def user_process(request, **kwargs): for key, value in kwargs.iteritems(): if key == "email": selected_email = value redirect_url = "/portal/user/" + selected_email user_query = Query().get('local:user').filter_by( 'email', '==', selected_email).select('user_id', 'email', 'password', 'config') user_details = execute_admin_query(request, user_query) # getting the user_id from the session for user_detail in user_details: user_id = user_detail['user_id'] user_email = user_detail['email'] account_query = Query().get('local:account').filter_by( 'user_id', '==', user_id).select('user_id', 'platform_id', 'auth_type', 'config') account_details = execute_admin_query(request, account_query) platform_query = Query().get('local:platform').select( 'platform_id', 'platform') platform_details = execute_admin_query(request, platform_query) for account_detail in account_details: for platform_detail in platform_details: # Add reference account to the platforms if 'add_' + platform_detail['platform'] in request.POST: platform_id = platform_detail['platform_id'] user_params = { 'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}' } manifold_add_account(request, user_params) messages.info( request, 'Reference Account is added to the selected platform successfully!' ) return HttpResponseRedirect(redirect_url) # Delete reference account from the platforms if 'delete_' + platform_detail['platform'] in request.POST: platform_id = platform_detail['platform_id'] user_params = {'user_id': user_id} manifold_delete_account(request, platform_id, user_id, user_params) messages.info( request, 'Refeence Account is removed from the selected platform') return HttpResponseRedirect(redirect_url) if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) acc_slice_cred = account_config.get( 'delegated_slice_credentials', 'N/A') acc_auth_cred = account_config.get( 'delegated_authority_credentials', 'N/A') # adding the slices and corresponding credentials to list if 'N/A' not in acc_slice_cred: slice_list = [] slice_cred = [] for key, value in acc_slice_cred.iteritems(): slice_list.append(key) slice_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(slice_list)): if 'dl_' + slice_list[i] in request.POST: slice_detail = "Slice name: " + slice_list[ i] + "\nSlice Credentials: \n" + slice_cred[ i] response = HttpResponse( slice_detail, content_type='text/plain') response[ 'Content-Disposition'] = 'attachment; filename="slice_credential.txt"' return response # adding the authority and corresponding credentials to list if 'N/A' not in acc_auth_cred: auth_list = [] auth_cred = [] for key, value in acc_auth_cred.iteritems(): auth_list.append(key) auth_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(auth_list)): if 'dl_' + auth_list[i] in request.POST: auth_detail = "Authority: " + auth_list[ i] + "\nAuthority Credentials: \n" + auth_cred[ i] response = HttpResponse( auth_detail, content_type='text/plain') response[ 'Content-Disposition'] = 'attachment; filename="auth_credential.txt"' return response if 'submit_name' in request.POST: edited_first_name = request.POST['fname'] edited_last_name = request.POST['lname'] config = {} for user_config in user_details: if user_config['config']: config = json.loads(user_config['config']) config['firstname'] = edited_first_name config['lastname'] = edited_last_name config['authority'] = config.get('authority', 'Unknown Authority') updated_config = json.dumps(config) user_params = {'config': updated_config} else: # it's needed if the config is empty user_config[ 'config'] = '{"firstname":"' + edited_first_name + '", "lastname":"' + edited_last_name + '", "authority": "Unknown Authority"}' user_params = {'config': user_config['config']} # updating config local:user in manifold manifold_update_user(request, user_email, user_params) # this will be depricated, we will show the success msg in same page # Redirect to same page with success message messages.success(request, 'Sucess: First Name and Last Name Updated.') return HttpResponseRedirect(redirect_url) elif 'submit_auth' in request.POST: edited_auth = request.POST['authority'] config = {} for user_config in user_details: if user_config['config']: config = json.loads(user_config['config']) config['firstname'] = config.get('firstname', 'N/A') config['lastname'] = config.get('lastname', 'N/A') config['authority'] = edited_auth updated_config = json.dumps(config) user_params = {'config': updated_config} else: # it's needed if the config is empty user_config[ 'config'] = '{"firstname": "N/A", "lastname":"N/A", "authority":"' + edited_auth + '"}' user_params = {'config': user_config['config']} # updating config local:user in manifold manifold_update_user(request, user_email, user_params) # this will be depricated, we will show the success msg in same page # Redirect to same page with success message messages.success(request, 'Sucess: Authority Updated.') return HttpResponseRedirect(redirect_url) # XXX TODO: Factorize with portal/registrationview.py elif 'generate' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps( public.exportKey(format='OpenSSH')) # updating manifold local:account table account_config = json.loads(account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn', 'N/A') keypair = '{"user_public_key":' + public_key + ', "user_private_key":' + private_key + ', "user_hrn":"' + user_hrn + '"}' updated_config = json.dumps(account_config) # updating manifold user_params = { 'config': keypair, 'auth_type': 'managed' } manifold_update_account(request, user_id, user_params) # updating sfa #public_key = public_key.replace('"', ''); #user_pub_key = {'keys': public_key} #sfa_update_user(request, user_hrn, user_pub_key) messages.success( request, 'Sucess: New Keypair Generated! Delegation of your credentials will be automatic.' ) return HttpResponseRedirect(redirect_url) else: messages.error( request, 'Account error: You need an account in myslice platform to perform this action' ) return HttpResponseRedirect(redirect_url) elif 'upload_key' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: up_file = request.FILES['pubkey'] file_content = up_file.read() file_name = up_file.name file_extension = os.path.splitext(file_name)[1] allowed_extension = ['.pub', '.txt'] if file_extension in allowed_extension and re.search( r'ssh-rsa', file_content): account_config = json.loads( account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn', 'N/A') file_content = '{"user_public_key":"' + file_content + '", "user_hrn":"' + user_hrn + '"}' #file_content = re.sub("\r", "", file_content) #file_content = re.sub("\n", "\\n",file_content) file_content = ''.join(file_content.split()) #update manifold local:account table user_params = { 'config': file_content, 'auth_type': 'user' } manifold_update_account(request, user_id, user_params) # updating sfa #user_pub_key = {'keys': file_content} #sfa_update_user(request, user_hrn, user_pub_key) messages.success( request, 'Publickey uploaded! Please delegate your credentials using SFA: http://trac.myslice.info/wiki/DelegatingCredentials' ) return HttpResponseRedirect(redirect_url) else: messages.error( request, 'RSA key error: Please upload a valid RSA public key [.txt or .pub].' ) return HttpResponseRedirect(redirect_url) else: messages.error( request, 'Account error: You need an account in myslice platform to perform this action' ) return HttpResponseRedirect(redirect_url) elif 'dl_pubkey' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) public_key = account_config['user_public_key'] response = HttpResponse(public_key, content_type='text/plain') response[ 'Content-Disposition'] = 'attachment; filename="pubkey.txt"' return response break else: messages.error( request, 'Account error: You need an account in myslice platform to perform this action' ) return HttpResponseRedirect(redirect_url) elif 'dl_pkey' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) if 'user_private_key' in account_config: private_key = account_config['user_private_key'] response = HttpResponse(private_key, content_type='text/plain') response[ 'Content-Disposition'] = 'attachment; filename="privkey.txt"' return response else: messages.error( request, 'Download error: Private key is not stored in the server' ) return HttpResponseRedirect(redirect_url) else: messages.error( request, 'Account error: You need an account in myslice platform to perform this action' ) return HttpResponseRedirect(redirect_url) # elif 'delete' in request.POST: # for account_detail in account_details: # for platform_detail in platform_details: # if platform_detail['platform_id'] == account_detail['platform_id']: # if 'myslice' in platform_detail['platform']: # account_config = json.loads(account_detail['config']) # if 'user_private_key' in account_config: # for key in account_config.keys(): # if key == 'user_private_key': # del account_config[key] # # updated_config = json.dumps(account_config) # user_params = { 'config': updated_config, 'auth_type':'user'} # manifold_update_account(request,user_params) # messages.success(request, 'Private Key deleted. You need to delegate credentials manually once it expires.') # messages.success(request, 'Once your credentials expire, Please delegate manually using SFA: http://trac.myslice.info/wiki/DelegatingCredentials') # return HttpResponseRedirect("/portal/account/") # else: # messages.error(request, 'Delete error: Private key is not stored in the server') # return HttpResponseRedirect(redirect_url) # # else: # messages.error(request, 'Account error: You need an account in myslice platform to perform this action') # return HttpResponseRedirect(redirect_url) #clear all creds elif 'clear_cred' in request.POST: clear_user_creds(request, user_email) messages.success(request, 'All Credentials cleared') return HttpResponseRedirect(redirect_url) #make a user PI elif 'makepi' in request.POST: # getting user's authority_hrn config = {} for user_config in user_details: if user_config['config']: user_config = json.loads(user_config['config']) authority_hrn = user_config.get('authority', 'Unknown Authority') #getting user_hrn for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) user_hrn = account_config.get('user_hrn', 'N/A') authority_add_pis(request, authority_hrn, user_hrn) clear_user_creds(request, user_email) messages.success(request, 'User upgraded to PI') return HttpResponseRedirect(redirect_url) elif 'removepi' in request.POST: # getting user's authority_hrn config = {} for user_config in user_details: if user_config['config']: user_config = json.loads(user_config['config']) authority_hrn = user_config.get('authority', 'Unknown Authority') #getting user_hrn for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail[ 'platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) user_hrn = account_config.get('user_hrn', 'N/A') authority_remove_pis(request, authority_hrn, user_hrn) clear_user_creds(request, user_email) messages.success(request, 'PI downgraded to user') return HttpResponseRedirect(redirect_url) # Download delegated_user_cred elif 'dl_user_cred' in request.POST: if 'delegated_user_credential' in account_config: user_cred = account_config['delegated_user_credential'] response = HttpResponse(user_cred, content_type='text/plain') response[ 'Content-Disposition'] = 'attachment; filename="user_cred.txt"' return response else: messages.error( request, 'Download error: User credential is not stored in the server') return HttpResponseRedirect(redirect_url) else: messages.info(request, 'Under Construction. Please try again later!') return HttpResponseRedirect(redirect_url)
def get_or_post (self, request, method): errors = [] # Using cache manifold-tables to get the list of authorities faster authorities_query = Query.get('authority').select('name', 'authority_hrn') #onelab_enabled_query = Query.get('local:platform').filter_by('platform', '==', 'ple').filter_by('disabled', '==', 'False') #onelab_enabled = not not execute_admin_query(request, onelab_enabled_query) #if onelab_enabled: if True: print "ONELAB ENABLED" #authorities_query = Query.get('ple:authority').select('name', 'authority_hrn').filter_by('authority_hrn', 'included', ['ple.inria', 'ple.upmc', 'ple.ibbtple', 'ple.nitos']) # Now using Cache else: print "FIREXP ENABLED" authorities = execute_admin_query(request, authorities_query) if authorities is not None: authorities = sorted(authorities) # xxx tocheck - if authorities is empty, it's no use anyway # (users won't be able to validate the form anyway) page = Page(request) page.add_js_files ( [ "js/jquery.validate.js", "js/my_account.register.js" ] ) page.add_css_files ( [ "css/onelab.css", "css/registration.css" ] ) page.add_css_files ( [ "http://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" ] ) print 'registration view, method',method user_query = Query().get('local:user').select('user_id','email') user_details = execute_admin_query(self.request, user_query) if method == 'POST': # We shall use a form here #get_email = PendingUser.objects.get(email) reg_fname = request.POST.get('firstname', '') reg_lname = request.POST.get('lastname', '') #reg_aff = request.POST.get('affiliation','') reg_auth = request.POST.get('authority_hrn', '') #reg_login = request.POST.get('login', '') reg_email = request.POST.get('email','').lower() #prepare user_hrn split_email = reg_email.split("@")[0] split_email = split_email.replace(".", "_") user_hrn = reg_auth + '.' + split_email+ str(randint(1,1000000)) UserModel = get_user_model() #POST value validation if (re.search(r'^[\w+\s.@+-]+$', reg_fname)==None): errors.append('First Name may contain only letters, numbers, spaces and @/./+/-/_ characters.') if (re.search(r'^[\w+\s.@+-]+$', reg_lname) == None): errors.append('Last Name may contain only letters, numbers, spaces and @/./+/-/_ characters.') # checking in django_db !! if PendingUser.objects.filter(email__iexact=reg_email): errors.append('Email is pending for validation. Please provide a new email address.') if UserModel._default_manager.filter(email__iexact=reg_email): errors.append('This email is not usable. Please contact the administrator or try with another email.') for user_detail in user_details: if user_detail['email']==reg_email: errors.append('Email already registered in Manifold. Please provide a new email address.') # XXX TODO: Factorize with portal/accountview.py if 'generate' in request.POST['question']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format='OpenSSH')) # # Generate public and private keys using SFA Library # from sfa.trust.certificate import Keypair # k = Keypair(create=True) # public_key = k.get_pubkey_string() # private_key = k.as_pem() # private_key = ''.join(private_key.split()) # public_key = "ssh-rsa " + public_key # Saving to DB account_config = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + ', "user_hrn":"'+ user_hrn + '"}' auth_type = 'managed' #keypair = re.sub("\r", "", keypair) #keypair = re.sub("\n", "\\n", keypair) #keypair = keypair.rstrip('\r\n') #keypair = ''.join(keypair.split()) #for sending email: removing existing double qoute public_key = public_key.replace('"', ''); else: up_file = request.FILES['user_public_key'] file_content = up_file.read() file_name = up_file.name file_extension = os.path.splitext(file_name)[1] allowed_extension = ['.pub','.txt'] if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content): account_config = '{"user_public_key":"'+ file_content + '", "user_hrn":"'+ user_hrn +'"}' account_config = re.sub("\r", "", account_config) account_config = re.sub("\n", "\\n",account_config) account_config = ''.join(account_config.split()) auth_type = 'user' # for sending email public_key = file_content public_key = ''.join(public_key.split()) else: errors.append('Please upload a valid RSA public key.') #b = PendingUser(first_name=reg_fname, last_name=reg_lname, affiliation=reg_aff, # email=reg_email, password=request.POST['password'], keypair=keypair) #b.save() #saving to django db 'portal_pendinguser' table if not errors: b = PendingUser( first_name = reg_fname, last_name = reg_lname, #affiliation = reg_aff, authority_hrn = reg_auth, #login = reg_login, email = reg_email, password = request.POST['password'], keypair = account_config, pi = '', ) b.save() # saves the user to django auth_user table [needed for password reset] user = User.objects.create_user(reg_email, reg_email, request.POST['password']) #creating user to manifold local:user user_config = '{"firstname":"'+ reg_fname + '", "lastname":"'+ reg_lname + '", "authority":"'+ reg_auth + '"}' user_params = {'email': reg_email, 'password': request.POST['password'], 'config': user_config, 'status': 1} manifold_add_user(request,user_params) #creating local:account in manifold user_id = user_detail['user_id']+1 # the user_id for the newly created user in local:user account_params = {'platform_id': 5, 'user_id': user_id, 'auth_type': auth_type, 'config': account_config} manifold_add_account(request,account_params) # Send email ctx = { 'first_name' : reg_fname, 'last_name' : reg_lname, 'authority_hrn' : reg_auth, 'email' : reg_email, 'user_hrn' : user_hrn, 'public_key' : public_key, } recipients = authority_get_pi_emails(request,reg_auth) # backup email: if authority_get_pi_emails fails recipients.append('*****@*****.**') msg = render_to_string('user_request_email.txt', ctx) send_mail("Onelab New User request for %s submitted"%reg_email, msg, '*****@*****.**', recipients) return render(request, 'user_register_complete.html') template_env = { 'topmenu_items': topmenu_items_live('Register', page), 'errors': errors, 'firstname': request.POST.get('firstname', ''), 'lastname': request.POST.get('lastname', ''), #'affiliation': request.POST.get('affiliation', ''), 'authority_hrn': request.POST.get('authority_hrn', ''), 'email': request.POST.get('email', ''), 'password': request.POST.get('password', ''), 'authorities': authorities, } template_env.update(page.prelude_env ()) return render(request, 'registration_view.html',template_env)
def get_or_post(self, request, method): errors = [] # List authorities already in the Registry in order to avoid duplicates # Using cache manifold-tables to get the list of authorities faster authorities_query = Query.get("authority").select("name", "authority_hrn") authorities = execute_admin_query(request, authorities_query) if authorities is not None: authorities = sorted(authorities) root_authorities = sorted([a for a in authorities if "." not in a["authority_hrn"]]) page = Page(request) page.add_js_files(["js/jquery.validate.js", "js/join.js"]) page.add_css_files(["css/onelab.css", "css/registration.css"]) page.add_css_files(["http://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css"]) if method == "POST": # xxx tocheck - if authorities is empty, it's no use anyway # (users won't be able to validate the form anyway) # List local users in Manifold DB in order ot avoid duplicates user_query = Query().get("local:user").select("user_id", "email") list_users = execute_admin_query(self.request, user_query) reg_root_authority_hrn = request.POST.get("root_authority_hrn", "").lower() reg_site_name = request.POST.get("site_name", "") reg_site_authority = request.POST.get("site_authority", "").lower() reg_site_abbreviated_name = request.POST.get("site_abbreviated_name", "") reg_site_url = request.POST.get("site_url", "") reg_site_latitude = request.POST.get("site_latitude", "") reg_site_longitude = request.POST.get("site_longitude", "") reg_fname = request.POST.get("pi_first_name", "") reg_lname = request.POST.get("pi_last_name", "") reg_auth = reg_root_authority_hrn + "." + reg_site_authority reg_email = request.POST.get("pi_email", "").lower() reg_phone = request.POST.get("pi_phone", "") # prepare user_hrn split_email = reg_email.split("@")[0] split_email = split_email.replace(".", "_") user_hrn = reg_auth + "." + split_email + str(randint(1, 1000000)) UserModel = get_user_model() reg_address_line1 = request.POST.get("address_line1", "") reg_address_line2 = request.POST.get("address_line2", "") reg_address_line3 = request.POST.get("address_line3", "") reg_address_city = request.POST.get("address_city", "") reg_address_postalcode = request.POST.get("address_postalcode", "") reg_address_state = request.POST.get("address_state", "") reg_address_country = request.POST.get("address_country", "") # POST value validation if re.search(r"^[\w+\s.@+-]+$", reg_fname) == None: errors.append("First Name may contain only letters, numbers, spaces and @/./+/-/_ characters.") if re.search(r"^[\w+\s.@+-]+$", reg_lname) == None: errors.append("Last Name may contain only letters, numbers, spaces and @/./+/-/_ characters.") if re.search(r"^\w+$", reg_site_authority) == None: errors.append("Site Authority may contain only letters or numbers.") # checking in django_db !! if PendingUser.objects.filter(email__iexact=reg_email): errors.append("Email is pending for validation. Please provide a new email address.") if PendingAuthority.objects.filter(site_authority__iexact=reg_auth): errors.append("This site is pending for validation.") if PendingAuthority.objects.filter(site_name__iexact=reg_site_name): errors.append("This site is pending for validation.") if UserModel._default_manager.filter(email__iexact=reg_email): errors.append("This email is not usable. Please contact the administrator or try with another email.") for user_detail in list_users: if user_detail["email"] == reg_email: errors.append("Email already registered in Manifold. Please provide a new email address.") # XXX TODO: Factorize with portal/accountview.py # if 'generate' in request.POST['question']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format="OpenSSH")) # Saving to DB account_config = ( '{"user_public_key":' + public_key + ', "user_private_key":' + private_key + ', "user_hrn":"' + user_hrn + '"}' ) auth_type = "managed" public_key = public_key.replace('"', "") if not errors: reg_password = request.POST["pi_password"] a = PendingAuthority( site_name=reg_site_name, site_authority=reg_root_authority_hrn + "." + reg_site_authority, site_abbreviated_name=reg_site_abbreviated_name, site_url=reg_site_url, site_latitude=reg_site_latitude, site_longitude=reg_site_longitude, address_line1=reg_address_line1, address_line2=reg_address_line2, address_line3=reg_address_line3, address_city=reg_address_city, address_postalcode=reg_address_postalcode, address_state=reg_address_state, address_country=reg_address_country, authority_hrn=reg_root_authority_hrn, ) a.save() reg_password = request.POST["pi_password"] b = PendingUser( first_name=reg_fname, last_name=reg_lname, authority_hrn=reg_auth, email=reg_email, password=reg_password, keypair=account_config, pi=reg_auth, ) b.save() # saves the user to django auth_user table [needed for password reset] user = User.objects.create_user(reg_email, reg_email, reg_password) # creating user to manifold local:user user_config = ( '{"firstname":"' + reg_fname + '", "lastname":"' + reg_lname + '", "authority":"' + reg_auth + '"}' ) user_params = {"email": reg_email, "password": reg_password, "config": user_config, "status": 1} manifold_add_user(request, user_params) # creating local:account in manifold user_id = user_detail["user_id"] + 1 # the user_id for the newly created user in local:user account_params = { "platform_id": 5, "user_id": user_id, "auth_type": auth_type, "config": account_config, } manifold_add_account(request, account_params) # Send email ctx = { "first_name": reg_fname, "last_name": reg_lname, "authority_hrn": reg_auth, "email": reg_email, "user_hrn": user_hrn, "public_key": public_key, } recipients = authority_get_pi_emails(request, reg_auth) # We don't need to send this email to user. # it's for the PI only # if ctx['cc_myself']: # recipients.append(ctx['email']) msg = render_to_string("user_request_email.txt", ctx) send_mail( "Onelab New Authority request for %s submitted" % reg_email, msg, "*****@*****.**", recipients ) return render(request, "user_register_complete.html") template_env = { "topmenu_items": topmenu_items_live("join", page), "errors": errors, "pi_first_name": request.POST.get("pi_first_name", ""), "pi_last_name": request.POST.get("pi_last_name", ""), "pi_email": request.POST.get("pi_email", ""), "pi_phone": request.POST.get("pi_phone", ""), "pi_password": request.POST.get("pi_password", ""), "site_name": request.POST.get("site_name", ""), "site_authority": request.POST.get("site_authority", "").lower(), "site_abbreviated_name": request.POST.get("site_abbreviated_name", ""), "site_url": request.POST.get("site_url", ""), "site_latitude": request.POST.get("site_latitude", ""), "site_longitude": request.POST.get("site_longitude", ""), "address_line1": request.POST.get("address_line1", ""), "address_line2": request.POST.get("address_line2", ""), "address_line3": request.POST.get("address_line3", ""), "address_city": request.POST.get("address_city", ""), "address_postalcode": request.POST.get("address_postalcode", ""), "address_state": request.POST.get("address_state", ""), "address_country": request.POST.get("address_country", ""), "root_authority_hrn": request.POST.get("root_authority_hrn", "").lower(), "root_authorities": root_authorities, "authorities": authorities, } template_env.update(page.prelude_env()) return render(request, "join_view.html", template_env)
def account_process(request): user_query = Query().get('local:user').select('user_id','email','password','config') user_details = execute_query(request, user_query) account_query = Query().get('local:account').select('user_id','platform_id','auth_type','config') account_details = execute_query(request, account_query) platform_query = Query().get('local:platform').select('platform_id','platform') platform_details = execute_query(request, platform_query) # getting the user_id from the session for user_detail in user_details: user_id = user_detail['user_id'] for account_detail in account_details: for platform_detail in platform_details: # Add reference account to the platforms if 'add_'+platform_detail['platform'] in request.POST: platform_id = platform_detail['platform_id'] user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'} manifold_add_account(request,user_params) messages.info(request, 'Reference Account is added to the selected platform successfully!') return HttpResponseRedirect("/portal/account/") # Delete reference account from the platforms if 'delete_'+platform_detail['platform'] in request.POST: platform_id = platform_detail['platform_id'] user_params = {'user_id':user_id} manifold_delete_account(request,platform_id, user_id, user_params) messages.info(request, 'Reference Account is removed from the selected platform') return HttpResponseRedirect("/portal/account/") if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) acc_slice_cred = account_config.get('delegated_slice_credentials','N/A') acc_auth_cred = account_config.get('delegated_authority_credentials','N/A') # adding the slices and corresponding credentials to list if 'N/A' not in acc_slice_cred: slice_list = [] slice_cred = [] for key, value in acc_slice_cred.iteritems(): slice_list.append(key) slice_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(slice_list)): if 'dl_'+slice_list[i] in request.POST: slice_detail = "Slice name: " + slice_list[i] +"\nSlice Credentials: \n"+ slice_cred[i] response = HttpResponse(slice_detail, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="slice_credential.txt"' return response # adding the authority and corresponding credentials to list if 'N/A' not in acc_auth_cred: auth_list = [] auth_cred = [] for key, value in acc_auth_cred.iteritems(): auth_list.append(key) auth_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(auth_list)): if 'dl_'+auth_list[i] in request.POST: auth_detail = "Authority: " + auth_list[i] +"\nAuthority Credentials: \n"+ auth_cred[i] response = HttpResponse(auth_detail, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="auth_credential.txt"' return response if 'submit_name' in request.POST: edited_first_name = request.POST['fname'] edited_last_name = request.POST['lname'] config={} for user_config in user_details: if user_config['config']: config = json.loads(user_config['config']) config['firstname'] = edited_first_name config['lastname'] = edited_last_name config['authority'] = config.get('authority','Unknown Authority') updated_config = json.dumps(config) user_params = {'config': updated_config} else: # it's needed if the config is empty user_config['config']= '{"firstname":"' + edited_first_name + '", "lastname":"'+ edited_last_name + '", "authority": "Unknown Authority"}' user_params = {'config': user_config['config']} # updating config local:user in manifold manifold_update_user(request, request.user.email,user_params) # this will be depricated, we will show the success msg in same page # Redirect to same page with success message messages.success(request, 'Sucess: First Name and Last Name Updated.') return HttpResponseRedirect("/portal/account/") elif 'submit_pass' in request.POST: edited_password = request.POST['password'] for user_pass in user_details: user_pass['password'] = edited_password #updating password in local:user user_params = { 'password': user_pass['password']} manifold_update_user(request,request.user.email,user_params) # return HttpResponse('Success: Password Changed!!') messages.success(request, 'Sucess: Password Updated.') return HttpResponseRedirect("/portal/account/") # XXX TODO: Factorize with portal/registrationview.py elif 'generate' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format='OpenSSH')) # updating manifold local:account table account_config = json.loads(account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn','N/A') keypair = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + ', "user_hrn":"'+ user_hrn + '"}' updated_config = json.dumps(account_config) # updating manifold user_params = { 'config': keypair, 'auth_type':'managed'} manifold_update_account(request, user_id, user_params) # updating sfa public_key = public_key.replace('"', ''); user_pub_key = {'keys': public_key} sfa_update_user(request, user_hrn, user_pub_key) messages.success(request, 'Sucess: New Keypair Generated! Delegation of your credentials will be automatic.') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'upload_key' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: up_file = request.FILES['pubkey'] file_content = up_file.read() file_name = up_file.name file_extension = os.path.splitext(file_name)[1] allowed_extension = ['.pub','.txt'] if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content): account_config = json.loads(account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn','N/A') file_content = '{"user_public_key":"'+ file_content + '", "user_hrn":"'+ user_hrn +'"}' #file_content = re.sub("\r", "", file_content) #file_content = re.sub("\n", "\\n",file_content) file_content = ''.join(file_content.split()) #update manifold local:account table user_params = { 'config': file_content, 'auth_type':'user'} manifold_update_account(request, user_id, user_params) # updating sfa user_pub_key = {'keys': file_content} sfa_update_user(request, user_hrn, user_pub_key) messages.success(request, 'Publickey uploaded! Please delegate your credentials using SFA: http://trac.myslice.info/wiki/DelegatingCredentials') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'RSA key error: Please upload a valid RSA public key [.txt or .pub].') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'dl_pubkey' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) public_key = account_config['user_public_key'] response = HttpResponse(public_key, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="pubkey.txt"' return response break else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'dl_pkey' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) if 'user_private_key' in account_config: private_key = account_config['user_private_key'] response = HttpResponse(private_key, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="privkey.txt"' return response else: messages.error(request, 'Download error: Private key is not stored in the server') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'delete' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) if 'user_private_key' in account_config: for key in account_config.keys(): if key == 'user_private_key': del account_config[key] updated_config = json.dumps(account_config) user_params = { 'config': updated_config, 'auth_type':'user'} manifold_update_account(request, user_id, user_params) messages.success(request, 'Private Key deleted. You need to delegate credentials manually once it expires.') messages.success(request, 'Once your credentials expire, Please delegate manually using SFA: http://trac.myslice.info/wiki/DelegatingCredentials') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Delete error: Private key is not stored in the server') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") #clear all creds elif 'clear_cred' in request.POST: for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) user_cred = account_config.get('delegated_user_credential','N/A') if 'N/A' not in user_cred: user_hrn = account_config.get('user_hrn','N/A') user_pub_key = json.dumps(account_config.get('user_public_key','N/A')) user_priv_key = json.dumps(account_config.get('user_private_key','N/A')) updated_config = '{"user_public_key":'+ user_pub_key + ', "user_private_key":'+ user_priv_key + ', "user_hrn":"'+ user_hrn + '"}' user_params = { 'config': updated_config} manifold_update_account(request,user_id, user_params) messages.success(request, 'All Credentials cleared') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Delete error: Credentials are not stored in the server') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") # Download delegated_user_cred elif 'dl_user_cred' in request.POST: if 'delegated_user_credential' in account_config: user_cred = account_config['delegated_user_credential'] response = HttpResponse(user_cred, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_cred.txt"' return response else: messages.error(request, 'Download error: User credential is not stored in the server') return HttpResponseRedirect("/portal/account/") else: messages.info(request, 'Under Construction. Please try again later!') return HttpResponseRedirect("/portal/account/")
def account_process(request): from sfa.trust.credential import Credential from sfa.trust.certificate import Keypair user_query = Query().get('local:user').select('user_id','email','password','config') user_details = execute_query(request, user_query) account_query = Query().get('local:account').select('user_id','platform_id','auth_type','config') account_details = execute_query(request, account_query) platform_query = Query().get('local:platform').select('platform_id','platform') platform_details = execute_query(request, platform_query) # getting the user_id from the session for user_detail in user_details: user_id = user_detail['user_id'] user_email = user_detail['email'] try: if user_email == request.user.email: authorize_query = True else: logger.error("SECURITY: {} tried to update {}".format(user_email, request.user.email)) messages.error(request, 'You are not authorized to modify another user.') return HttpResponseRedirect("/portal/account/") except Exception as e: logger.error("exception in account_process {}".format(e)) for account_detail in account_details: for platform_detail in platform_details: # Add reference account to the platforms if 'add_'+platform_detail['platform'] in request.POST\ or request.POST['button_value'] == 'add_'+platform_detail['platform']: platform_id = platform_detail['platform_id'] user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'} manifold_add_account(request,user_params) messages.info(request, 'Reference Account is added to the selected platform successfully!') return HttpResponseRedirect("/portal/account/") # Delete reference account from the platforms if 'delete_'+platform_detail['platform'] in request.POST\ or request.POST['button_value'] == 'delete_'+platform_detail['platform']: platform_id = platform_detail['platform_id'] user_params = {'user_id':user_id} manifold_delete_account(request,platform_id, user_id, user_params) messages.info(request, 'Reference Account is removed from the selected platform') return HttpResponseRedirect("/portal/account/") if platform_detail['platform_id'] == account_detail['platform_id']: if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) acc_slice_cred = account_config.get('delegated_slice_credentials','N/A') acc_auth_cred = account_config.get('delegated_authority_credentials','N/A') # adding the slices and corresponding credentials to list if 'N/A' not in acc_slice_cred: slice_list = [] slice_cred = [] for key, value in acc_slice_cred.iteritems(): slice_list.append(key) slice_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(slice_list)): if 'dl_'+slice_list[i] in request.POST or request.POST['button_value'] == 'dl_'+slice_list[i]: slice_detail = "Slice name: " + slice_list[i] +"\nSlice Credentials: \n"+ slice_cred[i] response = HttpResponse(slice_detail, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="slice_credential.txt"' return response # adding the authority and corresponding credentials to list if 'N/A' not in acc_auth_cred: auth_list = [] auth_cred = [] for key, value in acc_auth_cred.iteritems(): auth_list.append(key) auth_cred.append(value) # special case: download each slice credentials separately for i in range(0, len(auth_list)): if 'dl_'+auth_list[i] in request.POST or request.POST['button_value'] == 'dl_'+auth_list[i]: auth_detail = "Authority: " + auth_list[i] +"\nAuthority Credentials: \n"+ auth_cred[i] response = HttpResponse(auth_detail, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="auth_credential.txt"' return response account_detail = get_myslice_account(request) if 'submit_name' in request.POST: edited_first_name = request.POST['fname'] edited_last_name = request.POST['lname'] config={} for user_config in user_details: if user_config['config']: config = json.loads(user_config['config']) config['firstname'] = edited_first_name config['lastname'] = edited_last_name config['authority'] = config.get('authority','Unknown Authority') updated_config = json.dumps(config) user_params = {'config': updated_config} else: # it's needed if the config is empty user_config['config'] = '{{"firstname":"{}", "lastname":"{}", "authority": "Unknown Authority"}}'\ .format(edited_first_name, edited_last_name) user_params = {'config': user_config['config']} # updating config local:user in manifold manifold_update_user(request, request.user.email,user_params) # this will be depricated, we will show the success msg in same page # Redirect to same page with success message messages.success(request, 'Sucess: First Name and Last Name Updated.') return HttpResponseRedirect("/portal/account/") elif 'submit_pass' in request.POST: edited_password = request.POST['password'] for user_pass in user_details: user_pass['password'] = edited_password #updating password in local:user user_params = { 'password' : user_pass['password']} manifold_update_user(request, request.user.email, user_params) # return HttpResponse('Success: Password Changed!!') messages.success(request, 'Success: Password Updated.') return HttpResponseRedirect("/portal/account/") # XXX TODO: Factorize with portal/registrationview.py # XXX TODO: Factorize with portal/registrationview.py # XXX TODO: Factorize with portal/joinview.py elif 'generate' in request.POST: try: private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format='OpenSSH')) # updating manifold local:account table account_config = json.loads(account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn','N/A') keypair = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + ', "user_hrn":"'+ user_hrn + '"}' #updated_config = json.dumps(account_config) # updating manifold #user_params = { 'config': keypair, 'auth_type':'managed'} #manifold_update_account(request, user_id, user_params) # updating sfa public_key = public_key.replace('"', ''); user_pub_key = {'keys': public_key} sfa_update_user(request, user_hrn, user_pub_key) result_sfa_user = sfa_get_user(request, user_hrn, public_key) try: if 'keys' in result_sfa_user and result_sfa_user['keys'][0] == public_key: # updating manifold updated_config = json.dumps(account_config) user_params = { 'config': keypair, 'auth_type':'managed'} manifold_update_account(request, user_id, user_params) messages.success(request, 'Sucess: New Keypair Generated! Delegation of your credentials will be automatic.') else: raise Exception,"Keys are not matching" except Exception as e: messages.error(request, 'Error: An error occured during the update of your public key at the Registry, or your public key is not matching the one stored.') logger.error("Exception in accountview {}".format(e)) return HttpResponseRedirect("/portal/account/") except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'upload_key' in request.POST: try: up_file = request.FILES['pubkey'] file_content = up_file.read() file_name = up_file.name file_extension = os.path.splitext(file_name)[1] allowed_extension = ['.pub','.txt'] if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content): account_config = json.loads(account_detail['config']) # preserving user_hrn user_hrn = account_config.get('user_hrn','N/A') file_content = '{"user_public_key":"'+ file_content + '", "user_hrn":"'+ user_hrn +'"}' #file_content = re.sub("\r", "", file_content) #file_content = re.sub("\n", "\\n",file_content) file_content = ''.join(file_content.split()) #update manifold local:account table user_params = { 'config': file_content, 'auth_type':'user'} manifold_update_account(request, user_id, user_params) # updating sfa user_pub_key = {'keys': file_content} sfa_update_user(request, user_hrn, user_pub_key) messages.success(request, 'Publickey uploaded! Please delegate your credentials using SFA: http://trac.myslice.info/wiki/DelegatingCredentials') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'RSA key error: Please upload a valid RSA public key [.txt or .pub].') return HttpResponseRedirect("/portal/account/") except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'dl_pubkey' in request.POST or request.POST['button_value'] == 'dl_pubkey': try: account_config = json.loads(account_detail['config']) public_key = account_config['user_public_key'] response = HttpResponse(public_key, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="pubkey.txt"' return response except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'dl_pkey' in request.POST or request.POST['button_value'] == 'dl_pkey': try: account_config = json.loads(account_detail['config']) if 'user_private_key' in account_config: private_key = account_config['user_private_key'] response = HttpResponse(private_key, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="privkey.txt"' return response else: messages.error(request, 'Download error: Private key is not stored in the server') return HttpResponseRedirect("/portal/account/") except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") elif 'delete' in request.POST or request.POST['button_value'] == 'delete': try: account_config = json.loads(account_detail['config']) if 'user_private_key' in account_config: for key in account_config.keys(): if key == 'user_private_key': del account_config[key] updated_config = json.dumps(account_config) user_params = { 'config': updated_config, 'auth_type':'user'} manifold_update_account(request, user_id, user_params) messages.success(request, 'Private Key deleted. You need to delegate credentials manually once it expires.') messages.success(request, 'Once your credentials expire, Please delegate manually using SFA: http://trac.myslice.info/wiki/DelegatingCredentials') return HttpResponseRedirect("/portal/account/") else: messages.error(request, 'Delete error: Private key is not stored in the server') return HttpResponseRedirect("/portal/account/") except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") # download identity for jfed elif 'dl_identity' in request.POST or request.POST['button_value'] == 'dl_identity': try: jfed_identity = get_jfed_identity(request) if jfed_identity is not None: response = HttpResponse(jfed_identity, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="jfed_identity.txt"' return response else: messages.error(request, 'Download error: Private key is not stored in the server') return HttpResponseRedirect("/portal/account/") except Exception as e: messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") # Download sfi_config elif 'dl_sfi_config' in request.POST or request.POST['button_value'] == 'dl_sfi_config': platform_detail = get_myslice_platform(request) platform_config = json.loads(platform_detail['config']) account_detail = get_myslice_account(request) account_config = json.loads(account_detail['config']) user_hrn = account_config.get('user_hrn','N/A') t_user_hrn = user_hrn.split('.') authority_hrn = t_user_hrn[0] + '.' + t_user_hrn[1] registry = get_registry_url(request) import socket hostname = socket.gethostbyaddr(socket.gethostname())[0] admin_user = platform_config.get('user','N/A') manifold_host = ConfigEngine().manifold_url() if 'localhost' in manifold_host: manifold_host = manifold_host.replace('localhost',hostname) sfi_config = '[sfi]\n' sfi_config += 'auth = '+ authority_hrn +'\n' sfi_config += 'user = '******'\n' sfi_config += 'registry = '+ registry +'\n' sfi_config += 'sm = http://sfa3.planet-lab.eu:12346/\n\n' sfi_config += '[myslice]\n' sfi_config += 'backend = '+ manifold_host +'\n' sfi_config += 'delegate = '+ admin_user +'\n' sfi_config += 'platform = myslice\n' sfi_config += 'username = '******'\n' response = HttpResponse(sfi_config, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="sfi_config"' return response #clear all creds elif 'clear_cred' in request.POST or request.POST['button_value'] == 'clear_cred': try: result = clear_user_creds(request, user_email) if result is not None: messages.success(request, 'All Credentials cleared') else: messages.error(request, 'Delete error: Credentials are not stored in the server') except Exception as e: logger.error("Exception in accountview.py in clear_user_creds {}".format(e)) messages.error(request, 'Account error: You need an account in myslice platform to perform this action') return HttpResponseRedirect("/portal/account/") # Download delegated_user_cred elif 'dl_user_cred' in request.POST or request.POST['button_value'] == 'dl_user_cred': if 'delegated_user_credential' in account_config: user_cred = account_config['delegated_user_credential'] response = HttpResponse(user_cred, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_cred.txt"' return response else: messages.error(request, 'Download error: User credential is not stored in the server') return HttpResponseRedirect("/portal/account/") # Download user_cert elif 'dl_user_cert' in request.POST or request.POST['button_value'] == 'dl_user_cert': if 'user_credential' in account_config: user_cred = account_config['user_credential'] obj_cred = Credential(string=user_cred) obj_gid = obj_cred.get_gid_object() str_cert = obj_gid.save_to_string() response = HttpResponse(str_cert, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_certificate.pem"' return response elif 'delegated_user_credential' in account_config: user_cred = account_config['delegated_user_credential'] obj_cred = Credential(string=user_cred) obj_gid = obj_cred.get_gid_object() str_cert = obj_gid.save_to_string() response = HttpResponse(str_cert, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_certificate.pem"' return response else: messages.error(request, 'Download error: User credential is not stored in the server') return HttpResponseRedirect("/portal/account/") # Download user p12 = private_key + Certificate elif 'dl_user_p12' in request.POST or request.POST['button_value'] == 'dl_user_p12': if 'user_credential' in account_config and 'user_private_key' in account_config: user_cred = account_config['user_credential'] obj_cred = Credential(string=user_cred) obj_gid = obj_cred.get_gid_object() str_cert = obj_gid.save_to_string() cert = crypto.load_certificate(crypto.FILETYPE_PEM, str_cert) user_private_key = account_config['user_private_key'].encode('ascii') pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, user_private_key) p12 = crypto.PKCS12() p12.set_privatekey(pkey) p12.set_certificate(cert) pkcs12 = p12.export() response = HttpResponse(pkcs12, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_pkcs.p12"' return response elif 'delegated_user_credential' in account_config and 'user_private_key' in account_config: user_cred = account_config['delegated_user_credential'] obj_cred = Credential(string=user_cred) obj_gid = obj_cred.get_gid_object() str_cert = obj_gid.save_to_string() cert = crypto.load_certificate(crypto.FILETYPE_PEM, str_cert) user_private_key = account_config['user_private_key'].encode('ascii') pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, user_private_key) p12 = crypto.PKCS12() p12.set_privatekey(pkey) p12.set_certificate(cert) pkcs12 = p12.export() response = HttpResponse(pkcs12, content_type='text/plain') response['Content-Disposition'] = 'attachment; filename="user_pkcs.p12"' return response else: messages.error(request, 'Download error: User private key or credential is not stored in the server') return HttpResponseRedirect("/portal/account/") else: messages.info(request, 'Under Construction. Please try again later!') return HttpResponseRedirect("/portal/account/")