131 lines
3.7 KiB
Python
131 lines
3.7 KiB
Python
from hashlib import sha224
|
|
from random import randint
|
|
from uuid import uuid4
|
|
|
|
from django.forms import ModelForm
|
|
from django.contrib import admin
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from oidc_provider.models import Client, Code, Token, RSAKey, get_resource_model
|
|
|
|
Resource = get_resource_model()
|
|
|
|
|
|
class ClientForm(ModelForm):
|
|
|
|
class Meta:
|
|
model = Client
|
|
exclude = []
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
super(ClientForm, self).__init__(*args, **kwargs)
|
|
self.fields['client_id'].required = False
|
|
self.fields['client_id'].widget.attrs['disabled'] = 'true'
|
|
self.fields['client_secret'].required = False
|
|
self.fields['client_secret'].widget.attrs['disabled'] = 'true'
|
|
|
|
def clean_client_id(self):
|
|
instance = getattr(self, 'instance', None)
|
|
if instance and instance.pk:
|
|
return instance.client_id
|
|
else:
|
|
return str(randint(1, 999999)).zfill(6)
|
|
|
|
def clean_client_secret(self):
|
|
instance = getattr(self, 'instance', None)
|
|
|
|
secret = ''
|
|
|
|
if instance and instance.pk:
|
|
if (self.cleaned_data['client_type'] == 'confidential') and not instance.client_secret:
|
|
secret = sha224(uuid4().hex.encode()).hexdigest()
|
|
elif (self.cleaned_data['client_type'] == 'confidential') and instance.client_secret:
|
|
secret = instance.client_secret
|
|
else:
|
|
if (self.cleaned_data['client_type'] == 'confidential'):
|
|
secret = sha224(uuid4().hex.encode()).hexdigest()
|
|
|
|
return secret
|
|
|
|
|
|
@admin.register(Client)
|
|
class ClientAdmin(admin.ModelAdmin):
|
|
|
|
fieldsets = [
|
|
[_(u''), {
|
|
'fields': (
|
|
'name', 'owner', 'client_type', 'response_type', '_redirect_uris', 'jwt_alg',
|
|
'require_consent', 'reuse_consent'),
|
|
}],
|
|
[_(u'Credentials'), {
|
|
'fields': ('client_id', 'client_secret', '_scope'),
|
|
}],
|
|
[_(u'Information'), {
|
|
'fields': ('contact_email', 'website_url', 'terms_url', 'logo', 'date_created'),
|
|
}],
|
|
[_(u'Session Management'), {
|
|
'fields': ('_post_logout_redirect_uris',),
|
|
}],
|
|
]
|
|
form = ClientForm
|
|
list_display = ['name', 'client_id', 'response_type', 'date_created']
|
|
readonly_fields = ['date_created']
|
|
search_fields = ['name']
|
|
raw_id_fields = ['owner']
|
|
|
|
|
|
class ResourceForm(ModelForm):
|
|
def __init__(self, *args, **kwargs):
|
|
super(ResourceForm, self).__init__(*args, **kwargs)
|
|
self.fields['resource_secret'].required = False
|
|
|
|
def clean_resource_secret(self):
|
|
if self.cleaned_data['resource_secret']:
|
|
secret = self.cleaned_data['resource_secret']
|
|
else:
|
|
secret = sha224(uuid4().hex.encode()).hexdigest()
|
|
return secret
|
|
|
|
class Meta:
|
|
model = Resource
|
|
exclude = []
|
|
|
|
|
|
@admin.register(Resource)
|
|
class ResourceAdmin(admin.ModelAdmin):
|
|
fieldsets = [
|
|
[None, {
|
|
'fields': ('name', 'owner', 'active',),
|
|
}],
|
|
[_('Credentials'), {
|
|
'fields': ('resource_id', 'resource_secret',),
|
|
}],
|
|
[_('Permissions'), {
|
|
'fields': ('allowed_clients',),
|
|
}],
|
|
]
|
|
form = ResourceForm
|
|
list_display = ['name', 'resource_id', 'date_created']
|
|
readonly_fields = ['date_created']
|
|
search_fields = ['name']
|
|
raw_id_fields = ['owner']
|
|
|
|
|
|
@admin.register(Code)
|
|
class CodeAdmin(admin.ModelAdmin):
|
|
|
|
def has_add_permission(self, request):
|
|
return False
|
|
|
|
|
|
@admin.register(Token)
|
|
class TokenAdmin(admin.ModelAdmin):
|
|
|
|
def has_add_permission(self, request):
|
|
return False
|
|
|
|
|
|
@admin.register(RSAKey)
|
|
class RSAKeyAdmin(admin.ModelAdmin):
|
|
|
|
readonly_fields = ['kid']
|