aji/authsquare
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: aji:c03332884ff9e5fb2d09de2953eddc69d3f1c815
Branches Tags
aji:master
aji:renaming
aji:dashboard
aji:prime
...
compare: aji:4322a5803fb4700eb7fc033e62776384e8cf3a04
Branches Tags
aji:master
aji:renaming
aji:dashboard
aji:prime

3 Commits
c03332884f ... 4322a5803f

Author SHA1 Message Date
Dita Aji Pratama
4322a5803f Remove session.py 2024-08-13 18:04:10 +07:00
Dita Aji Pratama
a440a32ad6 Implementing account validation on all public pages 2024-08-13 18:02:49 +07:00
Dita Aji Pratama
c0efe31a0f Add account validation on procedure 2024-08-13 17:59:57 +07:00
9 changed files with 324 additions and 304 deletions
Show Stats Expand all files Collapse all files

50
app/modules/public/forgot.py
View File

@ -1,6 +1,9 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.validation as procedure_validation
class forgot: class forgot:
@ -8,23 +11,26 @@ class forgot:
pass pass
def html(self, params): def html(self, params):
APIADDR = "/forgot"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Forgot" active_page = "Forgot"
user_roles = [0] allowed_roles = [0]
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None loggorilla.prcss(APIADDR, "Account validation")
if jwt is not None: user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
return redirect('/') user = user_validation['data']
else:
return Template(params["mako"]["website"]['index']).render( return Template(params["mako"]["website"]['index']).render(
title = globalvar.title, title = globalvar.title,
header = globalvar.header, header = globalvar.header,
navbar = Template(params["mako"]["website"]['navbar']).render( navbar = Template(params["mako"]["website"]['navbar']).render(
menu = globalvar.menu['public']['navbar'], menu = globalvar.menu['public']['navbar'],
user_roles = user_roles, user_roles = user['profile']['roles'],
active_page = active_page active_page = active_page
), ),
footer = Template(params["mako"]["website"]['footer']).render( footer = Template(params["mako"]["website"]['footer']).render(
copyright = globalvar.copyright, copyright = globalvar.copyright,
), ),
container = Template(params["mako"]["website"]['container']).render() container = Template(params["mako"]["website"]['container']).render()
) )

68
app/modules/public/home.py
View File

@ -1,49 +1,39 @@
import mysql.connector as mariadb from mako.template import Template
from mako.template import Template from config import globalvar
from config import globalvar, database from bottle import redirect, abort
from bottle import request from scripts import loggorilla
import procedure.session as procedure_session import procedure.validation as procedure_validation
class home: class home:
def __init__(self): def __init__(self):
self.db_main = mariadb.connect(**database.db_main) pass
self.cursor = self.db_main.cursor(dictionary=True)
self.user = {
"data":{
"profile":{
"username":None,
"email":None,
"phone":None,
"roles":[0]
}
}
}
def html(self, params): def html(self, params):
APIADDR = "/"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Home" active_page = "Home"
allowed_roles = [0,1,2,3] allowed_roles = [0,1,2,3]
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None loggorilla.prcss(APIADDR, "Account validation")
self.user = procedure_session.session().user(jwt, allowed_roles) if jwt is not None else self.user user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
user = self.user['data'] user = user_validation['data']
if 'valid' in user and user['valid']['status'] == 0:
return redirect('/logout') return Template(params["mako"]["website"]['index']).render(
else: title = globalvar.title,
return Template(params["mako"]["website"]['index']).render( header = globalvar.header,
title = globalvar.title, navbar = Template(params["mako"]["website"]['navbar']).render(
header = globalvar.header, menu = globalvar.menu['public']['navbar'],
navbar = Template(params["mako"]["website"]['navbar']).render( user_roles = user['profile']['roles'],
menu = globalvar.menu['public']['navbar'], active_page = active_page
user_roles = user['profile']['roles'], ),
active_page = active_page footer = Template(params["mako"]["website"]['footer']).render(
), copyright = globalvar.copyright,
footer = Template(params["mako"]["website"]['footer']).render( ),
copyright = globalvar.copyright, container = Template(params["mako"]["website"]['container']).render(
), greeting = f"Welcome to your new web application! This placeholder page is here to let you know that your web framework is successfully set up and ready to go. Now, it's time to start building your project. Dive into the documentation to explore the features and capabilities at your disposal.",
container = Template(params["mako"]["website"]['container']).render( user = user
greeting = f"Welcome to your new web application! This placeholder page is here to let you know that your web framework is successfully set up and ready to go. Now, it's time to start building your project. Dive into the documentation to explore the features and capabilities at your disposal.",
user = user
)
) )
)

50
app/modules/public/login.py
View File

@ -1,6 +1,9 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.validation as procedure_validation
class login: class login:
@ -8,23 +11,26 @@ class login:
pass pass
def html(self, params): def html(self, params):
APIADDR = "/login"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Login" active_page = "Login"
user_roles = [0] allowed_roles = [0]
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None loggorilla.prcss(APIADDR, "Account validation")
if jwt is not None: user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
return redirect('/') user = user_validation['data']
else:
return Template(params["mako"]["website"]['index']).render( return Template(params["mako"]["website"]['index']).render(
title = globalvar.title, title = globalvar.title,
header = globalvar.header, header = globalvar.header,
navbar = Template(params["mako"]["website"]['navbar']).render( navbar = Template(params["mako"]["website"]['navbar']).render(
menu = globalvar.menu['public']['navbar'], menu = globalvar.menu['public']['navbar'],
user_roles = user_roles, user_roles = user['profile']['roles'],
active_page = active_page active_page = active_page
), ),
footer = Template(params["mako"]["website"]['footer']).render( footer = Template(params["mako"]["website"]['footer']).render(
copyright = globalvar.copyright, copyright = globalvar.copyright,
), ),
container = Template(params["mako"]["website"]['container']).render() container = Template(params["mako"]["website"]['container']).render()
) )

65
app/modules/public/notme.py
View File

@ -1,45 +1,38 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.session as procedure_session import procedure.validation as procedure_validation
class notme: class notme:
def __init__(self): def __init__(self):
self.user = { pass
"data":{
"profile":{
"username":None,
"email":None,
"phone":None,
"roles":[0]
}
}
}
def html(self, params): def html(self, params):
active_page = None APIADDR = "/notme"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Not Me"
allowed_roles = [0,1,2,3] allowed_roles = [0,1,2,3]
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None loggorilla.prcss(APIADDR, "Account validation")
self.user = procedure_session.session().user(jwt, allowed_roles) if jwt is not None else self.user user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
user = self.user['data'] user = user_validation['data']
if 'valid' in user and user['valid']['status'] == 0:
return redirect('/logout') return Template(params["mako"]["website"]['index']).render(
else: title = globalvar.title,
return Template(params["mako"]["website"]['index']).render( header = globalvar.header,
title = globalvar.title, navbar = Template(params["mako"]["website"]['navbar']).render(
header = globalvar.header, menu = globalvar.menu['public']['navbar'],
navbar = Template(params["mako"]["website"]['navbar']).render( user_roles = user['profile']['roles'],
menu = globalvar.menu['public']['navbar'], active_page = active_page
user_roles = user['profile']['roles'], ),
active_page = active_page footer = Template(params["mako"]["website"]['footer']).render(
), copyright = globalvar.copyright,
footer = Template(params["mako"]["website"]['footer']).render( ),
copyright = globalvar.copyright, container = Template(params["mako"]["website"]['container']).render(
), title = globalvar.title
container = Template(params["mako"]["website"]['container']).render(
title = globalvar.title
)
) )
)

60
app/modules/public/register.py
View File

@ -1,6 +1,9 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.validation as procedure_validation
class register: class register:
@ -8,29 +11,32 @@ class register:
pass pass
def html(self, params): def html(self, params):
roles = params["roles"] APIADDR = "/register"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Register" active_page = "Register"
user_roles = [0] allowed_roles = [0]
beaker_session = request.environ.get('beaker.session') roles = params["roles"]
jwt = beaker_session["token"] if "token" in beaker_session else None
if jwt is not None: loggorilla.prcss(APIADDR, "Account validation")
return redirect('/') user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
else: user = user_validation['data']
return Template(params["mako"]["website"]['index']).render(
title = globalvar.title, return Template(params["mako"]["website"]['index']).render(
header = globalvar.header, title = globalvar.title,
navbar = Template(params["mako"]["website"]['navbar']).render( header = globalvar.header,
menu = globalvar.menu['public']['navbar'], navbar = Template(params["mako"]["website"]['navbar']).render(
user_roles = user_roles, menu = globalvar.menu['public']['navbar'],
active_page = active_page user_roles = user['profile']['roles'],
), active_page = active_page
footer = Template(params["mako"]["website"]['footer']).render( ),
copyright = globalvar.copyright, footer = Template(params["mako"]["website"]['footer']).render(
), copyright = globalvar.copyright,
container = Template(params["mako"]["website"]['container']).render( ),
title = globalvar.title, container = Template(params["mako"]["website"]['container']).render(
reCAPTCHA_client = globalvar.reCAPTCHA['client'], title = globalvar.title,
roles = roles, reCAPTCHA_client = globalvar.reCAPTCHA['client'],
production = globalvar.production roles = roles,
) production = globalvar.production
) )
)

50
app/modules/public/reset.py
View File

@ -1,6 +1,9 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.validation as procedure_validation
class reset: class reset:
@ -8,23 +11,26 @@ class reset:
pass pass
def html(self, params): def html(self, params):
APIADDR = "/reset"
loggorilla.prcss(APIADDR, "Define page parameters")
active_page = "Reset" active_page = "Reset"
user_roles = [0] allowed_roles = [0]
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None loggorilla.prcss(APIADDR, "Account validation")
if jwt is not None: user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
return redirect('/') user = user_validation['data']
else:
return Template(params["mako"]["website"]['index']).render( return Template(params["mako"]["website"]['index']).render(
title = globalvar.title, title = globalvar.title,
header = globalvar.header, header = globalvar.header,
navbar = Template(params["mako"]["website"]['navbar']).render( navbar = Template(params["mako"]["website"]['navbar']).render(
menu = globalvar.menu['public']['navbar'], menu = globalvar.menu['public']['navbar'],
user_roles = user_roles, user_roles = user['profile']['roles'],
active_page = active_page active_page = active_page
), ),
footer = Template(params["mako"]["website"]['footer']).render( footer = Template(params["mako"]["website"]['footer']).render(
copyright = globalvar.copyright, copyright = globalvar.copyright,
), ),
container = Template(params["mako"]["website"]['container']).render() container = Template(params["mako"]["website"]['container']).render()
) )

65
app/modules/public/verify.py
View File

@ -1,43 +1,36 @@
from mako.template import Template from mako.template import Template
from config import globalvar from config import globalvar
from bottle import request from bottle import redirect, abort
from scripts import loggorilla
import procedure.session as procedure_session import procedure.validation as procedure_validation
class verify: class verify:
def __init__(self): def __init__(self):
self.user = { pass
"data":{
"profile":{
"username":None,
"email":None,
"phone":None,
"roles":[0]
}
}
}
def html(self, params): def html(self, params):
active_page = None APIADDR = "/verify"
allowed_roles = [0,1,2,3]
beaker_session = request.environ.get('beaker.session') loggorilla.prcss(APIADDR, "Define page parameters")
jwt = beaker_session["token"] if "token" in beaker_session else None active_page = "Verify"
self.user = procedure_session.session().user(jwt, allowed_roles) if jwt is not None else self.user allowed_roles = [0]
user = self.user['data']
if 'valid' in user and user['valid']['status'] == 0: loggorilla.prcss(APIADDR, "Account validation")
return redirect('/logout') user_validation = procedure_validation.validation().account(APIADDR, allowed_roles)
else: user = user_validation['data']
return Template(params["mako"]["website"]['index']).render(
title = globalvar.title, return Template(params["mako"]["website"]['index']).render(
header = globalvar.header, title = globalvar.title,
navbar = Template(params["mako"]["website"]['navbar']).render( header = globalvar.header,
menu = globalvar.menu['public']['navbar'], navbar = Template(params["mako"]["website"]['navbar']).render(
user_roles = user['profile']['roles'], menu = globalvar.menu['public']['navbar'],
active_page = active_page user_roles = user['profile']['roles'],
), active_page = active_page
footer = Template(params["mako"]["website"]['footer']).render( ),
copyright = globalvar.copyright, footer = Template(params["mako"]["website"]['footer']).render(
), copyright = globalvar.copyright,
container = Template(params["mako"]["website"]['container']).render() ),
) container = Template(params["mako"]["website"]['container']).render()
)

100
app/procedure/session.py
View File

@ -1,100 +0,0 @@
import mysql.connector as mariadb
import datetime
import config.database as database
import config.globalvar as globalvar
import scripts.loggorilla as loggorilla
import scripts.tokenguard as tokenguard
class session():
def __init__(self):
self.db_main = mariadb.connect(**database.db_main)
self.cursor = self.db_main.cursor(dictionary=True)
def user(self, jwt, allowed_roles):
APIADDR = "procedure.validation"
response = {}
try:
loggorilla.prcss(APIADDR, "Define parameters")
payload = tokenguard.decode(jwt, globalvar.ssh['key']['public'])
loggorilla.prcss(APIADDR, "Get dependency data")
self.cursor.execute(f"SELECT * FROM auth_session WHERE id = %s ; ", (payload["session"]["id"],) )
r_session = self.cursor.fetchone()
self.cursor.execute(f"SELECT COUNT(*) AS `count`, auth_profile.* FROM auth_profile_verification LEFT JOIN auth_profile ON auth_profile.id = auth_profile_verification.auth_profile WHERE auth_profile.token = %s AND auth_profile_verification.type = 'email' AND auth_profile_verification.verified = 1 ; ", (r_session['token'],) )
r_profile = self.cursor.fetchone()
self.cursor.execute(f"SELECT auth_roles FROM auth_profile_roles WHERE auth_profile = %s ; ", (r_profile['id'],) )
r_roles = self.cursor.fetchall()
r_profile['roles'] = [0]
for row in r_roles:
r_profile['roles'].remove(0)
r_profile['roles'].append(row['auth_roles'])
loggorilla.prcss(APIADDR, "Validation")
if datetime.datetime.now() > r_session['end']:
loggorilla.prcss(APIADDR, "Deleting")
self.cursor.execute("DELETE FROM auth_session WHERE id = %s ; ", (r_session['id'],) )
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "Expired. Your session removed." )
response["status" ] = "failed"
response["desc" ] = "Expired. Your session removed."
response["data" ] = {
"valid" :{
"status" : 0,
"desc" : "expired"
},
"session" : r_session,
"profile" : r_profile
}
elif r_profile["count"] == 0:
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "No active account for this" )
response["status" ] = "failed"
response["desc" ] = "No active account for this"
response["data" ] = {
"message" : "Please contact us if you still had a problem",
"valid" :{
"status" : 0,
"desc" : "forbidden"
},
"session" : r_session,
"profile" : r_profile
}
elif any(role in allowed_roles for role in r_profile['roles']):
loggorilla.prcss(APIADDR, "Giving response")
response["status" ] = "success"
response["desc" ] = "User roles authorized"
response["data" ] = {
"valid" :{
"status" : 1,
"desc" : "authorized"
},
"session" : r_session,
"profile" : r_profile
}
else:
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "User roles unauthorized" )
response["status" ] = "failed"
response["desc" ] = "User roles unauthorized"
response["data" ] = {
"valid" :{
"status" : 0,
"desc" : "unauthorized"
},
"session" : r_session,
"profile" : r_profile
}
except Exception as e:
loggorilla.error(APIADDR, str(e) )
response["status" ] = "failed"
response["desc" ] = "Internal Server Error. Please contact us if you still have an error. for detail"
finally:
self.cursor.close()
self.db_main.close()
return response

120
app/procedure/validation.py Normal file
View File

@ -0,0 +1,120 @@
import mysql.connector as mariadb
import datetime
from bottle import request
from config import database, globalvar
from scripts import loggorilla, tokenguard
class validation():
def __init__(self):
pass
def account(self, APIADDR, allowed_roles):
response = {}
try:
loggorilla.prcss(APIADDR, "Define parameters")
beaker_session = request.environ.get('beaker.session')
jwt = beaker_session["token"] if "token" in beaker_session else None
if jwt is None:
loggorilla.fyinf(APIADDR, "Guest")
r_session = {}
r_profile = {
"username" :None,
"email" :None,
"phone" :None,
"roles" :[0]
}
else:
loggorilla.fyinf(APIADDR, "With JWT")
loggorilla.prcss(APIADDR, "Get JWT payload data")
payload = tokenguard.decode(jwt, globalvar.ssh['key']['public'])
loggorilla.prcss(APIADDR, "Get dependency data")
db_main = mariadb.connect(**database.db_main)
cursor = db_main.cursor(dictionary=True)
cursor.execute(f"SELECT * FROM auth_session WHERE id = %s ; ", (payload["session"]["id"],) )
r_session = cursor.fetchone()
cursor.execute(f"SELECT COUNT(*) AS `count`, auth_profile.* FROM auth_profile_verification LEFT JOIN auth_profile ON auth_profile.id = auth_profile_verification.auth_profile WHERE auth_profile.token = %s AND auth_profile_verification.type = 'email' AND auth_profile_verification.verified = 1 ; ", (r_session['token'],) )
r_profile = cursor.fetchone()
cursor.execute(f"SELECT auth_roles FROM auth_profile_roles WHERE auth_profile = %s ; ", (r_profile['id'],) )
r_roles = cursor.fetchall()
r_profile['roles'] = r_roles['auth_roles']
cursor.close()
db_main.close()
loggorilla.prcss(APIADDR, "Validation")
if 0 not in r_profile['roles'] and datetime.datetime.now() > r_session['end']:
loggorilla.prcss(APIADDR, "Deleting")
self.cursor.execute("DELETE FROM auth_session WHERE id = %s ; ", (r_session['id'],) )
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "Expired. Your session removed." )
loggorilla.accss(APIADDR, f"Session: {r_session}" )
loggorilla.accss(APIADDR, f"Profile: {r_profile}" )
response["status" ] = "failed"
response["desc" ] = "Expired. Your session removed."
response["data" ] = {
"valid" :{
"status" : 0,
"desc" : "expired"
},
"session" : r_session,
"profile" : r_profile
}
redirect('/logout?msg=expired')
elif 0 not in r_profile['roles'] and r_profile["count"] == 0:
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "No active account for this" )
loggorilla.accss(APIADDR, f"Session: {r_session}" )
loggorilla.accss(APIADDR, f"Profile: {r_profile}" )
response["status" ] = "failed"
response["desc" ] = "No active account for this"
response["data" ] = {
"message" : "Please contact us if you still had a problem",
"valid" :{
"status" : 0,
"desc" : "fake"
},
"session" : r_session,
"profile" : r_profile
}
abort(403, "Please contact us if you still had a problem.") # 403 Forbidden
elif any(role in allowed_roles for role in r_profile['roles']):
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "User roles authorized" )
response["status" ] = "success"
response["desc" ] = "User roles authorized"
response["data" ] = {
"valid" :{
"status" : 1,
"desc" : "authorized"
},
"session" : r_session,
"profile" : r_profile
}
return response
else:
loggorilla.prcss(APIADDR, "Giving response")
loggorilla.accss(APIADDR, "User roles unauthorized" )
loggorilla.accss(APIADDR, f"Session: {r_session}" )
loggorilla.accss(APIADDR, f"Profile: {r_profile}" )
response["status" ] = "failed"
response["desc" ] = "User roles unauthorized"
response["data" ] = {
"valid" :{
"status" : 0,
"desc" : "unauthorized"
},
"session" : r_session,
"profile" : r_profile
}
abort(401, "User roles unauthorized") # 401 Unauthorized
except Exception as e:
loggorilla.error(APIADDR, str(e) )
response["status" ] = "failed"
response["desc" ] = "Internal Server Error. Please contact us if you still have an error."
return response