rewrite auth log
This commit is contained in:
		
							parent
							
								
									ac7b827c36
								
							
						
					
					
						commit
						de08cc897e
					
				@ -156,6 +156,7 @@ def build_config(_config_file):
 | 
			
		||||
 | 
			
		||||
            elif section == 'USER_MANAGER':
 | 
			
		||||
                CONFIG['USER_MANAGER'].update({
 | 
			
		||||
                    'THIS_SERVER_NAME': config.get(section, 'THIS_SERVER_NAME'),
 | 
			
		||||
                    'URL': config.get(section, 'URL'),
 | 
			
		||||
                    'APPEND_INT': config.getint(section, 'APPEND_INT'),
 | 
			
		||||
                    'SHARED_SECRET': config.get(section, 'SHARED_SECRET'),
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										38
									
								
								hblink.py
									
									
									
									
									
								
							
							
						
						
									
										38
									
								
								hblink.py
									
									
									
									
									
								
							@ -254,14 +254,16 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
            self.datagramReceived = self.peer_datagramReceived
 | 
			
		||||
            self.dereg = self.peer_dereg
 | 
			
		||||
            
 | 
			
		||||
    def check_user_man(self, _id):
 | 
			
		||||
    def check_user_man(self, _id, server_name, peer_ip):
 | 
			
		||||
        #Change this to a config value
 | 
			
		||||
        user_man_url = self._CONFIG['USER_MANAGER']['URL']
 | 
			
		||||
        shared_secret = self._CONFIG['USER_MANAGER']['SHARED_SECRET']
 | 
			
		||||
        #print(int(str(int_id(_id))[:7]))
 | 
			
		||||
        auth_check = {
 | 
			
		||||
        'secret':shared_secret,
 | 
			
		||||
        'login_id':int(str(int_id(_id))[:7]),
 | 
			
		||||
        'secret':shared_secret
 | 
			
		||||
        'login_ip': peer_ip,
 | 
			
		||||
        'login_server': server_name
 | 
			
		||||
        }
 | 
			
		||||
        json_object = json.dumps(auth_check, indent = 4)
 | 
			
		||||
        try:
 | 
			
		||||
@ -271,6 +273,27 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
        except requests.ConnectionError:
 | 
			
		||||
            return {'allow':True}
 | 
			
		||||
 | 
			
		||||
    def send_login_conf(self, _id, server_name, peer_ip, old_auth):
 | 
			
		||||
        #Change this to a config value
 | 
			
		||||
        user_man_url = self._CONFIG['USER_MANAGER']['URL']
 | 
			
		||||
        shared_secret = self._CONFIG['USER_MANAGER']['SHARED_SECRET']
 | 
			
		||||
        #print(int(str(int_id(_id))[:7]))
 | 
			
		||||
        auth_conf = {
 | 
			
		||||
        'secret':shared_secret,
 | 
			
		||||
        'login_id':int(str(int_id(_id))[:7]),
 | 
			
		||||
        'login_ip': peer_ip,
 | 
			
		||||
        'login_server': server_name,
 | 
			
		||||
        'login_confirmed': True,
 | 
			
		||||
        'old_auth': old_auth
 | 
			
		||||
        }
 | 
			
		||||
        json_object = json.dumps(auth_conf, indent = 4)
 | 
			
		||||
        #try:
 | 
			
		||||
        req = requests.post(user_man_url, data=json_object, headers={'Content-Type': 'application/json'})
 | 
			
		||||
        #    resp = json.loads(req.text)
 | 
			
		||||
        #return resp
 | 
			
		||||
        #except requests.ConnectionError:
 | 
			
		||||
        #    return {'allow':True}
 | 
			
		||||
 | 
			
		||||
    def calc_passphrase(self, peer_id, _salt_str):
 | 
			
		||||
        burn_id = ast.literal_eval(os.popen('cat ' + self._CONFIG['USER_MANAGER']['BURN_FILE']).read())
 | 
			
		||||
        peer_id_trimmed = int(str(int_id(peer_id))[:7])
 | 
			
		||||
@ -416,9 +439,6 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
        # Keep This Line Commented Unless HEAVILY Debugging!
 | 
			
		||||
        # logger.debug('(%s) RX packet from %s -- %s', self._system, _sockaddr, ahex(_data))
 | 
			
		||||
 | 
			
		||||
        # Place holder for DB function
 | 
			
		||||
        user_db = ast.literal_eval(os.popen('cat ./db.txt').read())
 | 
			
		||||
 | 
			
		||||
        # Extract the command, which is various length, all but one 4 significant characters -- RPTCL
 | 
			
		||||
        _command = _data[:4]
 | 
			
		||||
 | 
			
		||||
@ -497,7 +517,7 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
                # Check for valid Radio ID
 | 
			
		||||
                #print(self.check_user_man(_peer_id))
 | 
			
		||||
                if self._config['USE_USER_MAN'] == True:
 | 
			
		||||
                    self.ums_response = self.check_user_man(_peer_id)
 | 
			
		||||
                    self.ums_response = self.check_user_man(_peer_id, self._CONFIG['USER_MANAGER']['THIS_SERVER_NAME'], _sockaddr[0])
 | 
			
		||||
##                    print(self.ums_response)
 | 
			
		||||
                    if acl_check(_peer_id, self._CONFIG['GLOBAL']['REG_ACL']) and self.ums_response['allow']:
 | 
			
		||||
                        user_auth = self.ums_response['allow']
 | 
			
		||||
@ -540,6 +560,7 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
                    self.send_peer(_peer_id, b''.join([RPTACK, _salt_str]))
 | 
			
		||||
                    self._peers[_peer_id]['CONNECTION'] = 'CHALLENGE_SENT'
 | 
			
		||||
                    logger.info('(%s) Sent Challenge Response to %s for login: %s', self._system, int_id(_peer_id), self._peers[_peer_id]['SALT'])
 | 
			
		||||
##                    print(self._peers)
 | 
			
		||||
                else:
 | 
			
		||||
                    self.transport.write(b''.join([MSTNAK, _peer_id]), _sockaddr)
 | 
			
		||||
                    logger.warning('(%s) Invalid Login from %s Radio ID: %s Denied by Registation ACL', self._system, _sockaddr[0], int_id(_peer_id))
 | 
			
		||||
@ -572,6 +593,11 @@ class HBSYSTEM(DatagramProtocol):
 | 
			
		||||
                    _this_peer['CONNECTION'] = 'WAITING_CONFIG'
 | 
			
		||||
                    self.send_peer(_peer_id, b''.join([RPTACK, _peer_id]))
 | 
			
		||||
                    logger.info('(%s) Peer %s has completed the login exchange successfully', self._system, _this_peer['RADIO_ID'])
 | 
			
		||||
                    #self.send_login_conf(_peer_id, self._CONFIG['USER_MANAGER']['THIS_SERVER_NAME'], _sockaddr[0], False)
 | 
			
		||||
                    if _sent_hash == _ocalc_hash:
 | 
			
		||||
                        self.send_login_conf(_peer_id, self._CONFIG['USER_MANAGER']['THIS_SERVER_NAME'], _sockaddr[0], True)
 | 
			
		||||
                    else:
 | 
			
		||||
                        self.send_login_conf(_peer_id, self._CONFIG['USER_MANAGER']['THIS_SERVER_NAME'], _sockaddr[0], False)
 | 
			
		||||
                else:
 | 
			
		||||
                    logger.info('(%s) Peer %s has FAILED the login exchange successfully', self._system, _this_peer['RADIO_ID'])
 | 
			
		||||
                    self.transport.write(b''.join([MSTNAK, _peer_id]), _sockaddr)
 | 
			
		||||
 | 
			
		||||
@ -59,7 +59,7 @@ def get_ids(callsign):
 | 
			
		||||
        except:
 | 
			
		||||
            city = result['results'][0]['country']
 | 
			
		||||
        for i in result['results']:
 | 
			
		||||
             id_list[i['id']] = ''
 | 
			
		||||
             id_list[i['id']] = 0
 | 
			
		||||
        return str([id_list, f_name, l_name, city])
 | 
			
		||||
    except:
 | 
			
		||||
        return str([{}, '', '', ''])
 | 
			
		||||
@ -146,6 +146,7 @@ def create_app():
 | 
			
		||||
        last_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        dmr_ids = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        city = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        notes = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        #Used for initial approval
 | 
			
		||||
        initial_admin_approved = db.Column('initial_admin_approved', db.Boolean(), nullable=False, server_default='1')
 | 
			
		||||
        # Define the relationship to Role via UserRoles
 | 
			
		||||
@ -167,6 +168,17 @@ def create_app():
 | 
			
		||||
        __tablename__ = 'burn_list'
 | 
			
		||||
        dmr_id = db.Column(db.Integer(), unique=True, primary_key=True)
 | 
			
		||||
        version = db.Column(db.Integer(), primary_key=True)
 | 
			
		||||
    class AuthLog(db.Model):
 | 
			
		||||
        __tablename__ = 'auth_log'
 | 
			
		||||
        login_dmr_id = db.Column(db.Integer(), primary_key=True)
 | 
			
		||||
        login_time = db.Column(db.DateTime(), primary_key=True)
 | 
			
		||||
        peer_ip = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        server_name = db.Column(db.Integer(), primary_key=True)
 | 
			
		||||
        login_auth_method = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        portal_username = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        login_type = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
 | 
			
		||||
        
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    # Customize Flask-User
 | 
			
		||||
    class CustomUserManager(UserManager):
 | 
			
		||||
@ -236,7 +248,8 @@ def create_app():
 | 
			
		||||
            email='admin@no.reply',
 | 
			
		||||
            email_confirmed_at=datetime.datetime.utcnow(),
 | 
			
		||||
            password=user_manager.hash_password('admin'),
 | 
			
		||||
            initial_admin_approved = True
 | 
			
		||||
            initial_admin_approved = True,
 | 
			
		||||
            notes='Default admin account created during installation.'
 | 
			
		||||
        )
 | 
			
		||||
        user.roles.append(Role(name='Admin'))
 | 
			
		||||
        user.roles.append(Role(name='User'))
 | 
			
		||||
@ -481,37 +494,37 @@ def create_app():
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    @app.route('/mmdvm_log', methods=['POST', 'GET'])
 | 
			
		||||
    @login_required    # User must be authenticated
 | 
			
		||||
    @roles_required('Admin')
 | 
			
		||||
    def mmdvm_auth_list():
 | 
			
		||||
        display_number = 200
 | 
			
		||||
        content = '''
 | 
			
		||||
<p style="text-align: center;"><strong>Last ''' + str(display_number) + ''' logins or attempts.</strong></p>
 | 
			
		||||
<table style="width: 500px; margin-left: auto; margin-right: auto;" border="1">
 | 
			
		||||
<tbody>
 | 
			
		||||
<tr>
 | 
			
		||||
<td style="text-align: center;"><strong>User</strong></td>
 | 
			
		||||
<td style="text-align: center;"><strong>DMR ID</strong></td>
 | 
			
		||||
<td style="text-align: center;"><strong>Authentication</strong></td>
 | 
			
		||||
<td style="text-align: center;"><strong>Time</strong></td>
 | 
			
		||||
</tr> \n'''
 | 
			
		||||
        mmdvm_logins.reverse()
 | 
			
		||||
        for i in mmdvm_logins:
 | 
			
		||||
            print(i)
 | 
			
		||||
            if display_number == 0:
 | 
			
		||||
                break
 | 
			
		||||
            else:
 | 
			
		||||
                content = content + '''<tr>
 | 
			
		||||
<td style="text-align: center;">''' + str(i[1]) + '''</td>
 | 
			
		||||
<td style="text-align: center;">''' + str(i[0]) + '''</td>
 | 
			
		||||
<td style="text-align: center;">Value: ''' + str(i[2]) + '''\n<br />DB: ''' + str(i[3]) + '''</td>
 | 
			
		||||
<td style="text-align: center;">''' + datetime.datetime.fromtimestamp(i[4]).strftime(time_format) + '''</td>
 | 
			
		||||
</tr> ''' + '\n'
 | 
			
		||||
                display_number = display_number - 1
 | 
			
		||||
        mmdvm_logins.reverse()
 | 
			
		||||
        content = content + '</tbody></table>'
 | 
			
		||||
        return render_template('flask_user_layout.html', markup_content = Markup(content))
 | 
			
		||||
##    @app.route('/mmdvm_log', methods=['POST', 'GET'])
 | 
			
		||||
##    @login_required    # User must be authenticated
 | 
			
		||||
##    @roles_required('Admin')
 | 
			
		||||
##    def mmdvm_auth_list():
 | 
			
		||||
##        display_number = 200
 | 
			
		||||
##        content = '''
 | 
			
		||||
##<p style="text-align: center;"><strong>Last ''' + str(display_number) + ''' logins or attempts.</strong></p>
 | 
			
		||||
##<table style="width: 500px; margin-left: auto; margin-right: auto;" border="1">
 | 
			
		||||
##<tbody>
 | 
			
		||||
##<tr>
 | 
			
		||||
##<td style="text-align: center;"><strong>User</strong></td>
 | 
			
		||||
##<td style="text-align: center;"><strong>DMR ID</strong></td>
 | 
			
		||||
##<td style="text-align: center;"><strong>Authentication</strong></td>
 | 
			
		||||
##<td style="text-align: center;"><strong>Time</strong></td>
 | 
			
		||||
##</tr> \n'''
 | 
			
		||||
##        mmdvm_logins.reverse()
 | 
			
		||||
##        for i in mmdvm_logins:
 | 
			
		||||
##            print(i)
 | 
			
		||||
##            if display_number == 0:
 | 
			
		||||
##                break
 | 
			
		||||
##            else:
 | 
			
		||||
##                content = content + '''<tr>
 | 
			
		||||
##<td style="text-align: center;">''' + str(i[1]) + '''</td>
 | 
			
		||||
##<td style="text-align: center;">''' + str(i[0]) + '''</td>
 | 
			
		||||
##<td style="text-align: center;">Value: ''' + str(i[2]) + '''\n<br />DB: ''' + str(i[3]) + '''</td>
 | 
			
		||||
##<td style="text-align: center;">''' + datetime.datetime.fromtimestamp(i[4]).strftime(time_format) + '''</td>
 | 
			
		||||
##</tr> ''' + '\n'
 | 
			
		||||
##                display_number = display_number - 1
 | 
			
		||||
##        mmdvm_logins.reverse()
 | 
			
		||||
##        content = content + '</tbody></table>'
 | 
			
		||||
##        return render_template('flask_user_layout.html', markup_content = Markup(content))
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
@ -640,6 +653,9 @@ def create_app():
 | 
			
		||||
            if request.form.get('email') != edit_user.email:
 | 
			
		||||
                edit_user.email = request.form.get('email')
 | 
			
		||||
                content = content + '''<p style="text-align: center;">Changed email for user: <strong>''' + str(user) + ''' to ''' + request.form.get('email') + '''</strong></p>\n'''
 | 
			
		||||
            if request.form.get('notes') != edit_user.notes:
 | 
			
		||||
                edit_user.notes = request.form.get('notes')
 | 
			
		||||
                content = content + '''<p style="text-align: center;">Changed notes for user: <strong>''' + str(user) + '''</strong>.</p>\n'''
 | 
			
		||||
            if request.form.get('password') != '':
 | 
			
		||||
                edit_user.password = user_manager.hash_password(request.form.get('password'))
 | 
			
		||||
                content = content + '''<p style="text-align: center;">Changed password for user: <strong>''' + str(user) + '''</strong></p>\n'''
 | 
			
		||||
@ -757,6 +773,8 @@ def create_app():
 | 
			
		||||
 | 
			
		||||
<p style="text-align: center;"><strong><a href="email_user?callsign=''' + u.username + '''">Send user an email</a></strong></p>
 | 
			
		||||
 | 
			
		||||
<p style="text-align: center;"><strong><a href="auth_log?portal_username=''' + u.username + '''">View auth log for: ''' + u.username + '''</a></strong></p>
 | 
			
		||||
 | 
			
		||||
<td><form action="edit_user?callsign=''' + callsign + '''" method="POST">
 | 
			
		||||
<table style="margin-left: auto; margin-right: auto;">
 | 
			
		||||
<tbody>
 | 
			
		||||
@ -799,6 +817,12 @@ def create_app():
 | 
			
		||||
  <input type="text" id="dmr_ids" name="dmr_ids" value="''' + str(u.dmr_ids) + '''"><br>
 | 
			
		||||
</td></tr>
 | 
			
		||||
 | 
			
		||||
<tr style="height: 51.1667px;">
 | 
			
		||||
<td style="height: 51.1667px; text-align: center;">
 | 
			
		||||
<label for="message">Notes<br /></label></strong><br /><textarea cols="40" name="notes" rows="5" >''' + str(u.notes) + '''</textarea><br /><br />
 | 
			
		||||
</td></tr>
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
<tr style="height: 27px;">
 | 
			
		||||
<td style="text-align: center; height: 27px;"><input type="submit" value="Submit" /></td>
 | 
			
		||||
</tr>
 | 
			
		||||
@ -902,6 +926,111 @@ def create_app():
 | 
			
		||||
        except:
 | 
			
		||||
            return [False]
 | 
			
		||||
 | 
			
		||||
    @app.route('/auth_log', methods=['POST', 'GET'])
 | 
			
		||||
    @login_required    # User must be authenticated
 | 
			
		||||
    @roles_required('Admin')
 | 
			
		||||
    def all_auth_list():
 | 
			
		||||
        if request.args.get('flush_db') == 'true':
 | 
			
		||||
            content = '''<p style="text-align: center;"><strong>Flushed entire auth DB.</strong></strong></p>\n'''
 | 
			
		||||
            authlog_flush()
 | 
			
		||||
        elif request.args.get('portal_username'):
 | 
			
		||||
            a = AuthLog.query.filter_by(portal_username=request.args.get('portal_username')).all()
 | 
			
		||||
            content = '''
 | 
			
		||||
<p> </p>
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    <table style="width: 800px; margin-left: auto; margin-right: auto;" border="1">
 | 
			
		||||
    <tbody>
 | 
			
		||||
    <tr>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>DMR ID</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Portal Username</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Login IP</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Calculated Passphrase</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Server</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Time (UTC)</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Login Type</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    </tr> \n'''
 | 
			
		||||
            for i in a:
 | 
			
		||||
                content = content + '''
 | 
			
		||||
    <tr>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + str(i.login_dmr_id) + '''</strong></td>
 | 
			
		||||
    <td style="text-align: center;">''' + i.portal_username + '''</td>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + i.peer_ip + '''</strong></td>
 | 
			
		||||
    <td style="text-align: center;">''' + i.login_auth_method + '''</td>
 | 
			
		||||
    <td style="text-align: center;">''' + i.server_name + '''</td>
 | 
			
		||||
    <td style="text-align: center;">''' + str(i.login_time) + '''</td>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + str(i.login_type) + '''</strong></td>
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    </tr>
 | 
			
		||||
'''
 | 
			
		||||
            content = content + '</tbody></table>'
 | 
			
		||||
        else:
 | 
			
		||||
            a = AuthLog.query.all()
 | 
			
		||||
            content = '''
 | 
			
		||||
    <p> </p>
 | 
			
		||||
    <p style="text-align: center;"><strong><a href="auth_log?flush_db=true">Flush entire auth log</a></strong></p>
 | 
			
		||||
    <p> </p>
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    <table style="width: 800px; margin-left: auto; margin-right: auto;" border="1">
 | 
			
		||||
    <tbody>
 | 
			
		||||
    <tr>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>DMR ID</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Portal Username</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Login IP</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Calculated Passphrase</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Server</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Time (UTC)</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    <td style="text-align: center;">
 | 
			
		||||
    <h4>Login Type</h4>
 | 
			
		||||
    </td>
 | 
			
		||||
    </tr> \n'''
 | 
			
		||||
            for i in a:
 | 
			
		||||
                content = content + '''
 | 
			
		||||
    <tr>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + str(i.login_dmr_id) + '''</strong></td>
 | 
			
		||||
    <td style="text-align: center;"><a href="auth_log?portal_username=''' + i.portal_username + '''">''' + i.portal_username + '''</a></td>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + i.peer_ip + '''</strong></td>
 | 
			
		||||
    <td style="text-align: center;">''' + i.login_auth_method + '''</td>
 | 
			
		||||
    <td style="text-align: center;">''' + i.server_name + '''</td>
 | 
			
		||||
    <td style="text-align: center;">''' + str(i.login_time) + '''</td>
 | 
			
		||||
    <td style="text-align: center;"><strong>''' + str(i.login_type) + '''</strong></td>
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    </tr>
 | 
			
		||||
    '''
 | 
			
		||||
 | 
			
		||||
            content = content + '</tbody></table>'
 | 
			
		||||
        return render_template('flask_user_layout.html', markup_content = Markup(content))
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
    @app.route('/test')
 | 
			
		||||
    def test_peer():
 | 
			
		||||
        #user = User(
 | 
			
		||||
@ -995,18 +1124,20 @@ def create_app():
 | 
			
		||||
##        db.session.commit()
 | 
			
		||||
##
 | 
			
		||||
       #generate dict
 | 
			
		||||
        b = BurnList.query.all()
 | 
			
		||||
        print(b)
 | 
			
		||||
        burn_dict = {}
 | 
			
		||||
        for i in b:
 | 
			
		||||
            print(i.dmr_id)
 | 
			
		||||
            burn_dict[i.dmr_id] = i.version
 | 
			
		||||
        content = burn_dict
 | 
			
		||||
        # delete
 | 
			
		||||
##        delete_b = BurnList.query.filter_by(dmr_id=3153591).first()
 | 
			
		||||
##        db.session.delete(delete_b)
 | 
			
		||||
##        db.session.commit()
 | 
			
		||||
        
 | 
			
		||||
##        b = BurnList.query.all()
 | 
			
		||||
##        print(b)
 | 
			
		||||
##        burn_dict = {}
 | 
			
		||||
##        for i in b:
 | 
			
		||||
##            print(i.dmr_id)
 | 
			
		||||
##            burn_dict[i.dmr_id] = i.version
 | 
			
		||||
##        content = burn_dict
 | 
			
		||||
##        # delete
 | 
			
		||||
####        delete_b = BurnList.query.filter_by(dmr_id=3153591).first()
 | 
			
		||||
####        db.session.delete(delete_b)
 | 
			
		||||
####        db.session.commit()
 | 
			
		||||
##        a = AuthLog.query.all()
 | 
			
		||||
##        print(a)
 | 
			
		||||
##        authlog_flush()  
 | 
			
		||||
        return render_template('flask_user_layout.html', markup_content = Markup(content))
 | 
			
		||||
 | 
			
		||||
    def get_burnlist():
 | 
			
		||||
@ -1035,6 +1166,23 @@ def create_app():
 | 
			
		||||
        db.session.delete(delete_b)
 | 
			
		||||
        db.session.commit()
 | 
			
		||||
 | 
			
		||||
    def authlog_add(_dmr_id, _peer_ip, _server_name, _portal_username, _auth_method, _login_type):
 | 
			
		||||
        auth_log_add = AuthLog(
 | 
			
		||||
            login_dmr_id=_dmr_id,
 | 
			
		||||
            login_time=datetime.datetime.utcnow(),
 | 
			
		||||
            portal_username = _portal_username,
 | 
			
		||||
            peer_ip = _peer_ip,
 | 
			
		||||
            server_name = _server_name,
 | 
			
		||||
            login_auth_method=_auth_method,
 | 
			
		||||
            login_type=_login_type
 | 
			
		||||
            )
 | 
			
		||||
        db.session.add(auth_log_add)
 | 
			
		||||
        db.session.commit()
 | 
			
		||||
        
 | 
			
		||||
    def authlog_flush():
 | 
			
		||||
        AuthLog.query.delete()
 | 
			
		||||
        db.session.commit()
 | 
			
		||||
         
 | 
			
		||||
 | 
			
		||||
    @app.route('/add_user', methods=['POST', 'GET'])
 | 
			
		||||
    @login_required
 | 
			
		||||
@ -1107,26 +1255,28 @@ def create_app():
 | 
			
		||||
    @app.route('/auth', methods=['POST'])
 | 
			
		||||
    def auth():
 | 
			
		||||
        hblink_req = request.json
 | 
			
		||||
##        print((hblink_req))
 | 
			
		||||
        print((hblink_req))
 | 
			
		||||
        if hblink_req['secret'] in shared_secrets:
 | 
			
		||||
            if 'login_id' in hblink_req:
 | 
			
		||||
            if 'login_id' in hblink_req and 'login_confirmed' not in hblink_req:
 | 
			
		||||
                if type(hblink_req['login_id']) == int:
 | 
			
		||||
                    if authorized_peer(hblink_req['login_id'])[0]:
 | 
			
		||||
                        if isinstance(authorized_peer(hblink_req['login_id'])[1], int) == True:
 | 
			
		||||
                            mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], 'Calculated', time.time()])
 | 
			
		||||
                            #mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], hblink_req['login_ip'], time.time()])
 | 
			
		||||
                            authlog_add(hblink_req['login_id'], hblink_req['login_ip'], hblink_req['login_server'], authorized_peer(hblink_req['login_id'])[2], gen_passphrase(hblink_req['login_id']), 'Attempt')
 | 
			
		||||
                            response = jsonify(
 | 
			
		||||
                                    allow=True,
 | 
			
		||||
                                    mode='normal',
 | 
			
		||||
                                    )
 | 
			
		||||
                        elif authorized_peer(hblink_req['login_id'])[1] == '':
 | 
			
		||||
                        # normal
 | 
			
		||||
                            mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], 'Legacy', time.time()])
 | 
			
		||||
                            #mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], hblink_req['login_ip'], time.time()])
 | 
			
		||||
                            authlog_add(hblink_req['login_id'], hblink_req['login_ip'], hblink_req['login_server'], authorized_peer(hblink_req['login_id'])[2], 'Config: ' + legacy_passphrase, 'Attempt')
 | 
			
		||||
                            response = jsonify(
 | 
			
		||||
                                    allow=True,
 | 
			
		||||
                                    mode='legacy',
 | 
			
		||||
                                    )
 | 
			
		||||
                        elif authorized_peer(hblink_req['login_id'])[1] != '' or isinstance(authorized_peer(hblink_req['login_id'])[1], int) == False:
 | 
			
		||||
                            mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], 'Custom', time.time()])
 | 
			
		||||
                            #mmdvm_logins.append([hblink_req['login_id'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], hblink_req['login_ip'], time.time()])
 | 
			
		||||
                            authlog_add(hblink_req['login_id'], hblink_req['login_ip'], hblink_req['login_server'], authorized_peer(hblink_req['login_id'])[2], authorized_peer(hblink_req['login_id'])[1], 'Attempt')
 | 
			
		||||
                            print(authorized_peer(hblink_req['login_id']))
 | 
			
		||||
                            response = jsonify(
 | 
			
		||||
                                    allow=True,
 | 
			
		||||
@ -1158,6 +1308,14 @@ def create_app():
 | 
			
		||||
                            msg = jsonify(auth=False,
 | 
			
		||||
                                              reason='Incorrect password')
 | 
			
		||||
                            response = make_response(msg, 401)
 | 
			
		||||
            elif 'login_id' in hblink_req and 'login_confirmed' in hblink_req:
 | 
			
		||||
                if hblink_req['old_auth'] == True:
 | 
			
		||||
                    authlog_add(hblink_req['login_id'], hblink_req['login_ip'], hblink_req['login_server'], authorized_peer(hblink_req['login_id'])[2], 'CONFIG PASSPHRASE', 'Confirmed')
 | 
			
		||||
                else:
 | 
			
		||||
                    authlog_add(hblink_req['login_id'], hblink_req['login_ip'], hblink_req['login_server'], authorized_peer(hblink_req['login_id'])[2], 'USER MANAGER', 'Confirmed')
 | 
			
		||||
                response = jsonify(
 | 
			
		||||
                                logged=True
 | 
			
		||||
                                    )
 | 
			
		||||
            elif hblink_req['burn_list']: # == 'burn_list':
 | 
			
		||||
                response = jsonify(
 | 
			
		||||
                                burn_list=get_burnlist()
 | 
			
		||||
 | 
			
		||||
@ -48,7 +48,7 @@
 | 
			
		||||
    <td style="text-align: center;"><a href={{url}}/add_user><strong>Add a User</strong></a></td>
 | 
			
		||||
    <td style="text-align: center;"><a href={{url}}/list_users><strong>Edit Users</strong></a></td>
 | 
			
		||||
    <td style="text-align: center;"><a href={{url}}/approve_users><strong>Waiting Approval</strong></a></td>
 | 
			
		||||
    <td style="text-align: center;"><a href={{url}}/mmdvm_log><strong>Auth Log</strong></a></td>
 | 
			
		||||
    <td style="text-align: center;"><a href={{url}}/auth_log><strong>Auth Log</strong></a></td>
 | 
			
		||||
 | 
			
		||||
            {% endif %}
 | 
			
		||||
<td style="text-align: center;"><a href={{url}}/help>Help</a></td>
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user