U *fx@s>ddlTddlmZddlmZmZmZGdddejZdS))*) cmf_session)datetime timedeltatimezonecseZdZiZeeje j ddgZ e ed<ej feZ edddZeedddZded d d Zd dZededddZfddZZS) CmfSessionZcmfZ templatesloader)returncCs|jjdd}t|S)N:)idvaluesplitcmfutilZcrypt)selfmessager./cmf/models/cmf_session.py get_token szCmfSession.get_tokencCszt|}WntdYdSXtjjd|dddgd}|rtt j }||j t |j jdkr|d g|j|}|rtjd d }|jj|_|jj|_|jj|_d|_d |_td |jd |jd|j||fSdS)NuDНе удалось расшифровать токен сессии)NNz CmfSession:Frplugin)r Zexpiredfields)Zsecondszplugin.plugin.*T)emptyzfrom_session_token: jwt is ok, z, z , is_local=)rdecryptgdebugmodelsrgetrnowrZutcZ reauth_daterZaccess_token_expires_inr load_fieldsrZ refresh_tokenCmfAuth user_loginZloginZ user_emailemailZ user_scopeZscopeZjwt_is_supportZjwt_is_match_org)clsZ session_tokenZdecrypted_tokensessionrobjrrr from_tokens*        "zCmfSession.from_tokenN)two_factor_optcs*fdd}fdd}ddldddgtjjjd d d gd jsftd ddS|sr}|r&j rj j  dkrtddj j  dSd fddt dD_j |dkr||n"|dkr|n|dkr&|dS)NcsHjjs tdddddStj}|jjjjddS)NУ абонента u. не указан номер телефонаTabortu& ваш проверочный код.) two_factorphone cmf_alertrZCmfPluginSMSGateZget_local_smsgate send_messageZnumbersms_code)Zsms_gatepersonrrrsend_sms,s  z*CmfSession.tfa_send_code..send_smscs`jjs tdddddSjd}|jjd}tj }|j jjj |dddS) Nr(u не указан emailTr)z tfa_mail.html)Ztfa_coder1uJКод безопасности для учетной записи EvaTeam)Zsubject) r+r"r- _jinja_envZ get_templateZrenderr/rZCmfPluginMailBoxZget_local_mailboxr.r)templateZ email_bodyZmail_boxr0rr send_email3s  z,CmfSession.tfa_send_code..send_emailr sms_send_timer/user_id two_factor.*two_factor.two_factor_optrr ruУ пользователя u не настроена 2FAuKСледующая отправка будет доступна через c3s|]}tddVqdS)r N)strZrandint).0_)randomrr Lsz+CmfSession.tfa_send_code..anyZsmsr")rArr CmfPersonrr7r+r-get_two_factor_optr6rZ total_secondsjoinranger/set_nowsave)rr'r2r5r)r1rArr tfa_send_code+s4     zCmfSession.tfa_send_codecCsddlm}|jrdS|jtjjjkr.tj}ntj j |jdddgd}| r|j r`tj js`dSdtji}||}ttjd|}tj d d |jd <d |jd <d|jd<|SdS)Nr) urlencodeis_adminZ is_supportr9r:Znext_urlz/auth/two-factor?ZOriginrzAccess-Control-Allow-Origintruez Access-Control-Allow-CredentialszContent-Type, x-ijtzAccess-Control-Allow-Headers)Z urllib.parserLcheckedr7rZ current_userr rrrErrFrMZglobal_settingsZtwo_factor_adminZrequestZurlZredirectconfigZAUTH_SERVER_URLZheaders)rrLr1paramsZqsrrrrtfa_check_two_factorWs&    zCmfSession.tfa_check_two_factorr,)codec Csddl}tjjd7_tjjtjjtjj ddgd}tjj |krRdtj_ n@|j j rt||j j }W5QRX||rdtj_ tjj rt|j |dd|j tjtjj jS)Nrr r8rr:TZ _verified)pyotprr$Z sms_try_countZ sms_try_timerIrrErr7r/rOr+Z topt_secretrZ disable_aclZTOTPrZverifysetattrrJr)rTmethodrUr1Ztotprrrtfa_check_codeks        zCmfSession.tfa_check_codec s<tjjddt|jt|jddd|j|jd tj||S)NZlogin_successedr okTr ) ZoperateZcmf_model_nameZ cmf_authorparentZ result_statusZcurrent_transactionZsecurity_level parent_nameZ parent_code)rZCmfAuditZ audit_eventr>r7r!superrJ)rargskwargs __class__rrrJszCmfSession.save)N)r,)__name__ __module__ __qualname__Z_optionsZjinja2ZFileSystemLoaderospathrGrPZ PROJECT_DIRZ_loaderZ Environmentr3r>r classmethodr&rKrS staticmethodrXrJ __classcell__rrr_rrs ,rN)Z cmf.includerrrrrrrrrrs