U 8[Se@s>ddlTddlmZddlmZmZmZGdddejZdS))*) cmf_session)datetime timedeltatimezonecseZdZiZeeje j ddgZ e ed<ej feZ edddZeedddZded d d Zd dZeedddZfddZZS) CmfSessionZcmfZ templatesloader)returncCs|jjdd}t|S)N:)idvaluesplitcmfutilZcrypt)selfmessager./cmf/models/cmf_session.py get_token szCmfSession.get_tokencCszt|}WntdYdSXtjjd|dddgd}|rtt j }||j t |j jdkr|d g|j|}|rtjd d }|jj|_|jj|_|jj|_d|_d |_td |jd |jd|j||fSdS)NuDНе удалось расшифровать токен сессии)NNz CmfSession:Frplugin)r Zexpiredfields)Zsecondszplugin.plugin.*T)emptyzfrom_session_token: jwt is ok, z, z , is_local=)rdecryptgdebugmodelsrgetrnowrZutcZ reauth_daterZaccess_token_expires_inr load_fieldsrZ refresh_tokenCmfAuth user_loginZloginZ user_emailemailZ user_scopeZscopeZjwt_is_supportZjwt_is_match_org)clsZ session_tokenZdecrypted_tokensessionrobjrrr from_tokens*        "zCmfSession.from_tokenN)two_factor_optcs*fdd}fdd}ddldddgtjjjd d d gd jsftd ddS|sr}|r&j rj j  dkrtddj j  dSd fddt dD_j |dkr||n"|dkr|n|dkr&|dS)NcsHjjs tdddddStj}|jjjjddS)NУ абонента u. не указан номер телефонаTabortu& ваш проверочный код.) two_factorZphone cmf_alertrZCmfPluginSMSGateZget_local_smsgate send_messageZnumbersms_code)Zsms_gatepersonrrrsend_sms,s  z*CmfSession.tfa_send_code..send_smscs`jjs tdddddSjd}|jjd}tj }|j jjj |dddS) Nr(u не указан emailTr)z tfa_mail.html)Ztfa_coder0uJКод безопасности для учетной записи EvaTeam)Zsubject) r+r"r, _jinja_envZ get_templateZrenderr.rZCmfPluginMailBoxZget_local_mailboxr-r)templateZ email_bodyZmail_boxr/rr send_email3s  z,CmfSession.tfa_send_code..send_emailr sms_send_timer.user_id two_factor.*two_factor.two_factor_optrr ruУ пользователя u не настроена 2FAuKСледующая отправка будет доступна через c3s|]}tddVqdS)r N)strZrandint).0_)randomrr Lsz+CmfSession.tfa_send_code..anyZsmsr")r@rr CmfPersonrr6r+r,get_two_factor_optr5rZ total_secondsjoinranger.set_nowsave)rr'r1r4r)r0r@rr tfa_send_code+s4     zCmfSession.tfa_send_codecCsddlm}|jrdS|jtjjjkr.tj}ntj j |jdddgd}| r|j r`tj js`dSdtji}||}ttjd|}tj d d |jd <d |jd <d|jd<|SdS)Nr) urlencodeis_adminZ is_supportr8r9Znext_urlz/auth/two-factor?ZOriginrzAccess-Control-Allow-Origintruez Access-Control-Allow-CredentialszContent-Type, x-ijtzAccess-Control-Allow-Headers)Z urllib.parserKcheckedr6rZ current_userr rrrDrrErLZglobal_settingsZtwo_factor_adminZrequestZurlZredirectconfigZAUTH_SERVER_URLZheaders)rrKr0paramsZqsrrrrtfa_check_two_factorWs&    zCmfSession.tfa_check_two_factor)codec Csddl}tjjd7_tjjtjj|kr:dtj_nXtj j tjj ddgd}|j j rt||j j }W5QRX||rdtj_tjtjjjS)Nrr Tr7rr9)pyotprr$Z sms_try_countZ sms_try_timerHr.rNrrDrr6r+Z topt_secretrZ disable_aclZTOTPrZverifyrIr)rSrTr0Ztotprrrtfa_check_codeks      zCmfSession.tfa_check_codec s<tjjddt|jt|jddd|j|jd tj||S)NZlogin_successedr okTr ) ZoperateZcmf_model_nameZ cmf_authorparentZ result_statusZ celery_skipZsecurity_level parent_nameZ parent_code)rZCmfAuditZ audit_eventr=r6r!superrI)rargskwargs __class__rrrI|szCmfSession.save)N)__name__ __module__ __qualname__Z_optionsZjinja2ZFileSystemLoaderospathrFrOZ PROJECT_DIRZ_loaderZ Environmentr2r=r classmethodr&rJrR staticmethodrUrI __classcell__rrr\rrs ,rN)Z cmf.includerrrrrrrrrrs