1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
# Copyright (C) 2014 Andrey Antukh <niwi@niwi.be>
# Copyright (C) 2014 Jesús Espino <jespinog@gmail.com>
# Copyright (C) 2014 David Barragán <bameda@dbarragan.com>
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
from django.db import transaction as tx
from django.apps import apps
from taiga.base.utils.slug import slugify_uniquely
from taiga.base import response
from taiga.auth.services import make_auth_response_data
from taiga.auth.signals import user_registered as user_registered_signal
from . import connector
@tx.atomic
def ldap_register(username: str, email: str, full_name: str):
"""
Register a new user from LDAP.
This can raise `exc.IntegrityError` exceptions in
case of conflict found.
:returns: User
"""
user_model = apps.get_model("users", "User")
try:
# LDAP user association exist?
user = user_model.objects.get(username=username)
except user_model.DoesNotExist:
# Create a new user
username_unique = slugify_uniquely(username, user_model, slugfield="username")
user = user_model.objects.create(email=email,
username=username_unique,
full_name=full_name)
user_registered_signal.send(sender=user.__class__, user=user)
return user
def ldap_login_func(request):
username = request.DATA.get('username', None)
password = request.DATA.get('password', None)
email, full_name = connector.login(username=username, password=password)
user = ldap_register(username=username, email=email, full_name=full_name)
data = make_auth_response_data(user)
return response.Ok(data)
|
