def get_hasher(self):
ut = self.username_transformed
custom_salt = ab64_decode(cleanup(ut)) if ut else None
hasher = (pbkdf2_sha512.using(salt=custom_salt, rounds=1600)
if custom_salt else pbkdf2_sha512.using(rounds=1600,
salt_size=10))
return hasher
def get_offline_otps(token_obj, otppin, amount, rounds=ROUNDS):
"""
Retrieve the desired number of passwords (= PIN + OTP), hash them
and return them in a dictionary. Increase the token counter.
:param token_obj: token in question
:param otppin: The OTP PIN to prepend in the passwords. The PIN is not validated!
:param amount: Number of OTP values (non-negative!)
:param rounds: Number of PBKDF2 rounds
:return: dictionary
"""
if amount < 0:
raise ParameterError("Invalid refill amount: {!r}".format(amount))
(res, err, otp_dict) = token_obj.get_multi_otp(count=amount,
counter_index=True)
otps = otp_dict.get("otp")
for key in otps.keys():
# Return the hash of OTP PIN and OTP values
otps[key] = pbkdf2_sha512.using(
rounds=rounds, salt_size=10).hash(otppin + otps.get(key))
# We do not disable the token, so if all offline OTP values
# are used, the token can be used the authenticate online again.
# token_obj.enable(False)
# increase the counter by the consumed values and
# also store it in tokeninfo.
token_obj.inc_otp_counter(increment=amount)
return otps
def new_user_route():
username = request.form['username']
password = request.form['password']
confirm_password = request.form['confirm_password']
if len(username) > 256:
return json.dumps(
{'error':
'Username cannot be more than 256 characters long\n'}), 409
if len(password) > 256:
return json.dumps(
{'error':
'Password cannot be more than 256 characters long\n'}), 409
if not len(username):
return json.dumps({'error': 'Username cannot be left blank\n'}), 409
if not len(password):
return json.dumps({'error': 'Password cannot be left blank\n'}), 409
if password != confirm_password:
return json.dumps({'error': 'Passwords do not match\n'}), 409
with connect_to_database() as cur:
cur.execute(
"SELECT EXISTS(SELECT 1 FROM userInfo WHERE username = '******');" %
escape_string(username))
cur_response = cur.fetchone()
user_exists = cur_response.items()[0][1]
if user_exists:
user_conflict_json = json.dumps(
{'error': 'Username is already taken\n'})
return user_conflict_json, 409
hash_handler = pbkdf2_sha512.using(rounds=123456)
hashed_password = hash_handler.hash(password)
cur.execute(
"INSERT INTO userInfo (username, password) values ('%s', '%s');" %
(escape_string(username), hashed_password))
return json.dumps({}), 200
def create_userhash(self, user):
hashed_email = pbkdf2_sha512.using(rounds=8000,
salt_size=20).hash(user.email)[:40]
UserHash.objects.create(user=user,
hashed_email=hashed_email +
settings.SECRET_KEY)
send_auth_mail.send_activation_mail(user_email=user.email,
hashed_email=hashed_email)
def hash_password(password):
try:
hashed_password = pbkdf2_sha512.using(salt_size=16,
rounds=95846).hash(password)
print(hashed_password[21:])
return hashed_password[21:]
except Exception as e:
print(e)
def add_user(users_details):
hash_password = pbkdf2_sha512.using(
rounds=10000,
salt_size=64,
).hash(str(users_details["password"]))
users_details["password"] = hash_password
users_details["_id"] = uuid.uuid1(
) # got problem to get random id from mongodb
users_details["status"] = "active"
if not users_details["role_id"]:
users_details["role_id"] = 2
if users.insert_one(users_details).inserted_id:
return users_details
def insert_username_into_database():
try:
hashedpwd = pbkdf2_sha512.using(salt_size=64).hash(password)
print('Connecting with the database...')
unixtime = int(time())
cc.execute(insert_username, (username, hashedpwd, unixtime))
conn.commit()
print(f'User {username} successfully inserted.')
conn.close()
except conn.Error as error:
print(f'Error: {error}')
def generate_hash(password):
return pbkdf2_sha512.using(salt_size=64,
rounds=64000 +
random.randint(0, 24000)).hash(password)
def gen_pbkdf_pass(sal, upass):
gen_pass = pbkdf2_sha512.using(rounds=1000, salt=sal).hash(upass)
return gen_pass
def hash_password(password):
return pbkdf2_sha512.using(rounds=5, salt_size=3).hash(password)
async def auth(self, skip_events=[], env={}, query=[], doc={}):
for attr in Registry.module('user').unique_attrs:
if attr in doc.keys():
key = attr
break
user_query = [{key: doc[key], '$limit': 1}]
if 'groups' in doc.keys():
user_query.append([{'groups': {'$in': doc['groups']}}, {'privileges': {'*': ['*']}}])
user_results = await Registry.module('user').read(
skip_events=[Event.PERM, Event.ON], env=env, query=user_query
)
if not user_results.args.count or not pbkdf2_sha512.verify(
doc['hash'],
user_results.args.docs[0][f'{key}_hash'],
):
raise self.exception(
status=403,
msg='Wrong auth credentials.',
args={'code': 'INVALID_CREDS'},
)
user = user_results.args.docs[0]
if Event.ON not in skip_events:
if user.status in ['banned', 'deleted']:
raise self.exception(
status=403,
msg=f'User is {user.status}.',
args={'code': 'INVALID_USER'},
)
elif user.status == 'disabled_password':
raise self.exception(
status=403,
msg='User password is disabled.',
args={'code': 'INVALID_USER'},
)
token = secrets.token_urlsafe(32)
session = {
'user': user._id,
'groups': doc['groups'] if 'groups' in doc.keys() else [],
'host_add': env['REMOTE_ADDR'],
'user_agent': env['HTTP_USER_AGENT'],
'expiry': (datetime.datetime.utcnow() + datetime.timedelta(days=30)).isoformat(),
'token_hash': pbkdf2_sha512.using(rounds=100000).hash(token),
}
results = await self.create(skip_events=[Event.PERM], env=env, doc=session)
if results.status != 200:
return results
session['_id'] = results.args.docs[0]._id
session['user'] = user
del session['token_hash']
session['token'] = token
results.args.docs[0] = BaseModel(session)
# [DOC] read user privileges and return them
user_results = await Registry.module('user').read_privileges(
skip_events=[Event.PERM], env=env, query=[{'_id': user._id}]
)
if user_results.status != 200:
return user_results
results.args.docs[0]['user'] = user_results.args.docs[0]
# [DOC] Create CONN_AUTH Analytic doc
if Config.analytics_events['session_conn_auth']:
analytic_doc = {
'event': 'CONN_AUTH',
'subevent': env['client_app'],
'args': {
'user': user_results.args.docs[0]._id,
'session': results.args.docs[0]._id,
'REMOTE_ADDR': env['REMOTE_ADDR'],
'HTTP_USER_AGENT': env['HTTP_USER_AGENT'],
},
}
analytic_results = await Registry.module('analytic').create(
skip_events=[Event.PERM], env=env, doc=analytic_doc
)
if analytic_results.status != 200:
logger.error(
f'Failed to create \'Analytic\' doc: {analytic_doc}. Results: {analytic_results}'
)
# [DOC] Create USER_AUTH Analytic doc
if Config.analytics_events['session_user_auth']:
analytic_doc = {
'event': 'USER_AUTH',
'subevent': user_results.args.docs[0]._id,
'args': {
'session': results.args.docs[0]._id,
'REMOTE_ADDR': env['REMOTE_ADDR'],
'HTTP_USER_AGENT': env['HTTP_USER_AGENT'],
'client_app': env['client_app'],
},
}
analytic_results = await Registry.module('analytic').create(
skip_events=[Event.PERM], env=env, doc=analytic_doc
)
if analytic_results.status != 200:
logger.error(
f'Failed to create \'Analytic\' doc: {analytic_doc}. Results: {analytic_results}'
)
return self.status(
status=200,
msg='You were successfully authed.',
args={'session': results.args.docs[0]},
)
async def _config_data():
from nawah.utils import generate_attr
# [TODO] Add validator for user_attrs, user_doc_settings
# [DOC] Check app packages
if Config._app_packages or len(Config.packages_versions.keys()) > 2:
logger.debug(
'Found \'_app_packages\' Config Attr. Attempting to validate all loaded packages are matching _app_packages Config Attr value.'
)
Config._app_packages['core'] = Config.packages_versions['core']
Config._app_packages[
Config._app_default_package] = Config.packages_versions[
Config._app_default_package]
missing_packages = [
package for package in Config._app_packages.keys()
if package not in Config.packages_versions.keys()
]
if missing_packages:
logger.error(
f'At least one package is missing that is required by app. Missing package[s]: \'{", ".join(missing_packages)}\'. Exiting.'
)
exit(1)
extra_packages = [
package for package in Config.packages_versions.keys()
if package not in Config._app_packages.keys()
]
if extra_packages:
logger.error(
f'At least one extra package is present in \'packages\' folder that is not required by app. Extra package[s]: \'{", ".join(extra_packages)}\'. Exiting.'
)
exit(1)
# [DOC] Check for version mismatch
for package, version in Config._app_packages.items():
# [DOC] Skip core and default_packages
if package in ['core', Config._app_default_package]:
continue
if version != Config.packages_versions[package]:
logger.error(
f'Package \'{package}\' version \'{Config.packages_versions[package]}\' is added to app but not matching required version \'{version}\'. Exiting.'
)
exit(1)
# [DOC] Check API version
if not Config.packages_api_levels:
logger.warning(
'No API-level specified for the app. Nawah would continue to run the app, but the developer should consider adding API-level to eliminate specs mismatch.'
)
else:
nawah_level = '.'.join(Config._nawah_version.split('.')[0:2])
for package, api_level in Config.packages_api_levels.items():
if api_level != nawah_level:
logger.error(
f'Nawah framework is on API-level \'{nawah_level}\', but the app package \'{package}\' requires API-level \'{api_level}\'. Exiting.'
)
exit(1)
try:
versions = ((requests.get(
'https://raw.githubusercontent.com/masaar/nawah_versions/master/versions.txt'
).content).decode('utf-8').split('\n'))
version_detected = ''
for version in versions:
if version.startswith(f'{nawah_level}.'):
if version_detected and int(version.split('.')[-1]) < int(
version_detected.split('.')[-1]):
continue
version_detected = version
if version_detected and version_detected != Config._nawah_version:
logger.warning(
f'Your app is using Nawah version \'{Config._nawah_version}\' while newer version \'{version_detected}\' of the API-level is available. Please, update.'
)
except:
logger.warning(
'An error occurred while attempting to check for latest update to Nawah. Please, check for updates on your own.'
)
# [DOC] Check for jobs
if Config.jobs:
# [DOC] Check jobs schedule validity
Config._jobs_base = datetime.datetime.utcnow()
for job_name in Config.jobs.keys():
job = Config.jobs[job_name]
if not croniter.is_valid(job.schedule):
logger.error(
f'Job with schedule \'{job_name}\' schedule is invalid. Exiting.'
)
exit(1)
job._cron_schedule = croniter(job.schedule, Config._jobs_base)
job._next_time = datetime.datetime.fromtimestamp(
job._cron_schedule.get_next(),
datetime.timezone.utc).isoformat()[:16]
# [DOC] Check for presence of user_auth_attrs
if not Config.user_attrs.keys():
logger.error('No \'user_attrs\' are provided. Exiting.')
exit(1)
# [DOC] Check default values
security_warning = '[SECURITY WARNING] {config_attr} is not explicitly set. It has been defaulted to \'{val}\' but in production environment you should consider setting it to your own to protect your app from breaches.'
if Config.admin_password == '__ADMIN':
logger.warning(
security_warning.format(config_attr='Admin password',
val='__ADMIN'))
if Config.anon_token == '__ANON_TOKEN_f00000000000000000000012':
logger.warning(
security_warning.format(
config_attr='Anon token',
val='__ANON_TOKEN_f00000000000000000000012',
))
# [DOC] Check for Env Vars
attrs_defaults = {
'data_server': 'mongodb://localhost',
'data_name': 'nawah_data',
'data_ssl': False,
'data_ca_name': False,
'data_ca': False,
'emulate_test': False,
}
for attr_name in attrs_defaults.keys():
attr_val = getattr(Config, attr_name)
if type(attr_val) == str and attr_val.startswith('$__env.'):
logger.debug(
f'Detected Env Variable for config attr \'{attr_name}\'')
if not os.getenv(attr_val[7:]):
logger.warning(
f'Couldn\'t read Env Variable for config attr \'{attr_name}\'. Defaulting to \'{attrs_defaults[attr_name]}\''
)
setattr(Config, attr_name, attrs_defaults[attr_name])
else:
# [DOC] Set data_ssl to True rather than string Env Variable value
if attr_name == 'ssl':
attr_val = True
else:
attr_val = os.getenv(attr_val[7:])
logger.warning(
f'Setting Env Variable for config attr \'{attr_name}\' to \'{attr_val}\''
)
setattr(Config, attr_name, attr_val)
# [DOC] Check SSL settings
if Config.data_ca and Config.data_ca_name:
__location__ = os.path.realpath(os.path.join('.'))
if not os.path.exists(os.path.join(__location__, 'certs')):
os.makedirs(os.path.join(__location__, 'certs'))
with open(os.path.join(__location__, 'certs', Config.data_ca_name),
'w') as f:
f.write(Config.data_ca)
from nawah import data as Data
# [DOC] Create default env dict
anon_user = _compile_anon_user()
anon_session = DictObj(_compile_anon_session())
anon_session = cast(BaseModel, anon_session)
anon_session['user'] = DictObj(anon_user)
Config._sys_conn = Data.create_conn()
Config._sys_env = {
'conn': Config._sys_conn,
'REMOTE_ADDR': '127.0.0.1',
'HTTP_USER_AGENT': 'Nawah',
'client_app': '__sys',
'session': anon_session,
'watch_tasks': {},
}
if Config.data_azure_mongo:
for module in Config.modules.keys():
try:
if Config.modules[module].collection:
logger.debug(
f'Attempting to create shard collection: {Config.modules[module].collection}.'
)
Config._sys_conn[Config.data_name].command(
'shardCollection',
f'{Config.data_name}.{Config.modules[module].collection}',
key={'_id': 'hashed'},
)
else:
logger.debug(f'Skipping service module: {module}.')
except Exception as err:
logger.error(err)
# [DOC] Check test mode
if Config.test:
logger.debug('Test mode detected.')
logger.setLevel(logging.DEBUG)
__location__ = os.path.realpath(os.path.join('.'))
if not os.path.exists(os.path.join(__location__, 'tests')):
os.makedirs(os.path.join(__location__, 'tests'))
for module in Config.modules.keys():
module_collection = Config.modules[module].collection
if module_collection:
logger.debug(
f'Updating collection name \'{module_collection}\' of module {module}'
)
module_collection = Config.modules[
module].collection = f'test_{module_collection}'
if Config.test:
logger.debug(
f'Flushing test collection \'{module_collection}\'')
await Data.drop(
env=Config._sys_env,
collection_name=module_collection,
)
else:
logger.debug(f'Skipping service module {module}')
# [DOC] Test user_settings
logger.debug('Testing user_settings.')
if Config.user_settings:
for user_setting in Config.user_settings.keys():
logger.debug(f'Testing {user_setting}')
if type(Config.user_settings[user_setting]) != USER_SETTING:
logger.error(
f'Invalid Config Attr \'user_settings\' with key \'{user_setting}\' of type \'{type(Config.user_settings[user_setting])}\' with required type \'USER_SETTING\'. Exiting.'
)
exit(1)
# [DOC] Validate USER_SETTING
Config.user_settings[user_setting]._validate()
# [DOC] Checking users collection
# [TODO] Updated sequence to handle users
logger.debug('Testing users collection.')
user_results = await Config.modules['user'].read(
skip_events=[Event.PERM, Event.ON],
env=Config._sys_env,
query=[{
'_id': 'f00000000000000000000010'
}],
)
if not user_results.args.count:
logger.debug('ADMIN user not found, creating it.')
# [DOC] Prepare base ADMIN user doc
admin_create_doc = {
'_id': ObjectId('f00000000000000000000010'),
'name': {
Config.locale: '__ADMIN'
},
'groups': [],
'privileges': {
'*': ['*']
},
'locale': Config.locale,
}
# [DOC] Update ADMIN user doc with admin_doc Config Attr
admin_create_doc.update(Config.admin_doc)
for auth_attr in Config.user_attrs.keys():
admin_create_doc[f'{auth_attr}_hash'] = pbkdf2_sha512.using(
rounds=100000
).hash(
f'{auth_attr}{admin_create_doc[auth_attr]}{Config.admin_password}{Config.anon_token}'
.encode('utf-8'))
admin_results = await Config.modules['user'].create(
skip_events=[Event.PERM],
env=Config._sys_env,
doc=admin_create_doc,
)
logger.debug(f'ADMIN user creation results: {admin_results}')
if admin_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
elif not Config.force_admin_check:
logger.warning(
'ADMIN user found, skipping check due to force_admin_check Config Attr.'
)
else:
logger.warning(
'ADMIN user found, checking it due to force_admin_check Config Attr.'
)
admin_doc: BaseModel = user_results.args.docs[0]
admin_doc_update = {}
for attr in Config.admin_doc.keys():
if (attr not in admin_doc or not admin_doc[attr]
or Config.admin_doc[attr] != admin_doc[attr]):
if (type(Config.admin_doc[attr]) == dict
and Config.locale in Config.admin_doc[attr].keys()
and type(admin_doc[attr]) == dict
and ((Config.locale in admin_doc[attr].keys()
and Config.admin_doc[attr][Config.locale]
== admin_doc[attr][Config.locale]) or
(Config.locale not in admin_doc[attr].keys()))):
continue
logger.debug(
f'Detected change in \'admin_doc.{attr}\' Config Attr.')
admin_doc_update[attr] = Config.admin_doc[attr]
for auth_attr in Config.user_attrs.keys():
auth_attr_hash = pbkdf2_sha512.using(rounds=100000).hash(
f'{auth_attr}{admin_doc[auth_attr]}{Config.admin_password}{Config.anon_token}'
.encode('utf-8'))
if (f'{auth_attr}_hash' not in admin_doc
or auth_attr_hash != admin_doc[f'{auth_attr}_hash']):
logger.debug(
f'Detected change in \'admin_password\' Config Attr.')
admin_doc_update[f'{auth_attr}_hash'] = auth_attr_hash
if len(admin_doc_update.keys()):
logger.debug(
f'Attempting to update ADMIN user with doc: \'{admin_doc_update}\''
)
admin_results = await Config.modules['user'].update(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
query=[{
'_id': ObjectId('f00000000000000000000010')
}],
doc=admin_doc_update,
)
logger.debug(f'ADMIN user update results: {admin_results}')
if admin_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug('ADMIN user is up-to-date.')
Config._sys_docs[ObjectId('f00000000000000000000010')] = SYS_DOC(
module='user')
# [DOC] Test if ANON user exists
user_results = await Config.modules['user'].read(
skip_events=[Event.PERM, Event.ON],
env=Config._sys_env,
query=[{
'_id': 'f00000000000000000000011'
}],
)
if not user_results.args.count:
logger.debug('ANON user not found, creating it.')
anon_results = await Config.modules['user'].create(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
doc=_compile_anon_user(),
)
logger.debug(f'ANON user creation results: {anon_results}')
if anon_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug('ANON user found, checking it.')
anon_doc = _compile_anon_user()
anon_doc_update = {}
for attr in Config.user_attrs.keys():
if attr not in anon_doc or not anon_doc[attr]:
logger.debug(
f'Detected change in \'anon_doc.{attr}\' Config Attr.')
anon_doc_update[attr] = generate_attr(
attr_type=Config.user_attrs[attr])
for module in Config.anon_privileges.keys():
if module not in anon_doc or set(anon_doc[module]) != set(
Config.anon_privileges[module]):
logger.debug(
f'Detected change in \'anon_privileges\' Config Attr.')
anon_doc_update[
f'privileges.{module}'] = Config.anon_privileges[module]
for auth_attr in Config.user_attrs.keys():
if (f'{auth_attr}_hash' not in anon_doc
or anon_doc[f'{auth_attr}_hash'] != Config.anon_token):
logger.debug(f'Detected change in \'anon_token\' Config Attr.')
anon_doc_update[attr] = Config.anon_token
anon_doc_update[f'{auth_attr}_hash'] = Config.anon_token
if len(anon_doc_update.keys()):
logger.debug(
f'Attempting to update ANON user with doc: \'{anon_doc_update}\''
)
anon_results = await Config.modules['user'].update(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
query=[{
'_id': ObjectId('f00000000000000000000011')
}],
doc=anon_doc_update,
)
logger.debug(f'ANON user update results: {anon_results}')
if anon_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug('ANON user is up-to-date.')
Config._sys_docs[ObjectId('f00000000000000000000011')] = SYS_DOC(
module='user')
logger.debug('Testing sessions collection.')
# [DOC] Test if ANON session exists
session_results = await Config.modules['session'].read(
skip_events=[Event.PERM, Event.ON],
env=Config._sys_env,
query=[{
'_id': 'f00000000000000000000012'
}],
)
if not session_results.args.count:
logger.debug('ANON session not found, creating it.')
anon_results = await Config.modules['session'].create(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
doc=_compile_anon_session(),
)
logger.debug(f'ANON session creation results: {anon_results}')
if anon_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
Config._sys_docs[ObjectId('f00000000000000000000012')] = SYS_DOC(
module='session')
logger.debug('Testing groups collection.')
# [DOC] Test if DEFAULT group exists
group_results = await Config.modules['group'].read(
skip_events=[Event.PERM, Event.ON],
env=Config._sys_env,
query=[{
'_id': 'f00000000000000000000013'
}],
)
if not group_results.args.count:
logger.debug('DEFAULT group not found, creating it.')
group_create_doc = {
'_id': ObjectId('f00000000000000000000013'),
'user': ObjectId('f00000000000000000000010'),
'name': {locale: '__DEFAULT'
for locale in Config.locales},
'bio': {locale: '__DEFAULT'
for locale in Config.locales},
'privileges': Config.default_privileges,
}
group_results = await Config.modules['group'].create(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
doc=group_create_doc,
)
logger.debug(f'DEFAULT group creation results: {group_results}')
if group_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug('DEFAULT group found, checking it.')
default_doc = group_results.args.docs[0]
default_doc_update: Dict[str, Any] = {}
for module in Config.default_privileges.keys():
if module not in default_doc.privileges.keys() or set(
default_doc.privileges[module]) != set(
Config.default_privileges[module]):
logger.debug(
f'Detected change in \'default_privileges\' Config Attr.')
default_doc_update[
f'privileges.{module}'] = Config.default_privileges[module]
if len(default_doc_update.keys()):
logger.debug(
f'Attempting to update DEFAULT group with doc: \'{default_doc_update}\''
)
default_results = await Config.modules['group'].update(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
query=[{
'_id': ObjectId('f00000000000000000000013')
}],
doc=default_doc_update,
)
logger.debug(f'DEFAULT group update results: {default_results}')
if anon_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug('DEFAULT group is up-to-date.')
Config._sys_docs[ObjectId('f00000000000000000000013')] = SYS_DOC(
module='group')
# [DOC] Test app-specific groups
logger.debug('Testing app-specific groups collection.')
for group in Config.groups:
group_results = await Config.modules['group'].read(
skip_events=[Event.PERM, Event.ON],
env=Config._sys_env,
query=[{
'_id': group['_id']
}],
)
if not group_results.args.count:
logger.debug(
f'App-specific group with name \'{group["name"]}\' not found, creating it.'
)
group_results = await Config.modules['group'].create(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
doc=group,
)
logger.debug(
f'App-specific group with name {group["name"]} creation results: {group_results}'
)
if group_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug(
f'App-specific group with name \'{group["name"]}\' found, checking it.'
)
group_doc = group_results.args.docs[0]
group_doc_update = {}
if 'privileges' in group.keys():
for module in group['privileges'].keys():
if module not in group_doc.privileges.keys() or set(
group_doc.privileges[module]) != set(
group['privileges'][module]):
logger.debug(
f'Detected change in \'privileges\' Doc Arg for group with name \'{group["name"]}\'.'
)
group_doc_update[f'privileges.{module}'] = group[
'privileges'][module]
if len(group_doc_update.keys()):
logger.debug(
f'Attempting to update group with name \'{group["name"]}\' with doc: \'{group_doc_update}\''
)
group_results = await Config.modules['group'].update(
skip_events=[Event.PERM, Event.PRE, Event.ON],
env=Config._sys_env,
query=[{
'_id': group['_id']
}],
doc=group_doc_update,
)
logger.debug(
f'Group with name \'{group["name"]}\' update results: {group_results}'
)
if group_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
else:
logger.debug(
f'Group with name \'{group["name"]}\' is up-to-date.')
Config._sys_docs[ObjectId(group['_id'])] = SYS_DOC(module='group')
# [DOC] Test app-specific data indexes
logger.debug('Testing data indexes')
for index in Config.data_indexes:
logger.debug(f'Attempting to create data index: {index}')
try:
Config._sys_conn[Config.data_name][
index['collection']].create_index(index['index'])
except Exception as e:
logger.error(
f'Failed to create data index: {index}, with error: {e}')
logger.error('Evaluate error and take action manually.')
logger.debug(
'Creating \'var\', \'type\', \'user\' data indexes for settings collections.'
)
Config._sys_conn[Config.data_name]['settings'].create_index([('var', 1)])
Config._sys_conn[Config.data_name]['settings'].create_index([('type', 1)])
Config._sys_conn[Config.data_name]['settings'].create_index([('user', 1)])
logger.debug(
'Creating \'user\', \'event\', \'subevent\' data indexes for analytics collections.'
)
Config._sys_conn[Config.data_name]['analytics'].create_index([('user', 1)])
Config._sys_conn[Config.data_name]['analytics'].create_index([('event', 1)
])
Config._sys_conn[Config.data_name]['analytics'].create_index([('subevent',
1)])
logger.debug('Creating \'__deleted\' data indexes for all collections.')
for module in Config.modules:
if Config.modules[module].collection:
logger.debug(
f'Attempting to create \'__deleted\' data index for collection: {Config.modules[module].collection}'
)
Config._sys_conn[Config.data_name][
Config.modules[module].collection].create_index([('__deleted',
1)])
# [DOC] Test app-specific docs
logger.debug('Testing docs.')
for doc in Config.docs:
if type(doc) != SYS_DOC:
logger.error(f'Invalid Config Attr \'docs\'. Exiting.')
exit(1)
doc_results = await Config.modules[doc.module].read(
skip_events=[Event.PERM, Event.PRE, Event.ON, Event.ARGS],
env=Config._sys_env,
query=[{
doc.key: doc.key_value
}], # type: ignore
)
if not doc_results.args.count:
skip_events = [Event.PERM]
if doc.skip_args == True:
skip_events.append(Event.ARGS)
doc.doc = cast(NAWAH_DOC, doc.doc)
doc_results = await Config.modules[doc.module].create(
skip_events=skip_events, env=Config._sys_env, doc=doc.doc)
logger.debug(
'App-specific doc with %s \'%s\' of module \'%s\' creation results: %s',
doc.key,
doc.key_value,
doc.module,
doc_results,
)
if doc_results.status != 200:
logger.error('Config step failed. Exiting.')
exit(1)
Config._sys_docs[ObjectId(
doc_results.args.docs[0]._id)] = SYS_DOC(module=doc.module)
# [DOC] Check for emulate_test mode
if Config.emulate_test:
Config.test = True
def _hash_password(password: str) -> str:
"""
Hashes the password with sha512 and a custom salt
"""
# return pbkdf2_sha512.encrypt(password, rounds=ROUNDS, salt=SALT)
return pbkdf2_sha512.using(rounds=ROUNDS, salt=SALT).hash(password)
def add_user(gpg_user):
try:
if os.path.isfile("cheshire.db.gpg"):
check_l1, check_l2, check_l3, check_l4 = False, False, False, False
username = input("Username: "******"""
Weak password!
Min. characters (6)
Be sure that you have the following requirements:
Upper and lower cases letters;
Special characters: !@#€£$§%&/{([)]=}?«»|*-+.:;,~^
"""
if len(new_passwd) < 6:
print(f"{bcolors.WARNING}[!]{bcolors.ENDC} WARNING:")
print(msg)
else:
for _a, _b, _c, _d in zip(l1, l2, l3, l4):
if new_passwd.__contains__(_a):
check_l1 = True
if new_passwd.__contains__(_b):
check_l2 = True
if new_passwd.__contains__(_c):
check_l3 = True
if new_passwd.__contains__(_d):
check_l4 = True
if check_l1 and check_l2 and check_l3 and check_l4:
if new_passwd != confirm_new_passwd:
print(
f"{bcolors.FAIL}[x]{bcolors.ENDC} Wrong password!")
else:
gpg_dec()
c, conn = connection()
query = f"INSERT INTO `users` (`username`, `password`) VALUES ({_S}, {_S})"
new_hash = pbkdf2_sha512.using(
rounds=12, salt_size=300).hash(new_passwd)
values = (
username,
new_hash,
)
c.execute(query, values)
conn.commit()
print(
f"{bcolors.OKGREEN}[✓]{bcolors.ENDC} User was created successfully!"
)
else:
print(f"{bcolors.WARNING}[!]{bcolors.ENDC} WARNING:")
print(msg)
else:
ap.print_help()
except sqlite3.IntegrityError:
print(f"{bcolors.WARNING}[!]{bcolors.ENDC} User already exists!")
except Exception as e:
_except(line=sys.exc_info()[-1].tb_lineno,
error=e,
function_name=what_func(),
script_name=__file__)
finally:
try:
c.close()
conn.close()
gpg_enc(gpg_user=gpg_user)
sys.exit(0)
except Exception as e:
sys.exit(2)