1
|
|
|
import base64 |
2
|
|
|
import json |
3
|
|
|
import logging |
4
|
|
|
import re |
5
|
|
|
import sys |
6
|
|
|
from io import BytesIO |
7
|
|
|
|
8
|
|
|
import requests |
9
|
|
|
from django.contrib.auth import get_user_model |
10
|
|
|
from django.core.exceptions import ValidationError |
11
|
|
|
from django.core.files.uploadedfile import InMemoryUploadedFile |
12
|
|
|
from django.core.mail import send_mail |
13
|
|
|
from django.core.validators import validate_email |
14
|
|
|
from django.template import RequestContext |
15
|
|
|
from django.template.loader import render_to_string |
16
|
|
|
from django.utils.safestring import mark_safe |
17
|
|
|
|
18
|
|
|
from chat import local |
19
|
|
|
from chat import settings |
20
|
|
|
from chat.models import User, UserProfile, Verification, RoomUsers, IpAddress |
21
|
|
|
from chat.settings import ISSUES_REPORT_LINK, SITE_PROTOCOL, ALL_ROOM_ID |
22
|
|
|
|
23
|
|
|
try: # py2 |
24
|
|
|
from urllib import urlopen |
25
|
|
|
except ImportError: # py3 |
26
|
|
|
from urllib.request import urlopen |
27
|
|
|
|
28
|
|
|
USERNAME_REGEX = str(settings.MAX_USERNAME_LENGTH).join(['^[a-zA-Z-_0-9]{1,', '}$']) |
29
|
|
|
API_URL = getattr(settings, "IP_API_URL", None) |
30
|
|
|
RECAPTCHA_SECRET_KEY = getattr(settings, "RECAPTCHA_SECRET_KEY", None) |
31
|
|
|
GOOGLE_OAUTH_2_CLIENT_ID = getattr(settings, "GOOGLE_OAUTH_2_CLIENT_ID", None) |
32
|
|
|
GOOGLE_OAUTH_2_HOST = getattr(settings, "GOOGLE_OAUTH_2_HOST", None) |
33
|
|
|
FACEBOOK_ACCESS_TOKEN = getattr(settings, "FACEBOOK_ACCESS_TOKEN", None) |
34
|
|
|
|
35
|
|
|
logger = logging.getLogger(__name__) |
36
|
|
|
|
37
|
|
|
|
38
|
|
|
def is_blank(check_str): |
39
|
|
|
if check_str and check_str.strip(): |
40
|
|
|
return False |
41
|
|
|
else: |
42
|
|
|
return True |
43
|
|
|
|
44
|
|
|
|
45
|
|
|
def hide_fields(post, fields, huge=False, fill_with='****'): |
46
|
|
|
""" |
47
|
|
|
:param post: Object that will be copied |
48
|
|
|
:type post: QueryDict |
49
|
|
|
:param fields: fields that will be removed |
50
|
|
|
:param fill_with: replace characters for hidden fields |
51
|
|
|
:param huge: if true object will be cloned and then fields will be removed |
52
|
|
|
:return: a shallow copy of dictionary without specified fields |
53
|
|
|
""" |
54
|
|
|
if not huge: |
55
|
|
|
# hide *fields in shallow copy |
56
|
|
|
res = post.copy() |
57
|
|
|
for field in fields: |
58
|
|
|
if field in post: # check if field was absent |
59
|
|
|
res[field] = fill_with |
60
|
|
|
else: |
61
|
|
|
# copy everything but *fields |
62
|
|
|
res = {} |
63
|
|
|
for field in post: |
64
|
|
|
# _______________________if this is field to remove |
65
|
|
|
res[field] = post[field] if field not in fields else fill_with |
66
|
|
|
return res |
67
|
|
|
|
68
|
|
|
|
69
|
|
|
def check_password(password): |
70
|
|
|
""" |
71
|
|
|
Checks if password is secure |
72
|
|
|
:raises ValidationError exception if password is not valid |
73
|
|
|
""" |
74
|
|
|
if is_blank(password): |
75
|
|
|
raise ValidationError("password can't be empty") |
76
|
|
|
if not re.match(u'^\S.+\S$', password): |
77
|
|
|
raise ValidationError("password should be at least 3 symbols") |
78
|
|
|
|
79
|
|
|
|
80
|
|
|
def check_email(email): |
81
|
|
|
""" |
82
|
|
|
:raises ValidationError if specified email is registered or not valid |
83
|
|
|
""" |
84
|
|
|
if not email: |
85
|
|
|
return |
86
|
|
|
try: |
87
|
|
|
validate_email(email) |
88
|
|
|
# theoretically can throw returning 'more than 1' error |
89
|
|
|
UserProfile.objects.get(email=email) |
90
|
|
|
raise ValidationError('Email {} is already used'.format(email)) |
91
|
|
|
except User.DoesNotExist: |
92
|
|
|
pass |
93
|
|
|
|
94
|
|
|
|
95
|
|
|
def check_user(username): |
96
|
|
|
""" |
97
|
|
|
Checks if specified username is free to register |
98
|
|
|
:type username str |
99
|
|
|
:raises ValidationError exception if username is not valid |
100
|
|
|
""" |
101
|
|
|
# Skip javascript validation, only summary message |
102
|
|
|
if is_blank(username): |
103
|
|
|
raise ValidationError("Username can't be empty") |
104
|
|
|
if not re.match(USERNAME_REGEX, username): |
105
|
|
|
raise ValidationError("Username {} doesn't match regex {}".format(username, USERNAME_REGEX)) |
106
|
|
|
try: |
107
|
|
|
# theoretically can throw returning 'more than 1' error |
108
|
|
|
User.objects.get(username=username) |
109
|
|
|
raise ValidationError("Username {} is already used. Please select another one".format(username)) |
110
|
|
|
except User.DoesNotExist: |
111
|
|
|
pass |
112
|
|
|
|
113
|
|
|
|
114
|
|
|
def get_client_ip(request): |
115
|
|
|
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR') |
116
|
|
|
return x_forwarded_for.split(',')[-1].strip() if x_forwarded_for else request.META.get('REMOTE_ADDR') |
117
|
|
|
|
118
|
|
|
|
119
|
|
|
def check_captcha(request): |
120
|
|
|
""" |
121
|
|
|
:type request: WSGIRequest |
122
|
|
|
:raises ValidationError: if captcha is not valid or not set |
123
|
|
|
If RECAPTCHA_SECRET_KEY is enabled in settings validates request with it |
124
|
|
|
""" |
125
|
|
|
if not RECAPTCHA_SECRET_KEY: |
126
|
|
|
logger.debug('Skipping captcha validation') |
127
|
|
|
return |
128
|
|
|
try: |
129
|
|
|
captcha_rs = request.POST.get('g-recaptcha-response') |
130
|
|
|
url = "https://www.google.com/recaptcha/api/siteverify" |
131
|
|
|
params = { |
132
|
|
|
'secret': RECAPTCHA_SECRET_KEY, |
133
|
|
|
'response': captcha_rs, |
134
|
|
|
'remoteip': local.client_ip |
135
|
|
|
} |
136
|
|
|
raw_response = requests.post(url, params=params, verify=True) |
137
|
|
|
response = raw_response.json() |
138
|
|
|
if not response.get('success', False): |
139
|
|
|
logger.debug('Captcha is NOT valid, response: %s', raw_response) |
140
|
|
|
raise ValidationError( |
141
|
|
|
response['error-codes'] if response.get('error-codes', None) else 'This captcha already used') |
142
|
|
|
logger.debug('Captcha is valid, response: %s', raw_response) |
143
|
|
|
except Exception as e: |
144
|
|
|
raise ValidationError('Unable to check captcha because {}'.format(e)) |
145
|
|
|
|
146
|
|
|
|
147
|
|
|
def send_sign_up_email(user, site_address, request): |
148
|
|
|
if user.email is not None: |
149
|
|
|
verification = Verification(user=user, type_enum=Verification.TypeChoices.register) |
150
|
|
|
verification.save() |
151
|
|
|
user.email_verification = verification |
152
|
|
|
user.save(update_fields=['email_verification']) |
153
|
|
|
link = "{}://{}/confirm_email?token={}".format(SITE_PROTOCOL, site_address, verification.token) |
154
|
|
|
text = ('Hi {}, you have registered pychat' |
155
|
|
|
'\nTo complete your registration please click on the url bellow: {}' |
156
|
|
|
'\n\nIf you find any bugs or propositions you can post them {}').format( |
157
|
|
|
user.username, link, ISSUES_REPORT_LINK) |
158
|
|
|
start_message = mark_safe(( |
159
|
|
|
"You have registered in <b>Pychat</b>. If you find any bugs or propositions you can post them" |
160
|
|
|
" <a href='{}'>here</a>. To complete your registration please click on the link below.").format( |
161
|
|
|
ISSUES_REPORT_LINK)) |
162
|
|
|
context = { |
163
|
|
|
'username': user.username, |
164
|
|
|
'magicLink': link, |
165
|
|
|
'btnText': "CONFIRM SIGN UP", |
166
|
|
|
'greetings': start_message |
167
|
|
|
} |
168
|
|
|
html_message = render_to_string('sign_up_email.html', context, context_instance=RequestContext(request)) |
169
|
|
|
logger.info('Sending verification email to userId %s (email %s)', user.id, user.email) |
170
|
|
|
send_mail("Confirm chat registration", text, site_address, [user.email, ], html_message=html_message) |
171
|
|
|
logger.info('Email %s has been sent', user.email) |
172
|
|
|
|
173
|
|
|
|
174
|
|
|
def send_reset_password_email(request, user_profile, verification): |
175
|
|
|
link = "{}://{}/restore_password?token={}".format(SITE_PROTOCOL, request.get_host(), verification.token) |
176
|
|
|
message = "{},\n" \ |
177
|
|
|
"You requested to change a password on site {}.\n" \ |
178
|
|
|
"To proceed click on the link {}\n" \ |
179
|
|
|
"If you didn't request the password change just ignore this mail" \ |
180
|
|
|
.format(user_profile.username, request.get_host(), link) |
181
|
|
|
ip_info = get_or_create_ip(get_client_ip(request), logger) |
182
|
|
|
start_message = mark_safe( |
183
|
|
|
"You have requested to send you a magic link to quickly restore password to <b>Pychat</b>. " |
184
|
|
|
"If it wasn't you, you can safely ignore this email") |
185
|
|
|
context = { |
186
|
|
|
'username': user_profile.username, |
187
|
|
|
'magicLink': link, |
188
|
|
|
'ipInfo': ip_info.info, |
189
|
|
|
'ip': ip_info.ip, |
190
|
|
|
'btnText': "CHANGE PASSWORD", |
191
|
|
|
'timeCreated': verification.time, |
192
|
|
|
'greetings': start_message |
193
|
|
|
} |
194
|
|
|
html_message = render_to_string('reset_pass_email.html', context, context_instance=RequestContext(request)) |
195
|
|
|
send_mail("Pychat: restore password", message, request.get_host(), (user_profile.email,), fail_silently=False, |
196
|
|
|
html_message=html_message) |
197
|
|
|
|
198
|
|
|
|
199
|
|
|
def extract_photo(image_base64, filename=None): |
200
|
|
|
base64_type_data = re.search(r'data:(\w+/(\w+));base64,(.*)$', image_base64) |
201
|
|
|
logger.debug('Parsing base64 image') |
202
|
|
|
image_data = base64_type_data.group(3) |
203
|
|
|
f = BytesIO(base64.b64decode(image_data)) |
204
|
|
|
content_type = base64_type_data.group(1) |
205
|
|
|
name = filename or ".{}".format(base64_type_data.group(2)) |
206
|
|
|
logger.debug('Base64 filename extension %s, content_type %s', name, content_type) |
207
|
|
|
image = InMemoryUploadedFile( |
208
|
|
|
f, |
209
|
|
|
field_name='photo', |
210
|
|
|
name=name, |
211
|
|
|
content_type=content_type, |
212
|
|
|
size=sys.getsizeof(f), |
213
|
|
|
charset=None) |
214
|
|
|
return image |
215
|
|
|
|
216
|
|
|
|
217
|
|
|
def get_max_key(dictionary): |
218
|
|
|
return max(dictionary.keys()) if dictionary else None |
219
|
|
|
|
220
|
|
|
|
221
|
|
|
def create_user_model(user): |
222
|
|
|
user.save() |
223
|
|
|
RoomUsers(user_id=user.id, room_id=ALL_ROOM_ID).save() |
224
|
|
|
logger.info('Signed up new user %s, subscribed for channels with id %d', user, ALL_ROOM_ID) |
225
|
|
|
return user |
226
|
|
|
|
227
|
|
|
|
228
|
|
|
def get_or_create_ip(ip, logger): |
229
|
|
|
""" |
230
|
|
|
|
231
|
|
|
@param ip: ip to fetch info from |
232
|
|
|
@param logger initialized logger: |
233
|
|
|
@type IpAddress |
234
|
|
|
""" |
235
|
|
|
try: |
236
|
|
|
ip_address = IpAddress.objects.get(ip=ip) |
237
|
|
|
except IpAddress.DoesNotExist: |
238
|
|
|
try: |
239
|
|
|
if not API_URL: |
240
|
|
|
raise Exception('api url is absent') |
241
|
|
|
logger.debug("Creating ip record %s", ip) |
242
|
|
|
f = urlopen(API_URL % ip) |
243
|
|
|
raw_response = f.read().decode("utf-8") |
244
|
|
|
response = json.loads(raw_response) |
245
|
|
|
if response['status'] != "success": |
246
|
|
|
raise Exception("Creating iprecord failed, server responded: %s" % raw_response) |
247
|
|
|
ip_address = IpAddress.objects.create( |
248
|
|
|
ip=ip, |
249
|
|
|
isp=response['isp'], |
250
|
|
|
country=response['country'], |
251
|
|
|
region=response['regionName'], |
252
|
|
|
city=response['city'], |
253
|
|
|
country_code=response['countryCode'] |
254
|
|
|
) |
255
|
|
|
except Exception as e: |
256
|
|
|
logger.error("Error while creating ip with country info, because %s", e) |
257
|
|
|
ip_address = IpAddress.objects.create(ip=ip) |
258
|
|
|
return ip_address |
259
|
|
|
|
260
|
|
|
|
261
|
|
|
class EmailOrUsernameModelBackend(object): |
262
|
|
|
""" |
263
|
|
|
This is a ModelBacked that allows authentication with either a username or an email address. |
264
|
|
|
""" |
265
|
|
|
|
266
|
|
|
def authenticate(self, username=None, password=None): |
267
|
|
|
try: |
268
|
|
|
if '@' in username: |
269
|
|
|
user = UserProfile.objects.get(email=username) |
270
|
|
|
else: |
271
|
|
|
user = UserProfile.objects.get(username=username) |
272
|
|
|
if user.check_password(password): |
273
|
|
|
return user |
274
|
|
|
except User.DoesNotExist: |
275
|
|
|
return None |
276
|
|
|
|
277
|
|
|
def get_user(self, username): |
278
|
|
|
try: |
279
|
|
|
return get_user_model().objects.get(pk=username) |
280
|
|
|
except get_user_model().DoesNotExist: |
281
|
|
|
return None |
282
|
|
|
|