>
<string>
id
</string>
</key>
<value>
<string>
facebook
_token_cache_factory
</string>
</value>
<value>
<string>
extrenal_oauth2
_token_cache_factory
</string>
</value>
</item>
<item>
<key>
<string>
portal_type
</string>
</key>
...
...
bt5/erp5_credential_
facebook/PathTemplateItem/portal_caches/facebook
_token_cache_factory/volatile_cache_plugin.xml
→
bt5/erp5_credential_
oauth2/PathTemplateItem/portal_caches/extrenal_oauth2
_token_cache_factory/volatile_cache_plugin.xml
View file @
e3935374
File moved
bt5/erp5_credential_
facebook/SkinTemplateItem/portal_skins/erp5_credential_facebook
.xml
→
bt5/erp5_credential_
oauth2/SkinTemplateItem/portal_skins/erp5_credential_oauth2
.xml
View file @
e3935374
...
...
@@ -14,7 +14,7 @@
</item>
<item>
<key>
<string>
id
</string>
</key>
<value>
<string>
erp5_credential_
facebook
</string>
</value>
<value>
<string>
erp5_credential_
oauth2
</string>
</value>
</item>
<item>
<key>
<string>
title
</string>
</key>
...
...
bt5/erp5_credential_
facebook/SkinTemplateItem/portal_skins/erp5_credential_facebook/Base_createFacebook
User.xml
→
bt5/erp5_credential_
oauth2/SkinTemplateItem/portal_skins/erp5_credential_oauth2/Base_createOauth2
User.xml
View file @
e3935374
...
...
@@ -59,7 +59,7 @@
</item>
<item>
<key>
<string>
id
</string>
</key>
<value>
<string>
Base_create
Facebook
User
</string>
</value>
<value>
<string>
Base_create
Oauth2
User
</string>
</value>
</item>
</dictionary>
</pickle>
...
...
bt5/erp5_credential_oauth2/bt/change_log
0 → 100644
View file @
e3935374
2012/07/05 Łukasz Nowak
* renamed from erp5_credential_facebook
2012/07/04 Łukasz Nowak
* Initial version
\ No newline at end of file
bt5/erp5_credential_
facebook
/bt/copyright_list
→
bt5/erp5_credential_
oauth2
/bt/copyright_list
View file @
e3935374
File moved
bt5/erp5_credential_oauth2/bt/description
0 → 100644
View file @
e3935374
Oauth2 based credential system with user profiles in pluggable form.
\ No newline at end of file
bt5/erp5_credential_
facebook
/bt/license
→
bt5/erp5_credential_
oauth2
/bt/license
View file @
e3935374
File moved
bt5/erp5_credential_oauth2/bt/revision
0 → 100644
View file @
e3935374
3
\ No newline at end of file
bt5/erp5_credential_
facebook
/bt/template_format_version
→
bt5/erp5_credential_
oauth2
/bt/template_format_version
View file @
e3935374
File moved
bt5/erp5_credential_oauth2/bt/template_path_list
0 → 100644
View file @
e3935374
portal_caches/extrenal_oauth2_token_cache_factory
portal_caches/extrenal_oauth2_token_cache_factory/volatile_cache_plugin
\ No newline at end of file
bt5/erp5_credential_oauth2/bt/template_skin_id_list
0 → 100644
View file @
e3935374
erp5_credential_oauth2
\ No newline at end of file
bt5/erp5_credential_oauth2/bt/title
0 → 100644
View file @
e3935374
erp5_credential_oauth2
\ No newline at end of file
bt5/erp5_credential_
facebook
/bt/version
→
bt5/erp5_credential_
oauth2
/bt/version
View file @
e3935374
File moved
product/ERP5Security/ERP5
Facebook
ExtractionPlugin.py
→
product/ERP5Security/ERP5
ExternalOauth2
ExtractionPlugin.py
View file @
e3935374
...
...
@@ -65,15 +65,9 @@ def addERP5FacebookExtractionPlugin(dispatcher, id, title=None, REQUEST=None):
'ERP5FacebookExtractionPlugin+added.'
%
dispatcher
.
absolute_url
())
class
ERP5FacebookExtractionPlugin
(
BasePlugin
):
"""
Plugin to authenicate as machines.
"""
class
ERP5ExternalOauth2ExtractionPlugin
:
meta_type
=
"ERP5 Facebook Extraction Plugin"
# cache_fatory_name proposal to begin configurable
cache_factory_name
=
'facebook_token_cache_factory'
reference_prefix
=
'fb_'
cache_factory_name
=
'extrenal_oauth2_token_cache_factory'
security
=
ClassSecurityInfo
()
def
__init__
(
self
,
id
,
title
=
None
):
...
...
@@ -100,14 +94,14 @@ class ERP5FacebookExtractionPlugin(BasePlugin):
raise
KeyError
return
cache_factory
def
set
Facebook
Token
(
self
,
key
,
body
):
def
setToken
(
self
,
key
,
body
):
cache_factory
=
self
.
_getCacheFactory
()
cache_duration
=
cache_factory
.
cache_duration
for
cache_plugin
in
cache_factory
.
getCachePluginList
():
cache_plugin
.
set
(
key
,
DEFAULT_CACHE_SCOPE
,
body
,
cache_duration
=
cache_duration
)
def
get
Facebook
Token
(
self
,
key
):
def
getToken
(
self
,
key
):
cache_factory
=
self
.
_getCacheFactory
()
for
cache_plugin
in
cache_factory
.
getCachePluginList
():
cache_entry
=
cache_plugin
.
get
(
key
,
DEFAULT_CACHE_SCOPE
)
...
...
@@ -115,55 +109,25 @@ class ERP5FacebookExtractionPlugin(BasePlugin):
return
cache_entry
.
getValue
()
raise
KeyError
(
'Key %r not found'
%
key
)
def
getFacebookEntry
(
self
,
token
):
timeout
=
socket
.
getdefaulttimeout
()
try
:
# require really fast interaction
socket
.
setdefaulttimeout
(
5
)
facebook_entry
=
facebook
.
GraphAPI
(
token
).
get_object
(
"me"
)
except
Exception
:
facebook_entry
=
None
finally
:
socket
.
setdefaulttimeout
(
timeout
)
user_entry
=
{}
if
facebook_entry
is
not
None
:
# sanitise value
try
:
for
k
in
(
'first_name'
,
'last_name'
,
'id'
,
'email'
):
if
k
==
'id'
:
user_entry
[
'reference'
]
=
self
.
reference_prefix
+
facebook_entry
[
k
].
encode
(
'utf-8'
)
else
:
user_entry
[
k
]
=
facebook_entry
[
k
].
encode
(
'utf-8'
)
except
KeyError
:
user_entry
=
None
return
user_entry
####################################
#ILoginPasswordHostExtractionPlugin#
####################################
security
.
declarePrivate
(
'extractCredentials'
)
def
extractCredentials
(
self
,
request
):
""" Extract facebook credentials from the request header. """
Base_createFacebookUser
=
getattr
(
self
.
getPortalObject
(),
'Base_createFacebookUser'
,
None
)
if
facebook
is
None
or
Base_createFacebookUser
is
None
:
# no facebook library available or not configured
if
facebook
is
None
:
LOG
(
'ERP5FacebookExtractionPlugin'
,
INFO
,
'No facebook module available, disabled authentication.'
)
if
Base_createFacebookUser
is
None
:
LOG
(
'ERP5FacebookExtractionPlugin'
,
INFO
,
'No Base_createFacebookUser script available, install '
'erp5_credential_facebook, disabled authentication.'
)
""" Extract Oauth2 credentials from the request header. """
Base_createOauth2User
=
getattr
(
self
.
getPortalObject
(),
'Base_createOauth2User'
,
None
)
if
Base_createOauth2User
is
None
:
LOG
(
'ERP5ExternalOauth2ExtractionPlugin'
,
INFO
,
'No Base_createOauth2User script available, install '
'erp5_credential_oauth2, disabled authentication.'
)
return
DumbHTTPExtractor
().
extractCredentials
(
request
)
creds
=
{}
token
=
None
if
request
.
_auth
is
not
None
:
# 1st - try to fetch from Authorization header
if
'facebook'
in
request
.
_auth
.
lower
():
if
self
.
header_string
in
request
.
_auth
.
lower
():
l
=
request
.
_auth
.
split
()
if
len
(
l
)
==
2
:
token
=
l
[
1
]
...
...
@@ -172,15 +136,16 @@ class ERP5FacebookExtractionPlugin(BasePlugin):
# no token
return
DumbHTTPExtractor
().
extractCredentials
(
request
)
# token is available
user
=
None
facebook
_entry
=
None
user
_entry
=
None
try
:
user
=
self
.
get
FacebookToken
(
token
)
user
=
self
.
get
Token
(
self
.
prefix
+
token
)
except
KeyError
:
facebook_entry
=
self
.
getFacebook
Entry
(
token
)
if
facebook
_entry
is
not
None
:
user
=
facebook
_entry
[
'reference'
]
user_entry
=
self
.
getUser
Entry
(
token
)
if
user
_entry
is
not
None
:
user
=
user
_entry
[
'reference'
]
if
user
is
None
:
# fallback to default way
...
...
@@ -199,18 +164,18 @@ class ERP5FacebookExtractionPlugin(BasePlugin):
newSecurityManager
(
self
,
self
.
getUser
(
SUPER_USER
))
try
:
self
.
REQUEST
[
'USER_CREATION_IN_PROGRESS'
]
=
user
if
facebook
_entry
is
None
:
facebook_entry
=
self
.
getFacebook
Entry
(
token
)
if
user
_entry
is
None
:
user_entry
=
self
.
getUser
Entry
(
token
)
try
:
self
.
Base_create
FacebookUser
(
tag
,
**
facebook
_entry
)
self
.
Base_create
Oauth2User
(
tag
,
**
user
_entry
)
except
Exception
:
LOG
(
'ERP5
Facebook
ExtractionPlugin'
,
ERROR
,
LOG
(
'ERP5
ExternalOauth2
ExtractionPlugin'
,
ERROR
,
'Issue while calling creation script:'
,
error
=
True
)
raise
finally
:
setSecurityManager
(
sm
)
try
:
self
.
set
FacebookToken
(
token
,
user
)
self
.
set
Token
(
self
.
prefix
+
token
,
user
)
except
KeyError
:
# allow to work w/o cache
pass
...
...
@@ -222,6 +187,40 @@ class ERP5FacebookExtractionPlugin(BasePlugin):
creds
[
'remote_address'
]
=
request
.
get
(
'REMOTE_ADDR'
,
''
)
return
creds
class
ERP5FacebookExtractionPlugin
(
ERP5ExternalOauth2ExtractionPlugin
,
BasePlugin
):
"""
Plugin to authenicate as machines.
"""
meta_type
=
"ERP5 Facebook Extraction Plugin"
prefix
=
'fb_'
header_string
=
'facebook'
def
getUserEntry
(
self
,
token
):
timeout
=
socket
.
getdefaulttimeout
()
try
:
# require really fast interaction
socket
.
setdefaulttimeout
(
5
)
facebook_entry
=
facebook
.
GraphAPI
(
token
).
get_object
(
"me"
)
except
Exception
:
facebook_entry
=
None
finally
:
socket
.
setdefaulttimeout
(
timeout
)
user_entry
=
{}
if
facebook_entry
is
not
None
:
# sanitise value
try
:
for
k
in
(
'first_name'
,
'last_name'
,
'id'
,
'email'
):
if
k
==
'id'
:
user_entry
[
'reference'
]
=
self
.
prefix
+
facebook_entry
[
k
].
encode
(
'utf-8'
)
else
:
user_entry
[
k
]
=
facebook_entry
[
k
].
encode
(
'utf-8'
)
except
KeyError
:
user_entry
=
None
return
user_entry
manage_editERP5FacebookExtractionPluginForm
=
PageTemplateFile
(
'www/ERP5Security_editERP5FacebookExtractionPlugin'
,
globals
(),
...
...
product/ERP5Security/__init__.py
View file @
e3935374
...
...
@@ -28,7 +28,7 @@ import ERP5UserFactory
import
ERP5KeyAuthPlugin
import
ERP5ExternalAuthenticationPlugin
import
ERP5BearerExtractionPlugin
import
ERP5
Facebook
ExtractionPlugin
import
ERP5
ExternalOauth2
ExtractionPlugin
def
mergedLocalRoles
(
object
):
"""Returns a merging of object and its ancestors'
...
...
@@ -65,7 +65,7 @@ registerMultiPlugin(ERP5UserFactory.ERP5UserFactory.meta_type)
registerMultiPlugin
(
ERP5KeyAuthPlugin
.
ERP5KeyAuthPlugin
.
meta_type
)
registerMultiPlugin
(
ERP5ExternalAuthenticationPlugin
.
ERP5ExternalAuthenticationPlugin
.
meta_type
)
registerMultiPlugin
(
ERP5BearerExtractionPlugin
.
ERP5BearerExtractionPlugin
.
meta_type
)
registerMultiPlugin
(
ERP5
Facebook
ExtractionPlugin
.
ERP5FacebookExtractionPlugin
.
meta_type
)
registerMultiPlugin
(
ERP5
ExternalOauth2
ExtractionPlugin
.
ERP5FacebookExtractionPlugin
.
meta_type
)
def
initialize
(
context
):
...
...
@@ -132,11 +132,11 @@ def initialize(context):
,
icon
=
'www/portal.gif'
)
context
.
registerClass
(
ERP5
Facebook
ExtractionPlugin
.
ERP5FacebookExtractionPlugin
context
.
registerClass
(
ERP5
ExternalOauth2
ExtractionPlugin
.
ERP5FacebookExtractionPlugin
,
permission
=
ManageUsers
,
constructors
=
(
ERP5
Facebook
ExtractionPlugin
.
manage_addERP5FacebookExtractionPluginForm
,
ERP5
Facebook
ExtractionPlugin
.
addERP5FacebookExtractionPlugin
,
)
ERP5
ExternalOauth2
ExtractionPlugin
.
manage_addERP5FacebookExtractionPluginForm
,
ERP5
ExternalOauth2
ExtractionPlugin
.
addERP5FacebookExtractionPlugin
,
)
,
visibility
=
None
,
icon
=
'www/portal.gif'
)
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment