mirror of
https://git.selfprivacy.org/SelfPrivacy/selfprivacy-rest-api.git
synced 2025-01-30 20:56:39 +00:00
131 lines
3.7 KiB
Python
131 lines
3.7 KiB
Python
"""Actions to manage the users."""
|
|
|
|
import re
|
|
from typing import Optional
|
|
|
|
from selfprivacy_api.models.user import UserDataUser, UserDataUserOrigin
|
|
|
|
from selfprivacy_api.utils import is_username_forbidden
|
|
from selfprivacy_api.actions.ssh import get_ssh_keys
|
|
|
|
from selfprivacy_api.repositories.users.json_user_repository import JsonUserRepository
|
|
from selfprivacy_api.repositories.users import ACTIVE_USERS_PROVIDER
|
|
from selfprivacy_api.repositories.users.exceptions import (
|
|
UsernameForbidden,
|
|
UsernameNotAlphanumeric,
|
|
UsernameTooLong,
|
|
UserNotFound,
|
|
)
|
|
|
|
|
|
def get_users(
|
|
exclude_primary: bool = False,
|
|
exclude_root: bool = False,
|
|
) -> list[UserDataUser]:
|
|
users = ACTIVE_USERS_PROVIDER.get_users(
|
|
exclude_primary=exclude_primary, exclude_root=exclude_root
|
|
)
|
|
|
|
if ACTIVE_USERS_PROVIDER != JsonUserRepository:
|
|
for user in users:
|
|
try:
|
|
user.ssh_keys = get_ssh_keys(username=user.username)
|
|
except UserNotFound:
|
|
pass
|
|
|
|
if not exclude_root:
|
|
users.append(
|
|
UserDataUser(
|
|
username="root",
|
|
user_type=UserDataUserOrigin.ROOT,
|
|
ssh_keys=get_ssh_keys(username=user.username),
|
|
)
|
|
)
|
|
|
|
return users
|
|
|
|
|
|
def create_user(
|
|
username: str,
|
|
password: Optional[str] = None,
|
|
displayname: Optional[str] = None,
|
|
email: Optional[str] = None,
|
|
directmemberof: Optional[list[str]] = None,
|
|
memberof: Optional[list[str]] = None,
|
|
) -> None:
|
|
|
|
if is_username_forbidden(username):
|
|
raise UsernameForbidden("Username is forbidden")
|
|
|
|
if not re.match(r"^[a-z_][a-z0-9_]+$", username):
|
|
raise UsernameNotAlphanumeric(
|
|
"Username must be alphanumeric and start with a letter"
|
|
)
|
|
|
|
if len(username) >= 32:
|
|
raise UsernameTooLong("Username must be less than 32 characters")
|
|
|
|
if ACTIVE_USERS_PROVIDER != JsonUserRepository: # for ssh management
|
|
JsonUserRepository.create_user(username=username, password="legacy")
|
|
|
|
return ACTIVE_USERS_PROVIDER.create_user(
|
|
username=username,
|
|
password=password,
|
|
displayname=displayname,
|
|
email=email,
|
|
directmemberof=directmemberof,
|
|
memberof=memberof,
|
|
)
|
|
|
|
|
|
def delete_user(username: str) -> None:
|
|
if ACTIVE_USERS_PROVIDER != JsonUserRepository: # for ssh management
|
|
JsonUserRepository.delete_user(username=username)
|
|
|
|
return ACTIVE_USERS_PROVIDER.delete_user(username=username)
|
|
|
|
|
|
def update_user(
|
|
username: str,
|
|
password: Optional[str] = None,
|
|
displayname: Optional[str] = None,
|
|
email: Optional[str] = None,
|
|
directmemberof: Optional[list[str]] = None,
|
|
memberof: Optional[list[str]] = None,
|
|
) -> None:
|
|
|
|
return ACTIVE_USERS_PROVIDER.update_user(
|
|
username=username,
|
|
password=password,
|
|
displayname=displayname,
|
|
email=email,
|
|
directmemberof=directmemberof,
|
|
memberof=memberof,
|
|
)
|
|
|
|
|
|
def get_user_by_username(username: str) -> Optional[UserDataUser]:
|
|
user = ACTIVE_USERS_PROVIDER.get_user_by_username(username=username)
|
|
|
|
if ACTIVE_USERS_PROVIDER != JsonUserRepository:
|
|
if username == "root":
|
|
return UserDataUser(
|
|
username="root",
|
|
user_type=UserDataUserOrigin.ROOT,
|
|
ssh_keys=get_ssh_keys(username="root"),
|
|
)
|
|
|
|
try:
|
|
user.ssh_keys = get_ssh_keys(username=user)
|
|
except UserNotFound:
|
|
pass
|
|
|
|
return user
|
|
|
|
|
|
def generate_password_reset_link(username: str) -> str:
|
|
if ACTIVE_USERS_PROVIDER == JsonUserRepository:
|
|
return "Error: API using old user manager provider!"
|
|
|
|
return ACTIVE_USERS_PROVIDER.generate_password_reset_link(username=username)
|