marmots/auth.py

48 lines
1.7 KiB
Python
Raw Normal View History

2020-06-28 15:27:56 +00:00
# This file is part of MarMOTS.
#
# MarMOTS is free software: you can redistribute it and/or modify it under the terms of the GNU Affero
# General Public License as published by the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# MarMOTS is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the
# implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
# Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License along with MarMOTS. If not,
# see <https://www.gnu.org/licenses/>.
#
# Copyright 2009, 2010, 2011, 2020 Jeremy Penner
2011-03-19 00:10:02 +00:00
import MySQLdb
import hashlib
import config
2020-06-27 16:05:34 +00:00
import bcrypt
import traceback
2011-03-19 00:10:02 +00:00
class NoopAuth(object):
def FAuthorized(self, user, passwd):
return True
class DrupalAuth(object):
2020-06-27 16:05:34 +00:00
def FHashMatches(self, md5, dbhash):
return md5 == dbhash
2011-03-19 00:10:02 +00:00
def FAuthorized(self, user, passwd):
conn = MySQLdb.connect(host = config.drupaldb_host, user = config.drupaldb_user, passwd = config.drupaldb_password, db = config.drupaldb)
try:
cursor = conn.cursor()
try:
2020-06-27 16:05:34 +00:00
firsthash = hashlib.md5(passwd).hexdigest()
cursor.execute("SELECT pass FROM users WHERE name = %s", (user,))
row = cursor.fetchone()
return row and self.FHashMatches(firsthash, row[0])
2011-03-19 00:10:02 +00:00
finally:
cursor.close()
except Exception:
2020-06-27 16:05:34 +00:00
traceback.print_exc()
2011-03-19 00:10:02 +00:00
return False
finally:
conn.close()
2020-06-27 16:05:34 +00:00
class DrupalBcryptAuth(DrupalAuth):
def FHashMatches(self, md5, dbhash):
return bcrypt.checkpw(md5, dbhash)