source: trunk/svntrac/auth.py@ 1

# svntrac
#
# Copyright (C) 2003 Xyche Software
#
# svntrac is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation; either version 2 of the
# License, or (at your option) any later version.
#
# svntrac is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
#
# Author: Jonas Borgström <jonas@xyche.com>

import os
import Cookie
import time
import random
from db import get_connection

AUTH_TIMEOUT = 60*60*24*30 # 30 days

authname = 'anonymous'

def get_authname ():
    return authname

def logout (auth_cookie):
    cnx = get_connection ()
    cursor = cnx.cursor ()
    cursor.execute ("DELETE FROM auth_cookie WHERE cookie='%s'" % auth_cookie)
    cnx.commit ()

def flush_auth_cookies ():
    """
    Delete auth cookies which are older then AUTH_TIMEOUT seconds.
    """
    cnx = get_connection ()
    cursor = cnx.cursor ()
    cursor.execute ('DELETE FROM auth_cookie WHERE time < %d'
                    % int(time.time() - AUTH_TIMEOUT))
    cnx.commit ()

def validate_auth_cookie (auth_cookie, ipnr):
    """
    Makes sure the auth_cookie is valid and that it comes from the correct host.
    """
    cnx = get_connection ()
    cursor = cnx.cursor ()
    cursor.execute ("SELECT name FROM auth_cookie WHERE cookie='%s' AND ipnr='%s'"
                    % (auth_cookie, ipnr))
    if cursor.rowcount >= 1:
        global authname
        authname = cursor.fetchone()[0]
        return 1
    else:
        return 0

def update_auth_cookie (auth_cookie, ipnr):
    """
    Update the timeout value for an auth cookie.
    """
    cnx = get_connection ()
    cursor = cnx.cursor ()
    cursor.execute ("UPDATE auth_cookie SET time=%d WHERE cookie='%s' AND ipnr='%s'" % (int(time.time()), auth_cookie, ipnr))
    cnx.commit ()

def create_auth_cookie (name, ipnr):
    """
    Create a new auth_cookie which is stored in the db and sent to the user
    """
    global authname
    cnx = get_connection ()
    cursor = cnx.cursor ()
    # TODO: authenticate here
    cookie = str(random.random())
    cursor.execute ("INSERT INTO auth_cookie (cookie, name, ipnr, time)" +
                    "VALUES ('%s', '%s', '%s', %d)"
                    % (cookie, name, ipnr, int(time.time())));
    cnx.commit ()
    authname = name
    return cookie

def authenticate_user ():
    flush_auth_cookies ()
    
    cookie = Cookie.Cookie(os.getenv('HTTP_COOKIE'))
    auth_cookie = create_auth_cookie (os.getenv('REMOTE_USER'),
                                      os.getenv('REMOTE_ADDR'))
    cookie['svntrac_auth'] = auth_cookie
    # send the cookie to the browser as a http header
    print cookie.output()


def verify_authentication (args):
    flush_auth_cookies ()
    
    cookie = Cookie.Cookie(os.getenv('HTTP_COOKIE'))
    remote_addr = os.getenv ('REMOTE_ADDR')
    
    if cookie.has_key('svntrac_auth'):
        auth_cookie = cookie['svntrac_auth'].value
        if args.has_key ('logout'):
            logout (auth_cookie)
        elif validate_auth_cookie (auth_cookie, remote_addr):
            update_auth_cookie (auth_cookie, remote_addr)