mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-12-26 14:02:39 +00:00
164f48e131
* [Update] 统一url地址 * [Update] 修改api * [Update] 使用规范的签名 * [Update] 修改url * [Update] 修改swagger * [Update] 添加serializer class避免报错 * [Update] 修改token * [Update] 支持api key * [Update] 支持生成api key * [Update] 修改api重定向 * [Update] 修改翻译 * [Update] 添加说明文档 * [Update] 修复浏览器关闭后session不失效的问题 * [Update] 修改一些内容 * [Update] 修改 jms脚本 * [Update] 修改重定向 * [Update] 修改搜索trim * [Update] 修改搜索trim * [Update] 添加sys log * [Bugfix] 修改登陆错误 * [Update] 优化User操作private_token的接口 (#3091) * [Update] 优化User操作private_token的接口 * [Update] 优化User操作private_token的接口 2 * [Bugfix] 解决授权了一个节点，当移动节点后，被移动的节点下的资产会放到未分组节点下的问题 * [Update] 升级jquery * [Update] 默认使用page * [Update] 修改使用Orgmodel view set * [Update] 支持 nv的硬盘 https://github.com/jumpserver/jumpserver/issues/1804 * [UPdate] 解决命令执行宽度问题 * [Update] 优化节点 * [Update] 修改nodes过多时创建比较麻烦 * [Update] 修改导入 * [Update] 节点获取更新 * [Update] 修改nodes * [Update] nodes显示full value * [Update] 统一使用nodes select2 函数 * [Update] 修改磁盘大小小数 * [Update] 修改 Node service * [Update] 优化授权节点 * [Update] 修改 node permission * [Update] 修改asset permission * [Stash] * [Update] 修改node assets api * [Update] 修改tree service，支持资产数量 * [Update] 修改暂时完成 * [Update] 修改一些bug
108 lines
3.9 KiB
Python
108 lines
3.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
from django import forms
|
|
from django.utils.translation import gettext_lazy as _
|
|
|
|
from common.utils import validate_ssh_private_key, ssh_pubkey_gen, get_logger
|
|
from orgs.mixins.forms import OrgModelForm
|
|
from ..models import AdminUser, SystemUser
|
|
|
|
logger = get_logger(__file__)
|
|
__all__ = [
|
|
'FileForm', 'SystemUserForm', 'AdminUserForm', 'PasswordAndKeyAuthForm',
|
|
]
|
|
|
|
|
|
class FileForm(forms.Form):
|
|
file = forms.FileField()
|
|
|
|
|
|
class PasswordAndKeyAuthForm(forms.ModelForm):
|
|
# Form field name can not start with `_`, so redefine it,
|
|
password = forms.CharField(
|
|
widget=forms.PasswordInput, max_length=128,
|
|
strip=True, required=False,
|
|
help_text=_('Password or private key passphrase'),
|
|
label=_("Password"),
|
|
)
|
|
# Need use upload private key file except paste private key content
|
|
private_key = forms.FileField(required=False, label=_("Private key"))
|
|
|
|
def clean_private_key(self):
|
|
private_key_f = self.cleaned_data['private_key']
|
|
password = self.cleaned_data['password']
|
|
|
|
if private_key_f:
|
|
key_string = private_key_f.read()
|
|
private_key_f.seek(0)
|
|
key_string = key_string.decode()
|
|
|
|
if not validate_ssh_private_key(key_string, password):
|
|
msg = _('Invalid private key, Only support '
|
|
'RSA/DSA format key')
|
|
raise forms.ValidationError(msg)
|
|
return private_key_f
|
|
|
|
def validate_password_key(self):
|
|
password = self.cleaned_data['password']
|
|
private_key_f = self.cleaned_data.get('private_key', '')
|
|
|
|
if not password and not private_key_f:
|
|
raise forms.ValidationError(_(
|
|
'Password and private key file must be input one'
|
|
))
|
|
|
|
def gen_keys(self):
|
|
password = self.cleaned_data.get('password', '') or None
|
|
private_key_f = self.cleaned_data['private_key']
|
|
public_key = private_key = None
|
|
|
|
if private_key_f:
|
|
private_key = private_key_f.read().strip().decode('utf-8')
|
|
public_key = ssh_pubkey_gen(private_key=private_key, password=password)
|
|
return private_key, public_key
|
|
|
|
|
|
class AdminUserForm(PasswordAndKeyAuthForm):
|
|
def save(self, commit=True):
|
|
raise forms.ValidationError("Use api to save")
|
|
|
|
class Meta:
|
|
model = AdminUser
|
|
fields = ['name', 'username', 'password', 'private_key', 'comment']
|
|
widgets = {
|
|
'name': forms.TextInput(attrs={'placeholder': _('Name')}),
|
|
'username': forms.TextInput(attrs={'placeholder': _('Username')}),
|
|
}
|
|
|
|
|
|
class SystemUserForm(OrgModelForm, PasswordAndKeyAuthForm):
|
|
# Admin user assets define, let user select, save it in form not in view
|
|
auto_generate_key = forms.BooleanField(initial=True, required=False)
|
|
|
|
def save(self, commit=True):
|
|
raise forms.ValidationError("Use api to save")
|
|
|
|
class Meta:
|
|
model = SystemUser
|
|
fields = [
|
|
'name', 'username', 'protocol', 'auto_generate_key',
|
|
'password', 'private_key', 'auto_push', 'sudo',
|
|
'comment', 'shell', 'priority', 'login_mode', 'cmd_filters',
|
|
]
|
|
widgets = {
|
|
'name': forms.TextInput(attrs={'placeholder': _('Name')}),
|
|
'username': forms.TextInput(attrs={'placeholder': _('Username')}),
|
|
'cmd_filters': forms.SelectMultiple(attrs={
|
|
'class': 'select2', 'data-placeholder': _('Command filter')
|
|
}),
|
|
}
|
|
help_texts = {
|
|
'auto_push': _('Auto push system user to asset'),
|
|
'priority': _('1-100, High level will be using login asset as default, '
|
|
'if user was granted more than 2 system user'),
|
|
'login_mode': _('If you choose manual login mode, you do not '
|
|
'need to fill in the username and password.'),
|
|
'sudo': _("Use comma split multi command, ex: /bin/whoami,/bin/ifconfig")
|
|
}
|