Add basic project files and templates
This commit is contained in:
162
.gitignore
vendored
Normal file
162
.gitignore
vendored
Normal file
@@ -0,0 +1,162 @@
|
|||||||
|
# ---> Python
|
||||||
|
# Byte-compiled / optimized / DLL files
|
||||||
|
__pycache__/
|
||||||
|
*.py[cod]
|
||||||
|
*$py.class
|
||||||
|
|
||||||
|
# C extensions
|
||||||
|
*.so
|
||||||
|
|
||||||
|
# Distribution / packaging
|
||||||
|
.Python
|
||||||
|
build/
|
||||||
|
develop-eggs/
|
||||||
|
dist/
|
||||||
|
downloads/
|
||||||
|
eggs/
|
||||||
|
.eggs/
|
||||||
|
# lib/
|
||||||
|
lib64/
|
||||||
|
parts/
|
||||||
|
sdist/
|
||||||
|
var/
|
||||||
|
wheels/
|
||||||
|
share/python-wheels/
|
||||||
|
*.egg-info/
|
||||||
|
.installed.cfg
|
||||||
|
*.egg
|
||||||
|
MANIFEST
|
||||||
|
|
||||||
|
# PyInstaller
|
||||||
|
# Usually these files are written by a python script from a template
|
||||||
|
# before PyInstaller builds the exe, so as to inject date/other infos into it.
|
||||||
|
*.manifest
|
||||||
|
*.spec
|
||||||
|
|
||||||
|
# Installer logs
|
||||||
|
pip-log.txt
|
||||||
|
pip-delete-this-directory.txt
|
||||||
|
|
||||||
|
# Unit test / coverage reports
|
||||||
|
htmlcov/
|
||||||
|
.tox/
|
||||||
|
.nox/
|
||||||
|
.coverage
|
||||||
|
.coverage.*
|
||||||
|
.cache
|
||||||
|
nosetests.xml
|
||||||
|
coverage.xml
|
||||||
|
*.cover
|
||||||
|
*.py,cover
|
||||||
|
.hypothesis/
|
||||||
|
.pytest_cache/
|
||||||
|
cover/
|
||||||
|
|
||||||
|
# Translations
|
||||||
|
*.mo
|
||||||
|
*.pot
|
||||||
|
|
||||||
|
# Django stuff:
|
||||||
|
*.log
|
||||||
|
db.sqlite3
|
||||||
|
db.sqlite3-journal
|
||||||
|
|
||||||
|
# Flask stuff:
|
||||||
|
instance/
|
||||||
|
.webassets-cache
|
||||||
|
|
||||||
|
# Scrapy stuff:
|
||||||
|
.scrapy
|
||||||
|
|
||||||
|
# Sphinx documentation
|
||||||
|
docs/_build/
|
||||||
|
|
||||||
|
# PyBuilder
|
||||||
|
.pybuilder/
|
||||||
|
target/
|
||||||
|
|
||||||
|
# Jupyter Notebook
|
||||||
|
.ipynb_checkpoints
|
||||||
|
|
||||||
|
# IPython
|
||||||
|
profile_default/
|
||||||
|
ipython_config.py
|
||||||
|
|
||||||
|
# pyenv
|
||||||
|
# For a library or package, you might want to ignore these files since the code is
|
||||||
|
# intended to run in multiple environments; otherwise, check them in:
|
||||||
|
# .python-version
|
||||||
|
|
||||||
|
# pipenv
|
||||||
|
# According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
|
||||||
|
# However, in case of collaboration, if having platform-specific dependencies or dependencies
|
||||||
|
# having no cross-platform support, pipenv may install dependencies that don't work, or not
|
||||||
|
# install all needed dependencies.
|
||||||
|
#Pipfile.lock
|
||||||
|
|
||||||
|
# poetry
|
||||||
|
# Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
|
||||||
|
# This is especially recommended for binary packages to ensure reproducibility, and is more
|
||||||
|
# commonly ignored for libraries.
|
||||||
|
# https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
|
||||||
|
#poetry.lock
|
||||||
|
|
||||||
|
# PEP 582; used by e.g. github.com/David-OConnor/pyflow
|
||||||
|
__pypackages__/
|
||||||
|
|
||||||
|
# Celery stuff
|
||||||
|
celerybeat-schedule
|
||||||
|
celerybeat.pid
|
||||||
|
|
||||||
|
# SageMath parsed files
|
||||||
|
*.sage.py
|
||||||
|
|
||||||
|
# Environments
|
||||||
|
.env
|
||||||
|
stack.env
|
||||||
|
.venv
|
||||||
|
env/
|
||||||
|
venv/
|
||||||
|
env-glibc/
|
||||||
|
ENV/
|
||||||
|
env.bak/
|
||||||
|
venv.bak/
|
||||||
|
|
||||||
|
# Spyder project settings
|
||||||
|
.spyderproject
|
||||||
|
.spyproject
|
||||||
|
|
||||||
|
# Rope project settings
|
||||||
|
.ropeproject
|
||||||
|
|
||||||
|
# mkdocs documentation
|
||||||
|
/site
|
||||||
|
|
||||||
|
# mypy
|
||||||
|
.mypy_cache/
|
||||||
|
.dmypy.json
|
||||||
|
dmypy.json
|
||||||
|
|
||||||
|
# Pyre type checker
|
||||||
|
.pyre/
|
||||||
|
|
||||||
|
# pytype static type analyzer
|
||||||
|
.pytype/
|
||||||
|
|
||||||
|
# Cython debug symbols
|
||||||
|
cython_debug/
|
||||||
|
|
||||||
|
# PyCharm
|
||||||
|
# JetBrains specific template is maintainted in a separate JetBrains.gitignore that can
|
||||||
|
# be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
|
||||||
|
# and can be added to the global gitignore or merged into this file. For a more nuclear
|
||||||
|
# option (not recommended) you can uncomment the following to ignore the entire idea folder.
|
||||||
|
.idea/
|
||||||
|
|
||||||
|
.bash_history
|
||||||
|
.vscode/
|
||||||
|
core/static/admin
|
||||||
|
core/static/debug_toolbar
|
||||||
|
signal-cli-config/
|
||||||
|
docker/data/
|
||||||
|
static/
|
||||||
64
README.md
Normal file
64
README.md
Normal file
@@ -0,0 +1,64 @@
|
|||||||
|
# Envelope
|
||||||
|
Template Django app.
|
||||||
|
|
||||||
|
## Setting up the environment
|
||||||
|
Create the virtual environment, enable it, and install the dependencies.
|
||||||
|
```shell
|
||||||
|
$ python3 -m venv env
|
||||||
|
$ source env/bin/activate
|
||||||
|
(env) $ pip install -r docker/prod/requirements.prod.txt
|
||||||
|
```
|
||||||
|
|
||||||
|
## Local settings
|
||||||
|
You'll need to copy the `app/local_settings.example.py` file to `app/local_settings.py`. The project won't start otherwise.
|
||||||
|
```
|
||||||
|
$ cp app/local_settings.example.py app/local_settings.py
|
||||||
|
```
|
||||||
|
|
||||||
|
## stack.env
|
||||||
|
The stack.env file referenced is a Portainer special. This is where Portainer would put a file containing all the environment variables set up in its UI.
|
||||||
|
To run it manually, you will need to copy `stack.env.example` to `stack.env` in the project root.
|
||||||
|
|
||||||
|
## Running database migrations
|
||||||
|
Now we need to run the database migrations in order to get a working database.
|
||||||
|
```shell
|
||||||
|
(env) $ python manage.py migrate
|
||||||
|
```
|
||||||
|
Note that these are automatically run by a step in the compose file in production.
|
||||||
|
You won't need to do that manually.
|
||||||
|
|
||||||
|
## Creating a superuser
|
||||||
|
In order to access Django admin, we need a superuser.
|
||||||
|
```shell
|
||||||
|
(env) $ python manage.py createsuperuser
|
||||||
|
Username: t2
|
||||||
|
Email address: t2@google.com
|
||||||
|
Password:
|
||||||
|
Password (again):
|
||||||
|
Superuser created successfully.
|
||||||
|
```
|
||||||
|
|
||||||
|
## Running
|
||||||
|
The Docker Compose file is located in `docker/docker-compose.prod.yml`.
|
||||||
|
There is a shortcut to run it: `make run`.
|
||||||
|
|
||||||
|
## Stopping
|
||||||
|
To stop the containers, run `make stop`.
|
||||||
|
|
||||||
|
## Setup
|
||||||
|
This setup may be different from what you've seen before.
|
||||||
|
|
||||||
|
### Uvicorn
|
||||||
|
There is a Uvicorn worker in the `app` container listening on `/var/run/socks/app.sock`. This is the bit that runs the actual code.
|
||||||
|
|
||||||
|
### Nginx
|
||||||
|
Nginx runs in the `nginx` container and proxies requests to Uvicorn thanks to a mounted and shared directory. No TCP required.
|
||||||
|
|
||||||
|
### Pre-start steps
|
||||||
|
There's a few commands running before start to ensure Django works correctly.
|
||||||
|
|
||||||
|
#### Migration
|
||||||
|
The `migration` container step runs the migrations so you don't need to remember to do it.
|
||||||
|
|
||||||
|
#### Collectstatic
|
||||||
|
The `collectstatic` container step collects all static files from plugins and puts them in the `core/static` folder. This folder is served straight from Nginx without going through Uvicorn.
|
||||||
38
core/lib/notify.py
Normal file
38
core/lib/notify.py
Normal file
@@ -0,0 +1,38 @@
|
|||||||
|
import requests
|
||||||
|
|
||||||
|
from core.util import logs
|
||||||
|
|
||||||
|
NTFY_URL = "https://ntfy.sh"
|
||||||
|
|
||||||
|
log = logs.get_logger(__name__)
|
||||||
|
|
||||||
|
|
||||||
|
# Actual function to send a message to a topic
|
||||||
|
def raw_sendmsg(msg, title=None, priority=None, tags=None, url=None, topic=None):
|
||||||
|
if url is None:
|
||||||
|
url = NTFY_URL
|
||||||
|
headers = {"Title": "GIA"}
|
||||||
|
if title:
|
||||||
|
headers["Title"] = title
|
||||||
|
if priority:
|
||||||
|
headers["Priority"] = priority
|
||||||
|
if tags:
|
||||||
|
headers["Tags"] = tags
|
||||||
|
requests.post(
|
||||||
|
f"{url}/{topic}",
|
||||||
|
data=msg,
|
||||||
|
headers=headers,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
# Sendmsg helper to send a message to a user's notification settings
|
||||||
|
def sendmsg(user, *args, **kwargs):
|
||||||
|
notification_settings = user.get_notification_settings()
|
||||||
|
|
||||||
|
if notification_settings.ntfy_topic is None:
|
||||||
|
# No topic set, so don't send
|
||||||
|
return
|
||||||
|
else:
|
||||||
|
topic = notification_settings.ntfy_topic
|
||||||
|
|
||||||
|
raw_sendmsg(*args, **kwargs, url=notification_settings.ntfy_url, topic=topic)
|
||||||
25
core/templates/registration/login.html
Normal file
25
core/templates/registration/login.html
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% load static %}
|
||||||
|
{% load crispy_forms_tags %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<section class="hero is-fullheight">
|
||||||
|
<div class="hero-body">
|
||||||
|
<div class="container">
|
||||||
|
<div class="columns is-centered">
|
||||||
|
<div class="column is-5-tablet is-5-desktop is-4-widescreen">
|
||||||
|
<form method="POST" class="box">
|
||||||
|
{% csrf_token %}
|
||||||
|
{{ form|crispy }}
|
||||||
|
<div class="field">
|
||||||
|
<button class="button">
|
||||||
|
Login
|
||||||
|
</button>
|
||||||
|
</div>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
{% endblock %}
|
||||||
0
core/templates/registration/logout.html
Normal file
0
core/templates/registration/logout.html
Normal file
19
core/templates/registration/registration_closed.html
Normal file
19
core/templates/registration/registration_closed.html
Normal file
@@ -0,0 +1,19 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% load static %}
|
||||||
|
{% load crispy_forms_tags %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<section class="hero is-fullheight">
|
||||||
|
<div class="hero-body">
|
||||||
|
<div class="container">
|
||||||
|
<div class="columns is-centered">
|
||||||
|
<div class="column is-5-tablet is-4-desktop is-3-widescreen">
|
||||||
|
<div class="box">
|
||||||
|
<p class="has-text-danger">Registration closed.</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
{% endblock %}
|
||||||
25
core/templates/registration/signup.html
Normal file
25
core/templates/registration/signup.html
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% load static %}
|
||||||
|
{% load crispy_forms_tags %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<section class="hero is-fullheight">
|
||||||
|
<div class="hero-body">
|
||||||
|
<div class="container">
|
||||||
|
<div class="columns is-centered">
|
||||||
|
<div class="column is-5-tablet is-4-desktop is-3-widescreen">
|
||||||
|
<form method="POST" class="box">
|
||||||
|
{% csrf_token %}
|
||||||
|
{{ form|crispy }}
|
||||||
|
<div class="field">
|
||||||
|
<button class="button is-success">
|
||||||
|
Sign up
|
||||||
|
</button>
|
||||||
|
</div>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
{% endblock %}
|
||||||
1
core/templates/two_factor/_base.html
Normal file
1
core/templates/two_factor/_base.html
Normal file
@@ -0,0 +1 @@
|
|||||||
|
{% extends 'base.html' %}
|
||||||
16
core/templates/two_factor/_base_focus.html
Normal file
16
core/templates/two_factor/_base_focus.html
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
{% extends "two_factor/_base.html" %}
|
||||||
|
|
||||||
|
{% block content_wrapper %}
|
||||||
|
<section class="hero is-fullheight">
|
||||||
|
<div class="hero-body">
|
||||||
|
<div class="container">
|
||||||
|
<div class="columns is-centered">
|
||||||
|
<div class="column box is-5-tablet is-5-desktop is-4-widescreen">
|
||||||
|
{% block content %}{% endblock content %}
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
{% endblock %}
|
||||||
|
|
||||||
16
core/templates/two_factor/_wizard_actions.html
Normal file
16
core/templates/two_factor/_wizard_actions.html
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
<div class="buttons">
|
||||||
|
{% if cancel_url %}
|
||||||
|
<a href="{{ cancel_url }}"
|
||||||
|
class="button">{% trans "Cancel" %}</a>
|
||||||
|
{% endif %}
|
||||||
|
{% if wizard.steps.prev %}
|
||||||
|
<button name="wizard_goto_step" type="submit"
|
||||||
|
value="{{ wizard.steps.prev }}"
|
||||||
|
class="button">{% trans "Back" %}</button>
|
||||||
|
{% else %}
|
||||||
|
<button disabled name="" type="button" class="button">{% trans "Back" %}</button>
|
||||||
|
{% endif %}
|
||||||
|
<button type="submit" class="button">{% trans "Next" %}</button>
|
||||||
|
</div>
|
||||||
6
core/templates/two_factor/_wizard_forms.html
Normal file
6
core/templates/two_factor/_wizard_forms.html
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
{% load crispy_forms_tags %}
|
||||||
|
|
||||||
|
<table class="is-3">
|
||||||
|
{{ wizard.management_form|crispy }}
|
||||||
|
{{ wizard.form|crispy }}
|
||||||
|
</table>
|
||||||
28
core/templates/two_factor/core/backup_tokens.html
Normal file
28
core/templates/two_factor/core/backup_tokens.html
Normal file
@@ -0,0 +1,28 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Backup Tokens" %}{% endblock %}</h1>
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Backup tokens can be used when your primary and backup
|
||||||
|
phone numbers aren't available. The backup tokens below can be used
|
||||||
|
for login verification. If you've used up all your backup tokens, you
|
||||||
|
can generate a new set of backup tokens. Only the backup tokens shown
|
||||||
|
below will be valid.{% endblocktrans %}</p>
|
||||||
|
|
||||||
|
{% if device.token_set.count %}
|
||||||
|
<ul>
|
||||||
|
{% for token in device.token_set.all %}
|
||||||
|
<li>{{ token.token }}</li>
|
||||||
|
{% endfor %}
|
||||||
|
</ul>
|
||||||
|
<p class="subtitle">{% blocktrans %}Print these tokens and keep them somewhere safe.{% endblocktrans %}</p>
|
||||||
|
{% else %}
|
||||||
|
<p class="subtitle">{% trans "You don't have any backup codes yet." %}</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<form method="post">{% csrf_token %}{{ form }}
|
||||||
|
<a href="{% url 'two_factor:profile'%}"
|
||||||
|
class="float-right button">{% trans "Back to Account Security" %}</a>
|
||||||
|
<button class="button" type="submit">{% trans "Generate Tokens" %}</button>
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
52
core/templates/two_factor/core/login.html
Normal file
52
core/templates/two_factor/core/login.html
Normal file
@@ -0,0 +1,52 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Login" %}{% endblock %}</h1>
|
||||||
|
|
||||||
|
{% if wizard.steps.current == 'auth' %}
|
||||||
|
<p class="subtitle">{% blocktrans %}Enter your credentials.{% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'token' %}
|
||||||
|
{% if device.method == 'call' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}We are calling your phone right now, please enter the
|
||||||
|
digits you hear.{% endblocktrans %}</p>
|
||||||
|
{% elif device.method == 'sms' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}We sent you a text message, please enter the tokens we
|
||||||
|
sent.{% endblocktrans %}</p>
|
||||||
|
{% else %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Please enter the tokens generated by your token
|
||||||
|
generator.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
{% elif wizard.steps.current == 'backup' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Use this form for entering backup tokens for logging in.
|
||||||
|
These tokens have been generated for you to print and keep safe. Please
|
||||||
|
enter one of these backup tokens to login to your account.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<form action="" method="post">{% csrf_token %}
|
||||||
|
{% include "two_factor/_wizard_forms.html" %}
|
||||||
|
|
||||||
|
{# hidden submit button to enable [enter] key #}
|
||||||
|
<input type="submit" value="" style="display:none" />
|
||||||
|
|
||||||
|
{% if other_devices %}
|
||||||
|
<p class="subtitle">{% trans "Or, alternatively, use one of your backup phones:" %}</p>
|
||||||
|
<p class="subtitle">
|
||||||
|
{% for other in other_devices %}
|
||||||
|
<button name="challenge_device" value="{{ other.persistent_id }}"
|
||||||
|
class="button" type="submit">
|
||||||
|
{{ other.generate_challenge_button_title }}
|
||||||
|
</button>
|
||||||
|
{% endfor %}</p>
|
||||||
|
{% endif %}
|
||||||
|
{% if backup_tokens %}
|
||||||
|
<p class="subtitle">{% trans "As a last resort, you can use a backup token:" %}</p>
|
||||||
|
<p class="subtitle">
|
||||||
|
<button name="wizard_goto_step" type="submit" value="backup"
|
||||||
|
class="button">{% trans "Use Backup Token" %}</button>
|
||||||
|
</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% include "two_factor/_wizard_actions.html" %}
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
22
core/templates/two_factor/core/otp_required.html
Normal file
22
core/templates/two_factor/core/otp_required.html
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Permission Denied" %}{% endblock %}</h1>
|
||||||
|
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}The page you requested, enforces users to verify using
|
||||||
|
two-factor authentication for security reasons. You need to enable these
|
||||||
|
security features in order to access this page.{% endblocktrans %}</p>
|
||||||
|
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Two-factor authentication is not enabled for your
|
||||||
|
account. Enable two-factor authentication for enhanced account
|
||||||
|
security.{% endblocktrans %}</p>
|
||||||
|
<div class="buttons">
|
||||||
|
|
||||||
|
<a href="javascript:history.go(-1)"
|
||||||
|
class="float-right button">{% trans "Go back" %}</a>
|
||||||
|
<a href="{% url 'two_factor:setup' %}" class="button">
|
||||||
|
{% trans "Enable Two-Factor Authentication" %}</a>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
{% endblock %}
|
||||||
24
core/templates/two_factor/core/phone_register.html
Normal file
24
core/templates/two_factor/core/phone_register.html
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Add Backup Phone" %}{% endblock %}</h1>
|
||||||
|
|
||||||
|
{% if wizard.steps.current == 'setup' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}You'll be adding a backup phone number to your
|
||||||
|
account. This number will be used if your primary method of
|
||||||
|
registration is not available.{% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'validation' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}We've sent a token to your phone number. Please
|
||||||
|
enter the token you've received.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<form action="" method="post">{% csrf_token %}
|
||||||
|
{% include "two_factor/_wizard_forms.html" %}
|
||||||
|
|
||||||
|
{# hidden submit button to enable [enter] key #}
|
||||||
|
<input type="submit" value="" style="display:none" />
|
||||||
|
|
||||||
|
{% include "two_factor/_wizard_actions.html" %}
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
56
core/templates/two_factor/core/setup.html
Normal file
56
core/templates/two_factor/core/setup.html
Normal file
@@ -0,0 +1,56 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Enable Two-Factor Authentication" %}{% endblock %}</h1>
|
||||||
|
{% if wizard.steps.current == 'welcome' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}You are about to take your account security to the
|
||||||
|
next level. Follow the steps in this wizard to enable two-factor
|
||||||
|
authentication.{% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'method' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Please select which authentication method you would
|
||||||
|
like to use.{% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'generator' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}To start using a token generator, please use your
|
||||||
|
smartphone to scan the QR code below. For example, use Google
|
||||||
|
Authenticator. Then, enter the token generated by the app.
|
||||||
|
{% endblocktrans %}</p>
|
||||||
|
<p class="subtitle"><img src="{{ QR_URL }}" alt="QR Code" class="bg-white"/></p>
|
||||||
|
{% elif wizard.steps.current == 'sms' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Please enter the phone number you wish to receive the
|
||||||
|
text messages on. This number will be validated in the next step.
|
||||||
|
{% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'call' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Please enter the phone number you wish to be called on.
|
||||||
|
This number will be validated in the next step. {% endblocktrans %}</p>
|
||||||
|
{% elif wizard.steps.current == 'validation' %}
|
||||||
|
{% if challenge_succeeded %}
|
||||||
|
{% if device.method == 'call' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}We are calling your phone right now, please enter the
|
||||||
|
digits you hear.{% endblocktrans %}</p>
|
||||||
|
{% elif device.method == 'sms' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}We sent you a text message, please enter the tokens we
|
||||||
|
sent.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
{% else %}
|
||||||
|
<p class="alert alert-warning" role="alert">{% blocktrans trimmed %}We've
|
||||||
|
encountered an issue with the selected authentication method. Please
|
||||||
|
go back and verify that you entered your information correctly, try
|
||||||
|
again, or use a different authentication method instead. If the issue
|
||||||
|
persists, contact the site administrator.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
{% elif wizard.steps.current == 'yubikey' %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}To identify and verify your YubiKey, please insert a
|
||||||
|
token in the field below. Your YubiKey will be linked to your
|
||||||
|
account.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<form action="" method="post">{% csrf_token %}
|
||||||
|
{% include "two_factor/_wizard_forms.html" %}
|
||||||
|
|
||||||
|
{# hidden submit button to enable [enter] key #}
|
||||||
|
<input type="submit" value="" style="display:none" />
|
||||||
|
|
||||||
|
{% include "two_factor/_wizard_actions.html" %}
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
24
core/templates/two_factor/core/setup_complete.html
Normal file
24
core/templates/two_factor/core/setup_complete.html
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Enable Two-Factor Authentication" %}{% endblock %}</h1>
|
||||||
|
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Congratulations, you've successfully enabled two-factor
|
||||||
|
authentication.{% endblocktrans %}</p>
|
||||||
|
|
||||||
|
{% if not phone_methods %}
|
||||||
|
<p class="subtitle"><a href="{% url 'two_factor:profile' %}"
|
||||||
|
class="button">{% trans "Back to Account Security" %}</a></p>
|
||||||
|
{% else %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}However, it might happen that you don't have access to
|
||||||
|
your primary token device. To enable account recovery, add a phone
|
||||||
|
number.{% endblocktrans %}</p>
|
||||||
|
|
||||||
|
<a href="{% url 'two_factor:profile' %}"
|
||||||
|
class="float-right button">{% trans "Back to Account Security" %}</a>
|
||||||
|
<p class="subtitle"><a href="{% url 'two_factor:phone_create' %}"
|
||||||
|
class="button">{% trans "Add Phone Number" %}</a></p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% endblock %}
|
||||||
14
core/templates/two_factor/profile/disable.html
Normal file
14
core/templates/two_factor/profile/disable.html
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{% extends "two_factor/_base_focus.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Disable Two-factor Authentication" %}{% endblock %}</h1>
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}You are about to disable two-factor authentication. This
|
||||||
|
weakens your account security, are you sure?{% endblocktrans %}</p>
|
||||||
|
<form method="post">
|
||||||
|
{% csrf_token %}
|
||||||
|
<table>{{ form }}</table>
|
||||||
|
<button class="button"
|
||||||
|
type="submit">{% trans "Disable" %}</button>
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
63
core/templates/two_factor/profile/profile.html
Normal file
63
core/templates/two_factor/profile/profile.html
Normal file
@@ -0,0 +1,63 @@
|
|||||||
|
{% extends "two_factor/_base.html" %}
|
||||||
|
{% load i18n %}
|
||||||
|
|
||||||
|
{% block content %}
|
||||||
|
<h1 class="title">{% block title %}{% trans "Account Security" %}{% endblock %}</h1>
|
||||||
|
|
||||||
|
{% if default_device %}
|
||||||
|
{% if default_device_type == 'TOTPDevice' %}
|
||||||
|
<p class="subtitle">{% trans "Tokens will be generated by your token generator." %}</p>
|
||||||
|
{% elif default_device_type == 'PhoneDevice' %}
|
||||||
|
<p class="subtitle">{% blocktrans with primary=default_device.generate_challenge_button_title %}Primary method: {{ primary }}{% endblocktrans %}</p>
|
||||||
|
{% elif default_device_type == 'RemoteYubikeyDevice' %}
|
||||||
|
<p class="subtitle">{% blocktrans %}Tokens will be generated by your YubiKey.{% endblocktrans %}</p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% if available_phone_methods %}
|
||||||
|
<h2 class="title is-4">{% trans "Backup Phone Numbers" %}</h2>
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}If your primary method is not available, we are able to
|
||||||
|
send backup tokens to the phone numbers listed below.{% endblocktrans %}</p>
|
||||||
|
<ul>
|
||||||
|
{% for phone in backup_phones %}
|
||||||
|
<li>
|
||||||
|
{{ phone.generate_challenge_button_title }}
|
||||||
|
<form method="post" action="{% url 'two_factor:phone_delete' phone.id %}"
|
||||||
|
onsubmit="return confirm({% trans 'Are you sure?' %})">
|
||||||
|
{% csrf_token %}
|
||||||
|
<button class="button is-warning"
|
||||||
|
type="submit">{% trans "Unregister" %}</button>
|
||||||
|
</form>
|
||||||
|
</li>
|
||||||
|
{% endfor %}
|
||||||
|
</ul>
|
||||||
|
<p class="subtitle"><a href="{% url 'two_factor:phone_create' %}"
|
||||||
|
class="button">{% trans "Add Phone Number" %}</a></p>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<h2 class="title is-4">{% trans "Backup Tokens" %}</h2>
|
||||||
|
<p class="subtitle">
|
||||||
|
{% blocktrans trimmed %}If you don't have any device with you, you can access
|
||||||
|
your account using backup tokens.{% endblocktrans %}
|
||||||
|
{% blocktrans trimmed count counter=backup_tokens %}
|
||||||
|
You have only one backup token remaining.
|
||||||
|
{% plural %}
|
||||||
|
You have {{ counter }} backup tokens remaining.
|
||||||
|
{% endblocktrans %}
|
||||||
|
</p>
|
||||||
|
<p class="subtitle"><a href="{% url 'two_factor:backup_tokens' %}"
|
||||||
|
class="button">{% trans "Show Codes" %}</a></p>
|
||||||
|
|
||||||
|
<h3 class="title is-5">{% trans "Disable Two-Factor Authentication" %}</h3>
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}However we strongly discourage you to do so, you can
|
||||||
|
also disable two-factor authentication for your account.{% endblocktrans %}</p>
|
||||||
|
<p class="subtitle"><a class="button" href="{% url 'two_factor:disable' %}">
|
||||||
|
{% trans "Disable Two-Factor Authentication" %}</a></p>
|
||||||
|
{% else %}
|
||||||
|
<p class="subtitle">{% blocktrans trimmed %}Two-factor authentication is not enabled for your
|
||||||
|
account. Enable two-factor authentication for enhanced account
|
||||||
|
security.{% endblocktrans %}</p>
|
||||||
|
<p class="subtitle"><a href="{% url 'two_factor:setup' %}" class="button">
|
||||||
|
{% trans "Enable Two-Factor Authentication" %}</a>
|
||||||
|
</p>
|
||||||
|
{% endif %}
|
||||||
|
{% endblock %}
|
||||||
7
core/templates/two_factor/twilio/press_a_key.xml
Normal file
7
core/templates/two_factor/twilio/press_a_key.xml
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
{% load i18n %}<?xml version="1.0" encoding="UTF-8" ?>
|
||||||
|
<Response>
|
||||||
|
<Gather timeout="15" numDigits="1" finishOnKey="">
|
||||||
|
<Say language="{{ locale }}">{% blocktrans %}Hi, this is {{ site_name }} calling. Press any key to continue.{% endblocktrans %}</Say>
|
||||||
|
</Gather>
|
||||||
|
<Say language="{{ locale }}">{% trans "You didn’t press any keys. Good bye." %}</Say>
|
||||||
|
</Response>
|
||||||
5
core/templates/two_factor/twilio/sms_message.html
Normal file
5
core/templates/two_factor/twilio/sms_message.html
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
{% load i18n %}
|
||||||
|
{% blocktrans trimmed %}
|
||||||
|
Your OTP token is {{ token }}
|
||||||
|
{% endblocktrans %}
|
||||||
|
|
||||||
12
core/templates/two_factor/twilio/token.xml
Normal file
12
core/templates/two_factor/twilio/token.xml
Normal file
@@ -0,0 +1,12 @@
|
|||||||
|
{% load i18n %}<?xml version="1.0" encoding="UTF-8" ?>
|
||||||
|
<Response>
|
||||||
|
<Say language="{{ locale }}">{% trans "Your token is:" %}</Say>
|
||||||
|
<Pause>
|
||||||
|
{% for digit in token %} <Say language="{{ locale }}">{{ digit }}</Say>
|
||||||
|
<Pause>
|
||||||
|
{% endfor %} <Say language="{{ locale }}">{% trans "Repeat:" %}</Say>
|
||||||
|
<Pause>
|
||||||
|
{% for digit in token %} <Say language="{{ locale }}">{{ digit }}</Say>
|
||||||
|
<Pause>
|
||||||
|
{% endfor %} <Say language="{{ locale }}">{% trans "Good bye." %}</Say>
|
||||||
|
</Response>
|
||||||
0
core/templatetags/__init__.py
Normal file
0
core/templatetags/__init__.py
Normal file
8
core/templatetags/index.py
Normal file
8
core/templatetags/index.py
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
from django import template
|
||||||
|
|
||||||
|
register = template.Library()
|
||||||
|
|
||||||
|
|
||||||
|
@register.filter
|
||||||
|
def index(h, key):
|
||||||
|
return h[key]
|
||||||
8
core/templatetags/joinsep.py
Normal file
8
core/templatetags/joinsep.py
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
from django import template
|
||||||
|
|
||||||
|
register = template.Library()
|
||||||
|
|
||||||
|
|
||||||
|
@register.filter
|
||||||
|
def joinsep(lst, sep):
|
||||||
|
return sep.join(lst)
|
||||||
8
core/templatetags/nsep.py
Normal file
8
core/templatetags/nsep.py
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
from django import template
|
||||||
|
|
||||||
|
register = template.Library()
|
||||||
|
|
||||||
|
|
||||||
|
@register.filter
|
||||||
|
def nsep(lst):
|
||||||
|
return "\n".join(lst)
|
||||||
9
core/templatetags/pretty.py
Normal file
9
core/templatetags/pretty.py
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
import orjson
|
||||||
|
from django import template
|
||||||
|
|
||||||
|
register = template.Library()
|
||||||
|
|
||||||
|
|
||||||
|
@register.filter
|
||||||
|
def pretty(data):
|
||||||
|
return orjson.dumps(data, option=orjson.OPT_INDENT_2).decode("utf-8")
|
||||||
10
core/templatetags/urlsafe.py
Normal file
10
core/templatetags/urlsafe.py
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
import urllib.parse
|
||||||
|
|
||||||
|
from django import template
|
||||||
|
|
||||||
|
register = template.Library()
|
||||||
|
|
||||||
|
|
||||||
|
@register.filter
|
||||||
|
def urlsafe(h):
|
||||||
|
return urllib.parse.quote(h, safe="")
|
||||||
16
stack.env.example
Normal file
16
stack.env.example
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
APP_PORT=5006
|
||||||
|
REPO_DIR=.
|
||||||
|
APP_LOCAL_SETTINGS=./app/local_settings.py
|
||||||
|
APP_DATABASE_FILE=./db.sqlite3
|
||||||
|
DOMAIN=dev.local
|
||||||
|
URL=http://127.0.0.1:5006
|
||||||
|
ALLOWED_HOSTS=127.0.0.1,dev.local,zm.is,localhost,xf
|
||||||
|
NOTIFY_TOPIC=some-ntfy-topic
|
||||||
|
CSRF_TRUSTED_ORIGINS=http://127.0.0.1:5006,http://localhost:5006,http://qi:5006
|
||||||
|
DEBUG=y
|
||||||
|
SECRET_KEY=asdkld00s0s0ds
|
||||||
|
STATIC_ROOT=/conf/static
|
||||||
|
REGISTRATION_OPEN=1
|
||||||
|
OPERATION=dev
|
||||||
|
PROFILER=0
|
||||||
|
BILLING_ENABLED=0
|
||||||
Reference in New Issue
Block a user