U (Kf@s>ddlTddlmZddlmZmZmZGdddejZdS))*) cmf_session)datetime timedeltatimezonecseZdZiZeeje j ddgZ e ed<ej feZ edddZeedddZded d d ZddZededddZfddZZS) CmfSessionZcmfZ templatesloader)returncCs|jjdd}t|S)N:)idvaluesplitcmfutilZcrypt)selfmessager./cmf/models/cmf_session.py get_token szCmfSession.get_tokencCszt|}WntdYdSXtjjd|dddgd}|rtt j }||j t |j jdkr|d g|j|}|rtjd d }|jj|_|jj|_|jj|_d|_d |_td |jd |jd|j||fSdS)NuDНе удалось расшифровать токен сессии)NNz CmfSession:Frplugin)r Zexpiredfields)Zsecondszplugin.plugin.*T)emptyzfrom_session_token: jwt is ok, z, z , is_local=)rdecryptgdebugmodelsrgetrnowrZutcZ reauth_daterZaccess_token_expires_inr load_fieldsrZ refresh_tokenCmfAuth user_loginZloginZ user_emailemailZ user_scopeZscopeZjwt_is_supportZjwt_is_match_org)clsZ session_tokenZdecrypted_tokensessionrobjrrr from_tokens*        "zCmfSession.from_tokenNany)two_factor_optcs.fdd}fdd}ddldddgtjjjd d d gd jsjtd ddS|sv}|r*j rj j  dkrtddj j  dSd fddt dD_j |dkr||n"|dkr|n|dkr*|dS)NcsXdksdkrTjjs0tdddddStj}|jjjjddS)Nr'phoneУ абонента u. не указан номер телефонаTabortu& ваш проверочный код.) two_factorr) cmf_alertrZCmfPluginSMSGateZget_local_smsgate send_messageZnumbersms_code)Zsms_gatemethodpersonrrrsend_sms,s  z*CmfSession.tfa_send_code..send_smscspdksdkrljjs0tdddddSjd}|jjd}tj }|j jjj |d d dS) Nr'r"r*u не указан emailTr+z tfa_mail.html)Ztfa_coder3uJКод безопасности для учетной записи EvaTeam)Zsubject) r-r"r. _jinja_envZ get_templateZrenderr0rZCmfPluginMailBoxZget_local_mailboxr/r)templateZ email_bodyZmail_boxr1rr send_email4s  z,CmfSession.tfa_send_code..send_emailr sms_send_timer0user_id two_factor.*two_factor.two_factor_optrr ruУ пользователя u не настроена 2FAuKСледующая отправка будет доступна через c3s|]}tddVqdS)r N)strZrandint).0_)randomrr Nsz+CmfSession.tfa_send_code..r'Zsmsr")rCrr CmfPersonrr9r-r.get_two_factor_optr8rZ total_secondsjoinranger0set_nowsave)rr(r2r4r7r)r2r3rCrr tfa_send_code+s4     zCmfSession.tfa_send_codecCsddlm}|jrdS|jtjjjkr.tj}ntj j |jdddgd}| r|j r`tj js`dSdtji}||}ttjd|}tj d d |jd <d |jd <d|jd<|SdS)Nr) urlencodeis_adminZ is_supportr;r<Znext_urlz/auth/two-factor?ZOriginrzAccess-Control-Allow-Origintruez Access-Control-Allow-CredentialszContent-Type, x-ijtzAccess-Control-Allow-Headers)Z urllib.parserMcheckedr9rZ current_userr rrrFrrGrNZglobal_settingsZtwo_factor_adminZrequestZurlZredirectconfigZAUTH_SERVER_URLZheaders)rrMr3paramsZqsrrrrtfa_check_two_factorYs&    zCmfSession.tfa_check_two_factorr))codec Csddl}tjjtjjddgd}d}|dkrTdD]"}t|j|r0| dd}qTq0|sft d|tjj d 7_ tjj tjj|k}rd tj_nD|jjrt||jj}W5QRX||}rd tj_|rt|j|d d |jtj|S) Nrr:rr<F)Zapplication_verifiedZemail_verifiedZphone_verifiedrBuНеобходимо указать метод авторизации по которому происходит проверка method=r TZ _verified)pyotprrFrrr$r9getattrr-rAssertionErrorZ sms_try_countZ sms_try_timerJr0rPZ topt_secretrZ disable_aclZTOTPrZverifysetattrrK)rUr2rVr3resultmZtotprrrtfa_check_codems.      zCmfSession.tfa_check_codec s<tjjddt|jt|jddd|j|jd tj||S)NZlogin_successedr okTr ) ZoperateZcmf_model_nameZ cmf_authorparentZ result_statusZcurrent_transactionZsecurity_level parent_nameZ parent_code)rZCmfAuditZ audit_eventr@r9r!superrK)rargskwargs __class__rrrKszCmfSession.save)Nr')r))__name__ __module__ __qualname__Z_optionsZjinja2ZFileSystemLoaderospathrHrQZ PROJECT_DIRZ_loaderZ Environmentr5r@r classmethodr&rLrT staticmethodr\rK __classcell__rrrcrrs .rN)Z cmf.includerrrrrrrrrrs