changes after cwebb's review

This commit is contained in:
Rodney Ewing
2013-06-21 14:14:40 -07:00
parent 54ef2c408b
commit e4deacd9c8
17 changed files with 36 additions and 114 deletions

View File

@@ -35,14 +35,6 @@ def extra_validation(register_form):
return extra_validation_passes
def get_login_form(request):
return hook_handle("auth_get_login_form", request)
def get_registration_form(request):
return hook_handle("auth_get_registration_form", request)
def gen_password_hash(raw_pass, extra_salt=None):
return hook_handle("auth_gen_password_hash", raw_pass, extra_salt)
@@ -50,7 +42,3 @@ def gen_password_hash(raw_pass, extra_salt=None):
def check_password(raw_pass, stored_hash, extra_salt=None):
return hook_handle("auth_check_password",
raw_pass, stored_hash, extra_salt)
def fake_login_attempt():
return hook_handle("auth_fake_login_attempt")

View File

@@ -29,9 +29,7 @@ class ForgotPassForm(wtforms.Form):
class ChangePassForm(wtforms.Form):
password = wtforms.PasswordField(
'Password',
[wtforms.validators.Required(),
wtforms.validators.Length(min=5, max=1024)])
'Password')
userid = wtforms.HiddenField(
'',
[wtforms.validators.Required()])

View File

@@ -169,7 +169,7 @@ def check_login_simple(username, password):
user = auth.get_user(username=username)
if not user:
_log.info("User %r not found", username)
auth.fake_login_attempt()
hook_handle("auth_fake_login_attempt")
return None
if not auth.check_password(password, user.pw_hash):
_log.warn("Wrong password for %r", username)
@@ -178,23 +178,8 @@ def check_login_simple(username, password):
return user
class AuthError(Exception):
def __init__(self):
self.value = 'No Authentication Plugin is enabled and' \
' authentication_disabled = False in config!'
def __str__(self):
return repr(self.value)
def check_auth_enabled():
authentication_disabled = mg_globals.app_config['authentication_disabled']
auth_plugin = hook_handle('authentication')
if authentication_disabled is False and not auth_plugin:
raise AuthError
if authentication_disabled:
if not hook_handle('authentication'):
_log.warning('No authentication is enabled')
return False
else:

View File

@@ -22,6 +22,7 @@ from mediagoblin.db.models import User
from mediagoblin.tools.response import render_to_response, redirect, render_404
from mediagoblin.tools.translate import pass_to_ugettext as _
from mediagoblin.tools.mail import email_debug_message
from mediagoblin.tools.pluginapi import hook_handle
from mediagoblin.auth import forms as auth_forms
from mediagoblin.auth.tools import (send_verification_email, register_user,
send_fp_verification_email,
@@ -45,10 +46,11 @@ def register(request):
return redirect(request, "index")
if 'pass_auth' not in request.template_env.globals:
if 'openid' in request.template_env.globals:
return redirect(request, 'mediagoblin.plugins.openid.register')
redirect_name = hook_handle('auth_no_pass_redirect')
return redirect(request, 'mediagoblin.plugins.{0}.register'.format(
redirect_name))
register_form = auth.get_registration_form(request)
register_form = hook_handle("auth_get_registration_form", request)
if request.method == 'POST' and register_form.validate():
# TODO: Make sure the user doesn't exist already
@@ -65,7 +67,6 @@ def register(request):
request,
'mediagoblin/auth/register.html',
{'register_form': register_form,
'focus': 'username',
'post_url': request.urlgen('mediagoblin.auth.register')})
@@ -84,10 +85,11 @@ def login(request):
return redirect(request, 'index')
if 'pass_auth' not in request.template_env.globals:
if 'openid' in request.template_env.globals:
return redirect(request, 'mediagoblin.plugins.openid.login')
redirect_name = hook_handle('auth_no_pass_redirect')
return redirect(request, 'mediagoblin.plugins.{0}.login'.format(
redirect_name))
login_form = auth.get_login_form(request)
login_form = hook_handle("auth_get_login_form", request)
login_failed = False
@@ -115,7 +117,6 @@ def login(request):
{'login_form': login_form,
'next': request.GET.get('next') or request.form.get('next'),
'login_failed': login_failed,
'focus': 'username',
'post_url': request.urlgen('mediagoblin.auth.login'),
'allow_registration': mg_globals.app_config["allow_registration"]})
@@ -217,8 +218,7 @@ def forgot_password(request):
if not (request.method == 'POST' and fp_form.validate()):
# Either GET request, or invalid form submitted. Display the template
return render_to_response(request,
'mediagoblin/auth/forgot_password.html', {'fp_form': fp_form,
'focus': 'username'})
'mediagoblin/auth/forgot_password.html', {'fp_form': fp_form,})
# If we are here: method == POST and form is valid. username casing
# has been sanitized. Store if a user was found by email. We should
@@ -314,8 +314,7 @@ def verify_forgot_password(request):
return render_to_response(
request,
'mediagoblin/auth/change_fp.html',
{'cp_form': cp_form,
'focus': 'password'})
{'cp_form': cp_form,})
# in case there is a valid id but no user with that id in the db
# or the token expired