Skip to content

GitLab

Commit 58adb4f8 authored by vagrant's avatar vagrant
Browse files

changing to django

parent 7ace51e7
Expand all Hide whitespace changes
Inline Side-by-side
toolbox/toolbox.py deleted 100644 → 0
View file @ 7ace51e7
#!flask/bin/python
from website import website
if __name__ == '__main__':
website.run(debug=True,host='0.0.0.0')
toolbox/website/__init__.py deleted 100644 → 0
View file @ 7ace51e7
from flask import Flask
from flask.ext.sqlalchemy import SQLAlchemy
from flask.ext.admin import Admin
website = Flask(__name__)
website.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:////database.db'
admin = Admin(website)
from website import routes
toolbox/website/forms.py deleted 100644 → 0
View file @ 7ace51e7
from flask_wtf import Form
from wtforms.validators import DataRequired
from wtforms.ext.sqlalchemy.orm import model_form
from wtforms.validators import DataRequired
from models import FeatureRequest
FeatureRequestForm = model_form(FeatureRequest, Form)
toolbox/website/models.py deleted 100644 → 0
View file @ 7ace51e7
from flask import Flask
from flask.ext.sqlalchemy import SQLAlchemy
from website import website
from datetime import datetime
db = SQLAlchemy(website)
class FeatureRequest(db.Model):
id = db.Column(db.Integer, primary_key=True)
service_name = db.Column(db.String(80), db.ForeignKey('service.name'))
service = db.relationship('Service',
backref=db.backref('featurerequests', lazy='dynamic'))
user = db.Column(db.String(80))
entry_date = db.Column(db.DateTime)
contact_email = db.Column(db.String(120))
reason = db.Column(db.String(1028))
def __init__(self, service, user,contact_email, reason, entry_date=None):
self.service = service
self.user = user
if entry_date is None:
entry_date = datetime.utcnow()
self.entry_date = entry_date
self.contact_email = contact_email
self.reason = reason
def __repr__(self):
return '<ID %r>' % self.id
class Service(db.Model):
id = db.Column(db.Integer, primary_key=True)
name = db.Column(db.String(80))
def __init__(self, name):
self.name = name
def __repr__(self):
return '<Name %r>' % self.name
toolbox/website/pycas.py deleted 100644 → 0
View file @ 7ace51e7
#!/usr/bin/python
#Debug
##import os
## print "Content-type: text/html\n"
## import sys
## sys.stderr = sys.stdout
# Copyright 2011 Jon Rifkin
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#-----------------------------------------------------------------------
# Usage
#-----------------------------------------------------------------------
#
# Purpose
# Authenticate users against a CAS server from your python cgi scripts.
#
# Using in your script
#
# import pycas
# status, id, cookie = pycas.login(CAS_SERVER,THIS_SCRIPT)
#
# Required Parameters
#
# - CAS_SERVER : the url of your CAS server
# (for example, https://login.yoursite.edu).
# - THIS_SCRIPT: the url of the calling python cgi script.
#
# Returned Values
#
# - status: return code, 0 for success.
# - id : the user name returned by cas.
# - cookie: when non-blank, send this cookie to the client's
# browser so it can authenticate for the rest of the
# session.
#
# Optional Parmaters:
# - lifetime: lifetime of the cookie in seconds, enforced by pycas.
# Default is 0, meaning unlimited lifetime.
# - path: Authentication cookie applies for all urls under 'path'.
# Defaults to "/" (all urls).
# - protocol: CAS protocol version. Default is 2. Can be set to 1.
# - secure: Default is 1, which authenticates for https connections only.
# - opt: set to 'renew' or 'gateway' for these CAS options.
#
# Examples:
# status, id, cookie = pycas.login(CAS_SERVER,THIS_SCRIPT,protocol=1,secure=0)
# status, id, cookie = pycas.login(CAS_SERVER,THIS_SCRIPT,path="/cgi-bin/accts")
#
# Status Codes are listed below.
#
#-----------------------------------------------------------------------
# Constants
#-----------------------------------------------------------------------
#
# Secret used to produce hash. This can be any string. Hackers
# who know this string can forge this script's authentication cookie.
SECRET = "7e16162998eb7efafb1498f75190a937"
# Name field for pycas cookie
PYCAS_NAME = "pycas"
# CAS Staus Codes: returned to calling program by login() function.
CAS_OK = 0 # CAS authentication successful.
CAS_COOKIE_EXPIRED = 1 # PYCAS cookie exceeded its lifetime.
CAS_COOKIE_INVALID = 2 # PYCAS cookie is invalid (probably corrupted).
CAS_TICKET_INVALID = 3 # CAS server ticket invalid.
CAS_GATEWAY = 4 # CAS server returned without ticket while in gateway mode.
# Status codes returned internally by function get_cookie_status().
COOKIE_AUTH = 0 # PYCAS cookie is valid.
COOKIE_NONE = 1 # No PYCAS cookie found.
COOKIE_GATEWAY = 2 # PYCAS gateway cookie found.
COOKIE_INVALID = 3 # Invalid PYCAS cookie found.
# Status codes returned internally by function get_ticket_status().
TICKET_OK = 0 # Valid CAS server ticket found.
TICKET_NONE = 1 # No CAS server ticket found.
TICKET_INVALID = 2 # Invalid CAS server ticket found.
CAS_MSG = (
"CAS authentication successful.",
"PYCAS cookie exceeded its lifetime.",
"PYCAS cookie is invalid (probably corrupted).",
"CAS server ticket invalid.",
"CAS server returned without ticket while in gateway mode.",
)
###Optional log file for debugging
###LOG_FILE="/tmp/cas.log"
#-----------------------------------------------------------------------
# Imports
#-----------------------------------------------------------------------
import os
import cgi
import md5
import time
import urllib
import urlparse
#-----------------------------------------------------------------------
# Functions
#-----------------------------------------------------------------------
# For debugging.
def writelog(msg):
f = open(LOG_FILE,"a")
timestr = time.strftime("%Y-%m-%d %H:%M:%S ");
f.write(timestr + msg + "\n");
f.close()
# Used for parsing xml. Search str for first occurance of
# <tag>.....</tag> and return text (striped of leading and
# trailing whitespace) between tags. Return "" if tag not
# found.
def parse_tag(str,tag):
tag1_pos1 = str.find("<" + tag)
# No tag found, return empty string.
if tag1_pos1==-1: return ""
tag1_pos2 = str.find(">",tag1_pos1)
if tag1_pos2==-1: return ""
tag2_pos1 = str.find("</" + tag,tag1_pos2)
if tag2_pos1==-1: return ""
return str[tag1_pos2+1:tag2_pos1].strip()
# Split string in exactly two pieces, return '' for missing pieces.
def split2(str,sep):
parts = str.split(sep,1) + ["",""]
return parts[0], parts[1]
# Use hash and secret to encrypt string.
def makehash(str,secret=SECRET):
m = md5.new()
m.update(str)
m.update(SECRET)
return m.hexdigest()[0:8]
# Form cookie
def make_pycas_cookie(val, domain, path, secure, expires=None):
cookie = "Set-Cookie: %s=%s;domain=%s;path=%s" % (PYCAS_NAME, val, domain, path)
if secure:
cookie += ";secure"
if expires:
cookie += ";expires=" + expires
return cookie
# Send redirect to client. This function does not return, i.e. it teminates this script.
def do_redirect(cas_host, service_url, opt, secure):
print opt,secure
cas_url = cas_host + "/cas/login?service=" + service_url
if opt in ("renew","gateway"):
cas_url += "&%s=true" % opt
# Print redirect page to browser
print "Refresh: 0; url=%s" % cas_url
print "Content-type: text/html"
if opt=="gateway":
domain,path = urlparse.urlparse(service_url)[1:3]
print make_pycas_cookie("gateway", domain, path, secure)
print """
If your browser does not redirect you, then please follow <a href="%s">this link</a>.
""" % (cas_url)
raise SystemExit
# Retrieve id from pycas cookie and test data for validity
# (to prevent mailicious users from falsely authenticating).
# Return status and id (id will be empty string if unknown).
def decode_cookie(cookie_vals,lifetime=None):
# Test for now cookies
if cookie_vals==None:
return COOKIE_NONE, ""
# Test each cookie value
cookie_attrs = []
for cookie_val in cookie_vals:
# Remove trailing ;
if cookie_val and cookie_val[-1]==";":
cookie_val = cookie_val[0:-1]
# Test for pycas gateway cookie
if cookie_val=="gateway":
cookie_attrs.append(COOKIE_GATEWAY)
# Test for valid pycas authentication cookie.
else:
# Separate cookie parts
oldhash = cookie_val[0:8]
timestr, id = split2(cookie_val[8:],":")
# Verify hash
newhash=makehash(timestr + ":" + id)
if oldhash==makehash(timestr + ":" + id):
# Check lifetime
if lifetime:
if str(int(time.time()+int(lifetime)))<timestr:
# OK: Cookie still valid.
cookie_attrs.append(COOKIE_AUTH)
else:
# ERROR: Cookie exceeded lifetime
cookie_attrs.append(COOKIE_EXPIRED)
else:
# OK: Cookie valid (it has no lifetime)
cookie_attrs.append(COOKIE_AUTH)
else:
# ERROR: Cookie value are not consistent
cookie_attrs.append(COOKIE_INVALID)
# Return status according to attribute values
# Valid authentication cookie takes precedence
if COOKIE_AUTH in cookie_attrs:
return COOKIE_AUTH, id
# Gateway cookie takes next precedence
if COOKIE_GATEWAY in cookie_attrs:
return COOKIE_GATEWAY, ""
# If we've gotten here, there should be only one attribute left.
return cookie_attrs[0], ""
# Validate ticket using cas 1.0 protocol
def validate_cas_1(cas_host, service_url, ticket):
# Second Call to CAS server: Ticket found, verify it.
cas_validate = cas_host + "/cas/validate?ticket=" + ticket + "&service=" + service_url
f_validate = urllib.urlopen(cas_validate)
# Get first line - should be yes or no
response = f_validate.readline()
# Ticket does not validate, return error
if response=="no\n":
f_validate.close()
return TICKET_INVALID, ""
# Ticket validates
else:
# Get id
id = f_validate.readline()
f_validate.close()
id = id.strip()
return TICKET_OK, id
# Validate ticket using cas 2.0 protocol
# The 2.0 protocol allows the use of the mutually exclusive "renew" and "gateway" options.
def validate_cas_2(cas_host, service_url, ticket, opt):
# Second Call to CAS server: Ticket found, verify it.
cas_validate = cas_host + "/cas/serviceValidate?ticket=" + ticket + "&service=" + service_url
if opt:
cas_validate += "&%s=true" % opt
f_validate = urllib.urlopen(cas_validate)
# Get first line - should be yes or no
response = f_validate.read()
id = parse_tag(response,"cas:user")
# Ticket does not validate, return error
if id=="":
return TICKET_INVALID, ""
# Ticket validates
else:
return TICKET_OK, id
# Read cookies from env variable HTTP_COOKIE.
def get_cookies():
# Read all cookie pairs
try:
cookie_pairs = os.getenv("HTTP_COOKIE").split()
except AttributeError:
cookie_pairs = []
cookies = {}
for cookie_pair in cookie_pairs:
key,val = split2(cookie_pair.strip(),"=")
if cookies.has_key(key):
cookies[key].append(val)
else:
cookies[key] = [val,]
return cookies
# Check pycas cookie
def get_cookie_status():
cookies = get_cookies()
return decode_cookie(cookies.get(PYCAS_NAME))
def get_ticket_status(cas_host,service_url,protocol,opt):
if cgi.FieldStorage().has_key("ticket"):
ticket = cgi.FieldStorage()["ticket"].value
if protocol==1:
ticket_status, id = validate_cas_1(cas_host, service_url, ticket, opt)
else:
ticket_status, id = validate_cas_2(cas_host, service_url, ticket, opt)
# Make cookie and return id
if ticket_status==TICKET_OK:
return TICKET_OK, id
# Return error status
else:
return ticket_status, ""
else:
return TICKET_NONE, ""
#-----------------------------------------------------------------------
# Exported functions
#-----------------------------------------------------------------------
# Login to cas and return user id.
#
# Returns status, id, pycas_cookie.
#
def login(cas_host, service_url, lifetime=None, secure=1, protocol=2, path="/", opt=""):
# Check cookie for previous pycas state, with is either
# COOKIE_AUTH - client already authenticated by pycas.
# COOKIE_GATEWAY - client returning from CAS_SERVER with gateway option set.
# Other cookie status are
# COOKIE_NONE - no cookie found.
# COOKIE_INVALID - invalid cookie found.
cookie_status, id = get_cookie_status()
if cookie_status==COOKIE_AUTH:
return CAS_OK, id, ""
if cookie_status==COOKIE_INVALID:
return CAS_COOKIE_INVALID, "", ""
# Check ticket ticket returned by CAS server, ticket status can be
# TICKET_OK - a valid authentication ticket from CAS server
# TICKET_INVALID - an invalid authentication ticket.
# TICKET_NONE - no ticket found.
# If ticket is ok, then user has authenticated, return id and
# a pycas cookie for calling program to send to web browser.
ticket_status, id = get_ticket_status(cas_host,service_url,protocol,opt)
if ticket_status==TICKET_OK:
timestr = str(int(time.time()))
hash = makehash(timestr + ":" + id)
cookie_val = hash + timestr + ":" + id
domain = urlparse.urlparse(service_url)[1]
return CAS_OK, id, make_pycas_cookie(cookie_val, domain, path, secure)
elif ticket_status==TICKET_INVALID:
return CAS_TICKET_INVALID, "", ""
# If unathenticated and in gateway mode, return gateway status and clear
# pycas cookie (which was set to gateway by do_redirect()).
if opt=="gateway":
if cookie_status==COOKIE_GATEWAY:
domain,path = urlparse.urlparse(service_url)[1:3]
# Set cookie expiration in the past to clear the cookie.
past_date = time.strftime("%a, %d-%b-%Y %H:%M:%S %Z",time.localtime(time.time()-48*60*60))
return CAS_GATEWAY, "", make_pycas_cookie("",domain,path,secure,past_date)
# Do redirect
do_redirect(cas_host, service_url, opt, secure)
#-----------------------------------------------------------------------
# Test
#-----------------------------------------------------------------------
if __name__=="__main__":
CAS_SERVER = "https://login.uconn.edu"
SERVICE_URL = "http://bluet.ucc.uconn.edu/~jon/cgi-bin/pycas.py"
status, id, cookie = login(CAS_SERVER, SERVICE_URL, secure=0, opt="gateway")
print "Content-type: text/html"
print cookie
print
print """
<html>
<head>
<title>
castest.py
</title>
<style type=text/css>
td {background-color: #dddddd; padding: 4px}
</style>
</head>
<body>
<h2>pycas.py</h2>
<hr>
"""
# Print browser parameters from pycas.login
if cgi.FieldStorage().has_key("ticket"):
ticket = cgi.FieldStorage()["ticket"].value
else:
ticket = ""
in_cookie = os.getenv("HTTP_COOKIE")
print """
<p>
<b>Parameters sent from browser</b>
<table>
<tr> <td>Ticket</td> <td>%s</td> </tr>
<tr> <td>Cookie</td> <td>%s</td> </tr>
</table>
</p>""" % (ticket,in_cookie)
# Print output from pycas.login
print """
<p>
<b>Parameters returned from pycas.login()</b>
<table>
<tr><td>status</td><td> <b>%s</b> - <i>%s</i></td></tr>
<tr><td>id</td><td> <b>%s</b></td></tr>
<tr><td>cookie</td><td> <b>%s</b></td></tr>
</table>
</p>
</body></html>""" % (status,CAS_MSG[status],id,cookie)
toolbox/website/routes.py deleted 100644 → 0
View file @ 7ace51e7
from flask import render_template,request,flash,redirect
from website import website
from forms import FeatureRequestForm
import pycas as pycas
CAS_SERVER = "https://login.gmu.edu/login"
SERVICE_URL = "http://129.174.177.239/cgi-bin/pycas.py"
@website.route('/login')
def my_login():
status, id, cookie = pycas.login(CAS_SERVER, SERVICE_URL, secure=1, opt="gateway")
return redirect(url_for('routes.home'))
@website.route('/')
def home():
return render_template('index.html')
@website.route('/submit', methods=['GET','POST'])
def process_request():
form = FeatureRequestForm()
if form.validate_on_submit():
flash('Request Successly Submitted')
return redirect(url_for('routes.home'))
return render_template('feature_request.html',title='Request Form', form=form)
toolbox/website/static/css/demo.css deleted 100644 → 0
View file @ 7ace51e7
.dropdown-arrow-inverse {
border-bottom-color: #34495e !important;
border-top-color: #34495e !important;
}
.container {
width: 970px !important;
}
.demo-headline {
padding: 73px 0 110px;
text-align: center;
}
.demo-logo {
font: 900 90px/100px "Helvetica Neue", Helvetica, Arial, sans-serif;
letter-spacing: -2px;
margin: 10px 0;
}
.demo-logo .logo {
background: url(../images/demo/logo-mask.png) center 0 no-repeat;
background-size: 236px 181px;
height: 181px;
margin: 0 auto 26px;
overflow: hidden;
text-indent: -9999em;
width: 236px;
}
.demo-logo small {
color: rgba(52, 73, 94, 0.30000000000000004);
display: block;
font-size: 22px;
font-weight: 700;
letter-spacing: 0;
padding-top: 5px;
}
.demo-row {
margin-bottom: 20px;
}
.demo-row .demo-heading-note,
.demo-row .demo-text-note {
display: block;
width: 260px;
position: absolute;
bottom: 10px;
left: 0;
font-size: 13px;
line-height: 13px;
color: #c0c1c2;
font-weight: 400;
}
.demo-row .demo-text-note {
bottom: auto;
top: 10px;
}
.demo-row.typography-row .demo-content {
float: none;
width: auto;
clear: both;
}
.demo-row.typography-row .demo-type-example {
padding-left: 25%;
margin-bottom: 40px;
position: relative;
}
.demo-section-title {
font: 900 32px/40px "Helvetica Neue", Helvetica, Arial, sans-serif;
margin: 10px 0;
}
.demo-panel-title {
padding-top: 20px;
margin: 2px 0 20px;
font: bold 23px/40px "Helvetica Neue", Helvetica, Arial, sans-serif;
}
.demo-panel-title small {
color: #798795;
font-size: inherit;
font-weight: 400;
}
.demo-navigation {
margin-bottom: -4px;
margin-top: -10px;
}
.demo-pager {
margin-top: -20px;
}
.demo-tooltips {
height: 126px;
}
.demo-tooltips .tooltip {
left: -8px !important;