ungleich-otp/otpauth/serializer.py

79 lines
2.6 KiB
Python
Raw Normal View History

2018-11-17 10:21:35 +00:00
import pyotp
2018-11-17 16:46:16 +00:00
import otpauth
2018-12-30 17:20:24 +00:00
from rest_framework import serializers, exceptions
from otpauth.models import OTPSeed
2018-11-17 10:21:35 +00:00
# For accessing / modifying the data -- currently unused
class OTPSerializer(serializers.ModelSerializer):
class Meta:
model = OTPSeed
2018-11-17 21:15:17 +00:00
fields = ('name', 'realm', 'seed')
read_only_fields = ('seed',)
2018-11-17 21:28:17 +00:00
def create(self, validated_data):
2018-11-17 21:53:51 +00:00
validated_data['seed'] = pyotp.random_base32()
2018-11-17 21:28:17 +00:00
return OTPSeed.objects.create(**validated_data)
2018-11-17 10:21:35 +00:00
class TokenSerializer(serializers.Serializer):
name = serializers.CharField(max_length=128)
realm = serializers.CharField(max_length=128)
auth_name = serializers.CharField(max_length=128)
auth_token = serializers.CharField(max_length=128)
auth_realm = serializers.CharField(max_length=128)
def create(self, validated_data):
validated_data['seed'] = pyotp.random_base32()
return OTPSeed.objects.create(**validated_data)
def update(self, instance, validated_data):
instance.name = validated_data.get('name', instance.name)
instance.realm = validated_data.get('realm', instance.realm)
instance.save()
return instance
2018-11-18 12:24:09 +00:00
def save(self):
name_in = self.validated_data.get("name")
realm_in = self.validated_data.get("realm")
auth_token = self.validated_data.get("auth_token")
auth_name = self.validated_data.get("auth_name")
auth_realm = self.validated_data.get("auth_realm")
print("auth: {}@'{}' {} + {})".format(auth_name, auth_realm, auth_token, self.validated_data))
2018-11-18 12:29:07 +00:00
# 1. Verify that the connection might authenticate
try:
db_instance = otpauth.models.OTPSeed.objects.get(name=auth_name, realm=auth_realm)
except (OTPSeed.MultipleObjectsReturned, OTPSeed.DoesNotExist):
print("does not exist")
raise exceptions.AuthenticationFailed()
totp = pyotp.TOTP(db_instance.seed)
print("calculated token = {}".format(totp.now()))
if not totp.verify(auth_token, valid_window=3):
raise exceptions.AuthenticationFailed()
2018-11-18 12:05:21 +00:00
return (db_instance, token_in)
2018-11-18 12:24:09 +00:00
2018-11-18 13:33:30 +00:00
# For verifying a token
2018-11-18 12:24:09 +00:00
class VerifySerializer(TokenSerializer):
2018-11-18 12:35:06 +00:00
verifyname = serializers.CharField(max_length=128)
verifytoken = serializers.CharField(max_length=128)
verifyrealm = serializers.CharField(max_length=128)
2018-11-18 12:24:09 +00:00
token_name = 'verifytoken'
name_name = 'verifyname'
realm_name = 'verifyrealm'
# token_name = 'token'
# name_name = 'name'
# realm_name = 'realm'
# auth_token_name = 'auth_token'
# auth_name_name = 'auth_name'
# auth_realm_name = 'auth_realm'