mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-12-15 16:42:34 +00:00
993bc36c5e
* perf: remove call client old- method via ?next=client * feat: add 2 decorators for login-get and login-callback-get to set next_page and get next_page from session * perf: code style * perf: handling the next parameter propagation issue in third-party authentication flows * perf: request.GET.dict() to copy() * perf: style import --------- Co-authored-by: Bai <baijiangjie@gmail.com>
59 lines
1.7 KiB
Python
59 lines
1.7 KiB
Python
from django.db.models import TextChoices
|
|
from django.utils.translation import gettext_lazy as _
|
|
|
|
|
|
USER_LOGIN_GUARD_VIEW_REDIRECT_FIELD = 'next'
|
|
|
|
RSA_PRIVATE_KEY = 'rsa_private_key'
|
|
RSA_PUBLIC_KEY = 'rsa_public_key'
|
|
|
|
|
|
class ConfirmType(TextChoices):
|
|
RELOGIN = 'relogin', 'Re-Login'
|
|
PASSWORD = 'password', _('Password')
|
|
MFA = 'mfa', 'MFA'
|
|
|
|
@classmethod
|
|
def get_can_confirm_types(cls, confirm_type):
|
|
start = cls.values.index(confirm_type)
|
|
types = cls.values[start:]
|
|
types.reverse()
|
|
return types
|
|
|
|
@classmethod
|
|
def get_prop_backends(cls, confirm_type):
|
|
from authentication.confirm import CONFIRM_BACKEND_MAP
|
|
types = cls.get_can_confirm_types(confirm_type)
|
|
backend_classes = [
|
|
CONFIRM_BACKEND_MAP[tp]
|
|
for tp in types if tp in CONFIRM_BACKEND_MAP
|
|
]
|
|
return backend_classes
|
|
|
|
|
|
class MFAType(TextChoices):
|
|
OTP = 'otp', _('OTP')
|
|
SMS = 'sms', _('SMS')
|
|
Email = 'email', _('Email')
|
|
Face = 'face', _('Face recognition')
|
|
Radius = 'otp_radius', _('Radius')
|
|
Passkey = 'passkey', _('Passkey')
|
|
Custom = 'mfa_custom', _('Custom')
|
|
|
|
|
|
FACE_CONTEXT_CACHE_KEY_PREFIX = "FACE_CONTEXT"
|
|
FACE_CONTEXT_CACHE_TTL = 60
|
|
FACE_SESSION_KEY = "face_token"
|
|
|
|
|
|
class FaceMonitorActionChoices(TextChoices):
|
|
Verify = 'verify', 'verify'
|
|
Pause = 'pause', 'pause'
|
|
Resume = 'resume', 'resume'
|
|
|
|
|
|
class ConnectionTokenType(TextChoices):
|
|
ADMIN = 'admin', 'Admin' # 管理员 Token, 可以访问所有资源
|
|
SUPER = 'super', 'Super' # 超级 Token, 可以为不同用户生成的 Token, 遵守用户 Token 的限制
|
|
USER = 'user', 'User' # 用户 Token, 只能访问指定资源
|