|
|
|
|
|
|
|
|
# Copyright (C) 2012-2023 RhodeCode GmbH
|
|
|
#
|
|
|
# This program is free software: you can redistribute it and/or modify
|
|
|
# it under the terms of the GNU Affero General Public License, version 3
|
|
|
# (only), as published by the Free Software Foundation.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
#
|
|
|
# This program is dual-licensed. If you wish to learn more about the
|
|
|
# RhodeCode Enterprise Edition, including its added features, Support services,
|
|
|
# and proprietary license terms, please see https://rhodecode.com/licenses/
|
|
|
|
|
|
import logging
|
|
|
import importlib
|
|
|
|
|
|
from pyramid.authentication import SessionAuthenticationHelper
|
|
|
|
|
|
from rhodecode.authentication.registry import AuthenticationPluginRegistry
|
|
|
from rhodecode.authentication.routes import root_factory
|
|
|
from rhodecode.authentication.routes import AuthnRootResource
|
|
|
from rhodecode.apps._base import ADMIN_PREFIX
|
|
|
from rhodecode.model.settings import SettingsModel
|
|
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
legacy_plugin_prefix = 'py:'
|
|
|
plugin_default_auth_ttl = 30
|
|
|
|
|
|
|
|
|
def _import_legacy_plugin(plugin_id):
|
|
|
module_name = plugin_id.split(legacy_plugin_prefix, 1)[-1]
|
|
|
module = importlib.import_module(module_name)
|
|
|
return module.plugin_factory(plugin_id=plugin_id)
|
|
|
|
|
|
|
|
|
def discover_legacy_plugins(config, prefix=legacy_plugin_prefix):
|
|
|
"""
|
|
|
Function that imports the legacy plugins stored in the 'auth_plugins'
|
|
|
setting in database which are using the specified prefix. Normally 'py:' is
|
|
|
used for the legacy plugins.
|
|
|
"""
|
|
|
|
|
|
log.debug('authentication: running legacy plugin discovery for prefix %s',
|
|
|
legacy_plugin_prefix)
|
|
|
try:
|
|
|
auth_plugins = SettingsModel().get_setting_by_name('auth_plugins')
|
|
|
enabled_plugins = auth_plugins.app_settings_value
|
|
|
legacy_plugins = [id_ for id_ in enabled_plugins if id_.startswith(prefix)]
|
|
|
except Exception:
|
|
|
legacy_plugins = []
|
|
|
|
|
|
for plugin_id in legacy_plugins:
|
|
|
log.debug('Legacy plugin discovered: "%s"', plugin_id)
|
|
|
try:
|
|
|
plugin = _import_legacy_plugin(plugin_id)
|
|
|
config.include(plugin.includeme)
|
|
|
except Exception as e:
|
|
|
log.exception(
|
|
|
'Exception while loading legacy authentication plugin '
|
|
|
'"%s": %s', plugin_id, e)
|
|
|
|
|
|
|
|
|
def includeme(config):
|
|
|
|
|
|
config.set_security_policy(SessionAuthenticationHelper())
|
|
|
|
|
|
# Create authentication plugin registry and add it to the pyramid registry.
|
|
|
authn_registry = AuthenticationPluginRegistry(config.get_settings())
|
|
|
config.add_directive('add_authn_plugin', authn_registry.add_authn_plugin)
|
|
|
config.registry.registerUtility(authn_registry)
|
|
|
|
|
|
# Create authentication traversal root resource.
|
|
|
authn_root_resource = root_factory()
|
|
|
config.add_directive('add_authn_resource',
|
|
|
authn_root_resource.add_authn_resource)
|
|
|
|
|
|
# Add the authentication traversal route.
|
|
|
config.add_route('auth_home',
|
|
|
ADMIN_PREFIX + '/auth*traverse',
|
|
|
factory=root_factory)
|
|
|
# Add the authentication settings root views.
|
|
|
config.add_view('rhodecode.authentication.views.AuthSettingsView',
|
|
|
attr='index',
|
|
|
request_method='GET',
|
|
|
route_name='auth_home',
|
|
|
context=AuthnRootResource)
|
|
|
config.add_view('rhodecode.authentication.views.AuthSettingsView',
|
|
|
attr='auth_settings',
|
|
|
request_method='POST',
|
|
|
route_name='auth_home',
|
|
|
context=AuthnRootResource)
|
|
|
|
