1 # Create your views here.
5 from django import forms
6 from django.views.decorators.csrf import csrf_exempt
7 from django.core import urlresolvers
8 from django.core import serializers
9 from django.contrib.auth.decorators import login_required
10 from django.contrib.auth import logout
11 from django.contrib.sites.models import Site
12 from django.contrib.auth.models import User
13 from django.http import HttpResponseRedirect, HttpResponseForbidden, HttpResponse
14 from django.shortcuts import get_object_or_404, render_to_response
15 from django.core.context_processors import request
16 from django.template.context import RequestContext
17 from django.template.loader import get_template, render_to_string
18 from django.core.urlresolvers import reverse
19 from django.contrib import messages
20 from flowspy.accounts.models import *
23 from django.contrib.auth import authenticate, login
25 from django.forms.models import model_to_dict
27 from flowspy.flowspec.forms import *
28 from flowspy.flowspec.models import *
29 from flowspy.peers.models import *
31 from registration.models import RegistrationProfile
33 from copy import deepcopy
34 from flowspy.utils.decorators import shib_required
36 from django.views.decorators.cache import never_cache
37 from django.conf import settings
38 from django.core.mail.message import EmailMessage
42 LOG_FILENAME = os.path.join(settings.LOG_FILE_LOCATION, 'celery_jobs.log')
43 #FORMAT = '%(asctime)s %(levelname)s: %(message)s'
44 #logging.basicConfig(format=FORMAT)
45 formatter = logging.Formatter('%(asctime)s %(levelname)s %(clientip)s %(user)s: %(message)s')
47 logger = logging.getLogger(__name__)
48 logger.setLevel(logging.DEBUG)
49 handler = logging.FileHandler(LOG_FILENAME)
50 handler.setFormatter(formatter)
51 logger.addHandler(handler)
54 def user_routes(request):
55 user_routes = Route.objects.filter(applier=request.user)
56 return render_to_response('user_routes.html', {'routes': user_routes},
57 context_instance=RequestContext(request))
60 return render_to_response('welcome.html', context_instance=RequestContext(request))
64 def group_routes(request):
66 peer = request.user.get_profile().peer
68 peer_members = UserProfile.objects.filter(peer=peer)
69 users = [prof.user for prof in peer_members]
70 group_routes = Route.objects.filter(applier__in=users)
71 return render_to_response('user_routes.html', {'routes': group_routes},
72 context_instance=RequestContext(request))
77 def add_route(request):
78 applier = request.user.pk
79 applier_peer_networks = request.user.get_profile().peer.networks.all()
80 if not applier_peer_networks:
81 messages.add_message(request, messages.WARNING,
82 "Insufficient rights on administrative networks. Cannot add rule. Contact your administrator")
83 return HttpResponseRedirect(reverse("group-routes"))
84 if request.method == "GET":
86 if not request.user.is_superuser:
87 form.fields['then'] = forms.ModelMultipleChoiceField(queryset=ThenAction.objects.filter(action__in=settings.UI_USER_THEN_ACTIONS).order_by('action'), required=True)
88 return render_to_response('apply.html', {'form': form, 'applier': applier},
89 context_instance=RequestContext(request))
92 form = RouteForm(request.POST)
94 route=form.save(commit=False)
95 route.applier = request.user
96 route.status = "PENDING"
97 route.source = IPNetwork("%s/%s" %(IPNetwork(route.source).network.compressed, IPNetwork(route.source).prefixlen)).compressed
98 route.destination = IPNetwork("%s/%s" %(IPNetwork(route.destination).network.compressed, IPNetwork(route.destination).prefixlen)).compressed
102 requesters_address = request.META['HTTP_X_FORWARDED_FOR']
103 mail_body = render_to_string("rule_add_mail.txt",
104 {"route": route, "address": requesters_address})
105 user_mail = "%s" %route.applier.email
106 user_mail = user_mail.split(';')
107 send_new_mail(settings.EMAIL_SUBJECT_PREFIX + "Rule %s creation request submitted by %s" %(route.name, route.applier.username),
108 mail_body, settings.SERVER_EMAIL, user_mail,
109 get_peer_techc_mails(route.applier))
110 d = { 'clientip' : "%s"%requesters_address, 'user' : route.applier.username }
111 logger.info(mail_body, extra=d)
112 return HttpResponseRedirect(reverse("group-routes"))
114 return render_to_response('apply.html', {'form': form, 'applier':applier},
115 context_instance=RequestContext(request))
119 def edit_route(request, route_slug):
120 applier = request.user.pk
121 applier_peer = request.user.get_profile().peer
122 route_edit = get_object_or_404(Route, name=route_slug)
123 route_edit_applier_peer = route_edit.applier.get_profile().peer
124 if applier_peer != route_edit_applier_peer:
125 messages.add_message(request, messages.WARNING,
126 "Insufficient rights to edit rule %s" %(route_slug))
127 return HttpResponseRedirect(reverse("group-routes"))
128 # if route_edit.status == "ADMININACTIVE" :
129 # messages.add_message(request, messages.WARNING,
130 # "Administrator has disabled editing of rule %s" %(route_slug))
131 # return HttpResponseRedirect(reverse("group-routes"))
132 # if route_edit.status == "EXPIRED" :
133 # messages.add_message(request, messages.WARNING,
134 # "Cannot edit the expired rule %s. Contact helpdesk to enable it" %(route_slug))
135 # return HttpResponseRedirect(reverse("group-routes"))
136 if route_edit.status == "PENDING" :
137 messages.add_message(request, messages.WARNING,
138 "Cannot edit a pending rule: %s." %(route_slug))
139 return HttpResponseRedirect(reverse("group-routes"))
140 route_original = deepcopy(route_edit)
142 form = RouteForm(request.POST, instance = route_edit)
144 route=form.save(commit=False)
145 route.name = route_original.name
146 route.applier = request.user
147 route.status = "PENDING"
148 route.source = IPNetwork("%s/%s" %(IPNetwork(route.source).network.compressed, IPNetwork(route.source).prefixlen)).compressed
149 route.destination = IPNetwork("%s/%s" %(IPNetwork(route.destination).network.compressed, IPNetwork(route.destination).prefixlen)).compressed
153 requesters_address = request.META['HTTP_X_FORWARDED_FOR']
154 mail_body = render_to_string("rule_edit_mail.txt",
155 {"route": route, "address": requesters_address})
156 user_mail = "%s" %route.applier.email
157 user_mail = user_mail.split(';')
158 send_new_mail(settings.EMAIL_SUBJECT_PREFIX + "Rule %s edit request submitted by %s" %(route.name, route.applier.username),
159 mail_body, settings.SERVER_EMAIL, user_mail,
160 get_peer_techc_mails(route.applier))
161 d = { 'clientip' : requesters_address, 'user' : route.applier.username }
162 logger.info(mail_body, extra=d)
163 return HttpResponseRedirect(reverse("group-routes"))
165 return render_to_response('apply.html', {'form': form, 'edit':True, 'applier': applier},
166 context_instance=RequestContext(request))
168 dictionary = model_to_dict(route_edit, fields=[], exclude=[])
169 #form = RouteForm(instance=route_edit)
170 form = RouteForm(dictionary)
171 if not request.user.is_superuser:
172 form.fields['then'] = forms.ModelMultipleChoiceField(queryset=ThenAction.objects.filter(action__in=settings.UI_USER_THEN_ACTIONS).order_by('action'), required=True)
173 return render_to_response('apply.html', {'form': form, 'edit':True, 'applier': applier},
174 context_instance=RequestContext(request))
178 def delete_route(request, route_slug):
179 if request.is_ajax():
180 route = get_object_or_404(Route, name=route_slug)
181 applier_peer = route.applier.get_profile().peer
182 requester_peer = request.user.get_profile().peer
183 if applier_peer == requester_peer:
184 route.status = "PENDING"
185 route.expires = datetime.date.today()
186 route.applier = request.user
188 route.commit_delete()
189 requesters_address = request.META['HTTP_X_FORWARDED_FOR']
190 mail_body = render_to_string("rule_delete_mail.txt",
191 {"route": route, "address": requesters_address})
192 user_mail = "%s" %route.applier.email
193 user_mail = user_mail.split(';')
194 send_new_mail(settings.EMAIL_SUBJECT_PREFIX + "Rule %s removal request submitted by %s" %(route.name, route.applier.username),
195 mail_body, settings.SERVER_EMAIL, user_mail,
196 get_peer_techc_mails(route.applier))
197 d = { 'clientip' : requesters_address, 'user' : route.applier.username }
198 logger.info(mail_body, extra=d)
199 html = "<html><body>Done</body></html>"
200 return HttpResponse(html)
202 return HttpResponseRedirect(reverse("group-routes"))
206 def user_profile(request):
208 peer = request.user.get_profile().peer
210 return render_to_response('profile.html', {'user': user, 'peer':peer},
211 context_instance=RequestContext(request))
214 def user_login(request):
216 error_username = False
217 error_orgname = False
218 error_entitlement = False
220 has_entitlement = False
222 username = request.META['HTTP_EPPN']
224 error_username = True
225 firstname = request.META['HTTP_SHIB_INETORGPERSON_GIVENNAME']
226 lastname = request.META['HTTP_SHIB_PERSON_SURNAME']
227 mail = request.META['HTTP_SHIB_INETORGPERSON_MAIL']
228 organization = request.META['HTTP_SHIB_HOMEORGANIZATION']
229 entitlement = request.META['HTTP_SHIB_EP_ENTITLEMENT']
230 if settings.SHIB_AUTH_ENTITLEMENT in entitlement.split(";"):
231 has_entitlement = True
232 if not has_entitlement:
233 error_entitlement = True
239 error = "Your idP should release the HTTP_EPPN attribute towards this service<br>"
241 error = error + "Your idP should release the HTTP_SHIB_HOMEORGANIZATION attribute towards this service<br>"
242 if error_entitlement:
243 error = error + "Your idP should release an appropriate HTTP_SHIB_EP_ENTITLEMENT attribute towards this service<br>"
245 error = error + "Your idP should release the HTTP_SHIB_INETORGPERSON_MAIL attribute towards this service"
246 if error_username or error_orgname or error_entitlement or error_mail:
247 return render_to_response('error.html', {'error': error, "missing_attributes": True},
248 context_instance=RequestContext(request))
250 user = User.objects.get(username__exact=username)
254 user = authenticate(username=username, firstname=firstname, lastname=lastname, mail=mail)
257 peer = Peer.objects.get(domain_name=organization)
258 up = UserProfile.objects.get_or_create(user=user,peer=peer)
260 error = "Your organization's domain name does not match our peers' domain names<br>Please contact Helpdesk to resolve this issue"
261 return render_to_response('error.html', {'error': error})
263 user_activation_notify(user)
266 return HttpResponseRedirect(reverse("group-routes"))
268 error = "User account <strong>%s</strong> is pending activation. Administrators have been notified and will activate this account within the next days. <br>If this account has remained inactive for a long time contact your technical coordinator or GRNET Helpdesk" %user.username
269 return render_to_response('error.html', {'error': error, 'inactive': True},
270 context_instance=RequestContext(request))
272 error = "Something went wrong during user authentication. Contact your administrator"
273 return render_to_response('error.html', {'error': error,},
274 context_instance=RequestContext(request))
276 error = "Invalid login procedure"
277 return render_to_response('error.html', {'error': error,},
278 context_instance=RequestContext(request))
279 # Return an 'invalid login' error message.
280 # return HttpResponseRedirect(reverse("user-routes"))
282 def user_activation_notify(user):
283 current_site = Site.objects.get_current()
284 subject = render_to_string('registration/activation_email_subject.txt',
285 { 'site': current_site })
286 # Email subject *must not* contain newlines
287 subject = ''.join(subject.splitlines())
288 registration_profile = RegistrationProfile.objects.create_profile(user)
289 message = render_to_string('registration/activation_email.txt',
290 { 'activation_key': registration_profile.activation_key,
291 'expiration_days': settings.ACCOUNT_ACTIVATION_DAYS,
292 'site': current_site,
294 send_new_mail(settings.EMAIL_SUBJECT_PREFIX + subject,
295 message, settings.SERVER_EMAIL,
296 get_peer_techc_mails(user), [])
300 def add_rate_limit(request):
301 if request.method == "GET":
302 form = ThenPlainForm()
303 return render_to_response('add_rate_limit.html', {'form': form,},
304 context_instance=RequestContext(request))
307 form = ThenPlainForm(request.POST)
309 then=form.save(commit=False)
310 then.action_value = "%sk"%then.action_value
313 response_data['pk'] = "%s" %then.pk
314 response_data['value'] = "%s:%s" %(then.action, then.action_value)
315 return HttpResponse(json.dumps(response_data), mimetype='application/json')
317 return render_to_response('add_rate_limit.html', {'form': form,},
318 context_instance=RequestContext(request))
322 def add_port(request):
323 if request.method == "GET":
324 form = PortPlainForm()
325 return render_to_response('add_port.html', {'form': form,},
326 context_instance=RequestContext(request))
329 form = PortPlainForm(request.POST)
333 response_data['value'] = "%s" %port.pk
334 response_data['text'] = "%s" %port.port
335 return HttpResponse(json.dumps(response_data), mimetype='application/json')
337 return render_to_response('add_port.html', {'form': form,},
338 context_instance=RequestContext(request))
342 def user_logout(request):
344 return HttpResponseRedirect(reverse('group-routes'))
347 def load_jscript(request, file):
348 long_polling_timeout = int(settings.POLL_SESSION_UPDATE)*1000 + 10000
349 return render_to_response('%s.js' % file, {'timeout': long_polling_timeout}, context_instance=RequestContext(request), mimetype="text/javascript")
352 def get_peer_techc_mails(user):
356 user_mail = "%s" %user.email
357 user_mail = user_mail.split(';')
358 techmails = user.get_profile().peer.techc_emails.all()
360 for techmail in techmails:
361 techmails_list.append(techmail.email)
362 if settings.NOTIFY_ADMIN_MAILS:
363 additional_mail = settings.NOTIFY_ADMIN_MAILS
364 # mail.extend(user_mail)
365 mail.extend(additional_mail)
366 mail.extend(techmails_list)
370 def send_new_mail(subject, message, from_email, recipient_list, bcc_list):
371 return EmailMessage(subject, message, from_email, recipient_list, bcc_list).send()