MyAcc: DL and Clear cred - OK
[myslice.git] / portal / accountview.py
1 from unfold.loginrequired               import LoginRequiredAutoLogoutView
2 #
3 from manifold.core.query                import Query
4 from manifold.manifoldapi               import execute_query
5 from portal.actions                     import manifold_update_user, manifold_update_account, manifold_add_account, manifold_delete_account
6 #
7 from ui.topmenu                         import topmenu_items, the_user
8 #
9 from django.http                        import HttpResponse, HttpResponseRedirect
10 from django.contrib                     import messages
11 from django.contrib.auth.decorators     import login_required
12 from django.core.mail                   import send_mail
13
14 #
15 import json, os, re, itertools
16
17 # requires login
18 class AccountView(LoginRequiredAutoLogoutView):
19     template_name = "account-view.html"
20     
21     def dispatch(self, *args, **kwargs):
22         return super(AccountView, self).dispatch(*args, **kwargs)
23
24
25     def get_context_data(self, **kwargs):
26
27         user_query  = Query().get('local:user').select('config','email')
28         user_details = execute_query(self.request, user_query)
29         
30         # not always found in user_details...
31         config={}
32         for user_detail in user_details:
33             #email = user_detail['email']
34             if user_detail['config']:
35                 config = json.loads(user_detail['config'])
36
37         platform_query  = Query().get('local:platform').select('platform_id','platform','gateway_type','disabled')
38         account_query  = Query().get('local:account').select('user_id','platform_id','auth_type','config')
39         platform_details = execute_query(self.request, platform_query)
40         account_details = execute_query(self.request, account_query)
41        
42         # initial assignment needed for users having account.config = {} 
43         platform_name = ''
44         account_type = ''
45         account_usr_hrn = ''
46         account_pub_key = ''
47         account_priv_key = ''
48         account_reference = ''
49         my_users = ''
50         my_slices = ''
51         my_auths = ''
52         ref_acc_list = ''
53         principal_acc_list = ''
54         platform_name_list = []
55         platform_name_secondary_list = []
56         platform_access_list = []
57         platform_no_access_list = []
58         total_platform_list = []
59         account_type_list = []
60         account_type_secondary_list = []
61         account_reference_list = []
62         delegation_type_list = []
63         user_cred_exp_list = []
64         slice_list = []
65         auth_list = []
66         slice_cred_exp_list = []
67         auth_cred_exp_list = []
68         usr_hrn_list = []
69         pub_key_list = []
70           
71         for platform_detail in platform_details:
72             if 'sfa' in platform_detail['gateway_type'] and platform_detail['disabled']==0:
73                 total_platform = platform_detail['platform']
74                 total_platform_list.append(total_platform)
75                 
76             for account_detail in account_details:
77                 if platform_detail['platform_id'] == account_detail['platform_id']:
78                     platform_name = platform_detail['platform']
79                     account_config = json.loads(account_detail['config'])
80                     account_usr_hrn = account_config.get('user_hrn','N/A')
81                     account_pub_key = account_config.get('user_public_key','N/A')
82                     account_reference = account_config.get ('reference_platform','N/A')
83                     # credentials
84                     acc_user_cred = account_config.get('delegated_user_credential','N/A')
85                     acc_slice_cred = account_config.get('delegated_slice_credentials','N/A')
86                     acc_auth_cred = account_config.get('delegated_authority_credentials','N/A')
87
88                     if 'N/A' not in acc_user_cred:
89                         exp_date = re.search('<expires>(.*)</expires>', acc_user_cred)
90                         if exp_date:
91                             user_exp_date = exp_date.group(1)
92                             user_cred_exp_list.append(user_exp_date)
93
94                         my_users = [{'cred_exp': t[0]}
95                             for t in zip(user_cred_exp_list)]
96                        
97
98                     if 'N/A' not in acc_slice_cred:
99                         for key, value in acc_slice_cred.iteritems():
100                             slice_list.append(key)
101                             # get cred_exp date
102                             exp_date = re.search('<expires>(.*)</expires>', value)
103                             if exp_date:
104                                 exp_date = exp_date.group(1)
105                                 slice_cred_exp_list.append(exp_date)
106
107                         my_slices = [{'slice_name': t[0], 'cred_exp': t[1]}
108                             for t in zip(slice_list, slice_cred_exp_list)]
109
110                     if 'N/A' not in acc_auth_cred:
111                         for key, value in acc_auth_cred.iteritems():
112                             auth_list.append(key)
113                         #get cred_exp date
114                             exp_date = re.search('<expires>(.*)</expires>', value)
115                             if exp_date:
116                                 exp_date = exp_date.group(1)
117                                 auth_cred_exp_list.append(exp_date)
118
119                         my_auths = [{'auth_name': t[0], 'cred_exp': t[1]}
120                             for t in zip(auth_list, auth_cred_exp_list)]
121
122
123                     # for reference accounts
124                     if 'reference' in account_detail['auth_type']:
125                         account_type = 'Reference'
126                         delegation = 'N/A'
127                         platform_name_secondary_list.append(platform_name)
128                         account_type_secondary_list.append(account_type)
129                         account_reference_list.append(account_reference)
130                         ref_acc_list = [{'platform_name': t[0], 'account_type': t[1], 'account_reference': t[2]} 
131                             for t in zip(platform_name_secondary_list, account_type_secondary_list, account_reference_list)]
132                        
133                     elif 'managed' in account_detail['auth_type']:
134                         account_type = 'Principal'
135                         delegation = 'Automatic'
136                     else:
137                         account_type = 'Principal'
138                         delegation = 'Manual'
139                     # for principal (auth_type=user/managed) accounts
140                     if 'reference' not in account_detail['auth_type']:
141                         platform_name_list.append(platform_name)
142                         account_type_list.append(account_type)
143                         delegation_type_list.append(delegation)
144                         usr_hrn_list.append(account_usr_hrn)
145                         pub_key_list.append(account_pub_key)
146                         # combining 5 lists into 1 [to render in the template] 
147                         principal_acc_list = [{'platform_name': t[0], 'account_type': t[1], 'delegation_type': t[2], 'usr_hrn':t[3], 'usr_pubkey':t[4]} 
148                             for t in zip(platform_name_list, account_type_list, delegation_type_list, usr_hrn_list, pub_key_list)]
149                     # to hide private key row if it doesn't exist    
150                     if 'myslice' in platform_detail['platform']:
151                         account_config = json.loads(account_detail['config'])
152                         account_priv_key = account_config.get('user_private_key','N/A')
153                     if 'sfa' in platform_detail['gateway_type']:
154                         platform_access = platform_detail['platform']
155                         platform_access_list.append(platform_access)
156        
157         # Removing the platform which already has access
158         for platform in platform_access_list:
159             total_platform_list.remove(platform)
160         # we could use zip. this one is used if columns have unequal rows 
161         platform_list = [{'platform_no_access': t[0]}
162             for t in itertools.izip_longest(total_platform_list)]
163
164         context = super(AccountView, self).get_context_data(**kwargs)
165         context['principal_acc'] = principal_acc_list
166         context['ref_acc'] = ref_acc_list
167         context['platform_list'] = platform_list
168         context['my_users'] = my_users
169         context['my_slices'] = my_slices
170         context['my_auths'] = my_auths
171         context['person']   = self.request.user
172         context['firstname'] = config.get('firstname',"?")
173         context['lastname'] = config.get('lastname',"?")
174         context['fullname'] = context['firstname'] +' '+ context['lastname']
175         context['authority'] = config.get('authority',"Unknown Authority")
176         context['user_private_key'] = account_priv_key
177         
178         # XXX This is repeated in all pages
179         # more general variables expected in the template
180         context['title'] = 'Platforms connected to MySlice'
181         # the menu items on the top
182         context['topmenu_items'] = topmenu_items('My Account', self.request)
183         # so we can sho who is logged
184         context['username'] = the_user(self.request)
185 #        context ['firstname'] = config['firstname']
186         #context.update(page.prelude_env())
187         return context
188
189
190 @login_required
191 #my_acc form value processing
192 def account_process(request):
193     user_query  = Query().get('local:user').select('user_id','email','password','config')
194     user_details = execute_query(request, user_query)
195     
196     account_query  = Query().get('local:account').select('user_id','platform_id','auth_type','config')
197     account_details = execute_query(request, account_query)
198
199     platform_query  = Query().get('local:platform').select('platform_id','platform')
200     platform_details = execute_query(request, platform_query)
201     
202     # getting the user_id from the session
203     for user_detail in user_details:
204             user_id = user_detail['user_id']
205
206     for account_detail in account_details:
207         for platform_detail in platform_details:
208             if platform_detail['platform_id'] == account_detail['platform_id']:
209                 if 'myslice' in platform_detail['platform']:
210                     account_config = json.loads(account_detail['config'])
211                     acc_slice_cred = account_config.get('delegated_slice_credentials','N/A')
212                     acc_auth_cred = account_config.get('delegated_authority_credentials','N/A')
213                     
214     
215     # adding the slices and corresponding credentials to list
216     if 'N/A' not in acc_slice_cred:
217         slice_list = []
218         slice_cred = [] 
219         for key, value in acc_slice_cred.iteritems():
220             slice_list.append(key)       
221             slice_cred.append(value)
222         # special case: download each slice credentials separately -- too complicated
223         for i in range(0, len(slice_list)):
224             if 'dl_'+slice_list[i] in request.POST:
225                 slice_detail = "Slice name: " + slice_list[i] +"\nSlice Credentials: \n"+ slice_cred[i]
226                 response = HttpResponse(slice_detail, content_type='text/plain')
227                 response['Content-Disposition'] = 'attachment; filename="slice_credential.txt"'
228                 return response
229
230     # adding the authority and corresponding credentials to list
231     if 'N/A' not in acc_auth_cred:
232         auth_list = []
233         auth_cred = [] 
234         for key, value in acc_auth_cred.iteritems():
235             auth_list.append(key)       
236             auth_cred.append(value)
237         # special case: download each slice credentials separately -- too complicated
238         for i in range(0, len(auth_list)):
239             if 'dl_'+auth_list[i] in request.POST:
240                 auth_detail = "Authority: " + auth_list[i] +"\nAuthority Credentials: \n"+ auth_cred[i]
241                 response = HttpResponse(auth_detail, content_type='text/plain')
242                 response['Content-Disposition'] = 'attachment; filename="auth_credential.txt"'
243                 return response
244
245
246              
247     if 'submit_name' in request.POST:
248         edited_first_name =  request.POST['fname']
249         edited_last_name =  request.POST['lname']
250         
251         config={}
252         for user_config in user_details:
253             if user_config['config']:
254                 config = json.loads(user_config['config'])
255                 config['firstname'] = edited_first_name
256                 config['lastname'] = edited_last_name
257                 config['authority'] = config.get('authority','Unknown Authority')
258                 updated_config = json.dumps(config)
259                 user_params = {'config': updated_config}
260             else: # it's needed if the config is empty 
261                 user_config['config']= '{"firstname":"' + edited_first_name + '", "lastname":"'+ edited_last_name + '", "authority": "Unknown Authority"}'
262                 user_params = {'config': user_config['config']} 
263         # updating config local:user in manifold       
264         manifold_update_user(request,user_params)
265         # this will be depricated, we will show the success msg in same page
266         # Redirect to same page with success message
267         messages.success(request, 'Sucess: First Name and Last Name Updated.')
268         return HttpResponseRedirect("/portal/account/")       
269     
270     elif 'submit_pass' in request.POST:
271         edited_password = request.POST['password']
272         
273         for user_pass in user_details:
274             user_pass['password'] = edited_password
275         #updating password in local:user
276         user_params = { 'password': user_pass['password']}
277         manifold_update_user(request,user_params)
278 #        return HttpResponse('Success: Password Changed!!')
279         messages.success(request, 'Sucess: Password Updated.')
280         return HttpResponseRedirect("/portal/account/")
281
282 # XXX TODO: Factorize with portal/registrationview.py
283
284     elif 'generate' in request.POST:
285         for account_detail in account_details:
286             for platform_detail in platform_details:
287                 if platform_detail['platform_id'] == account_detail['platform_id']:
288                     if 'myslice' in platform_detail['platform']:
289                         from Crypto.PublicKey import RSA
290                         private = RSA.generate(1024)
291                         private_key = json.dumps(private.exportKey())
292                         public  = private.publickey()
293                         public_key = json.dumps(public.exportKey(format='OpenSSH'))
294                         # updating maniolf local:account table
295                         account_config = json.loads(account_detail['config'])
296                         # preserving user_hrn
297                         user_hrn = account_config.get('user_hrn','N/A')
298                         keypair = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + ', "user_hrn":"'+ user_hrn + '"}'
299                         updated_config = json.dumps(account_config) 
300
301                         user_params = { 'config': keypair, 'auth_type':'managed'}
302                         manifold_update_account(request,user_params)
303                         messages.success(request, 'Sucess: New Keypair Generated!')
304                         return HttpResponseRedirect("/portal/account/")
305         else:
306             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
307             return HttpResponseRedirect("/portal/account/")
308                        
309     elif 'upload_key' in request.POST:
310         for account_detail in account_details:
311             for platform_detail in platform_details:
312                 if platform_detail['platform_id'] == account_detail['platform_id']:
313                     if 'myslice' in platform_detail['platform']:
314                         up_file = request.FILES['pubkey']
315                         file_content =  up_file.read()
316                         file_name = up_file.name
317                         file_extension = os.path.splitext(file_name)[1] 
318                         allowed_extension =  ['.pub','.txt']
319                         if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content):
320                             account_config = json.loads(account_detail['config'])
321                             # preserving user_hrn
322                             user_hrn = account_config.get('user_hrn','N/A')
323                             file_content = '{"user_public_key":"'+ file_content + '", "user_hrn":"'+ user_hrn +'"}'
324                             #file_content = re.sub("\r", "", file_content)
325                             #file_content = re.sub("\n", "\\n",file_content)
326                             file_content = ''.join(file_content.split())
327                             #update manifold local:account table
328                             user_params = { 'config': file_content, 'auth_type':'user'}
329                             manifold_update_account(request,user_params)
330                             messages.success(request, 'Publickey uploaded! Please delegate your credentials using SFA: http://trac.myslice.info/wiki/DelegatingCredentials')
331                             return HttpResponseRedirect("/portal/account/")
332                         else:
333                             messages.error(request, 'RSA key error: Please upload a valid RSA public key [.txt or .pub].')
334                             return HttpResponseRedirect("/portal/account/")
335         else:
336             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
337             return HttpResponseRedirect("/portal/account/")
338
339     elif 'dl_pubkey' in request.POST:
340         for account_detail in account_details:
341             for platform_detail in platform_details:
342                 if platform_detail['platform_id'] == account_detail['platform_id']:
343                     if 'myslice' in platform_detail['platform']:
344                         account_config = json.loads(account_detail['config'])
345                         public_key = account_config['user_public_key'] 
346                         response = HttpResponse(public_key, content_type='text/plain')
347                         response['Content-Disposition'] = 'attachment; filename="pubkey.txt"'
348                         return response
349                         break
350         else:
351             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
352             return HttpResponseRedirect("/portal/account/")
353                
354     elif 'dl_pkey' in request.POST:
355         for account_detail in account_details:
356             for platform_detail in platform_details:
357                 if platform_detail['platform_id'] == account_detail['platform_id']:
358                     if 'myslice' in platform_detail['platform']:
359                         account_config = json.loads(account_detail['config'])
360                         if 'user_private_key' in account_config:
361                             private_key = account_config['user_private_key']
362                             response = HttpResponse(private_key, content_type='text/plain')
363                             response['Content-Disposition'] = 'attachment; filename="privkey.txt"'
364                             return response
365                         else:
366                             messages.error(request, 'Download error: Private key is not stored in the server')
367                             return HttpResponseRedirect("/portal/account/")
368
369         else:
370             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
371             return HttpResponseRedirect("/portal/account/")
372     
373     elif 'delete' in request.POST:
374         for account_detail in account_details:
375             for platform_detail in platform_details:
376                 if platform_detail['platform_id'] == account_detail['platform_id']:
377                     if 'myslice' in platform_detail['platform']:
378                         account_config = json.loads(account_detail['config'])
379                         if 'user_private_key' in account_config:
380                             for key in account_config.keys():
381                                 if key == 'user_private_key':    
382                                     del account_config[key]
383                                 
384                             updated_config = json.dumps(account_config)
385                             user_params = { 'config': updated_config, 'auth_type':'user'}
386                             manifold_update_account(request,user_params)
387                             messages.success(request, 'Private Key deleted. You need to delegate credentials manually once it expires.')
388                             return HttpResponseRedirect("/portal/account/")
389                         else:
390                             messages.error(request, 'Delete error: Private key is not stored in the server')
391                             return HttpResponseRedirect("/portal/account/")
392                            
393         else:
394             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')    
395             return HttpResponseRedirect("/portal/account/")
396
397     #clear all creds
398     elif 'clear_cred' in request.POST:
399         for account_detail in account_details:
400             for platform_detail in platform_details:
401                 if platform_detail['platform_id'] == account_detail['platform_id']:
402                     if 'myslice' in platform_detail['platform']:
403                         account_config = json.loads(account_detail['config'])
404                         user_cred = account_config.get('delegated_user_credential','N/A')
405                         if 'N/A' not in user_cred:
406                             user_hrn = account_config.get('user_hrn','N/A')
407                             user_pub_key = account_config.get('user_public_key','N/A')         
408                             user_priv_key = account_config.get('user_private_key','N/A')
409                             updated_config = '{"user_public_key":"'+ user_pub_key + '", "user_private_key":"'+ user_priv_key + '", "user_hrn":"'+ user_hrn + '"}'
410                             updated_config = ''.join(updated_config.split()) 
411                             user_params = { 'config': updated_config}
412                             manifold_update_account(request,user_params)
413                             messages.success(request, 'All Credentials cleared')
414                             return HttpResponseRedirect("/portal/account/")
415                         else:
416                             messages.error(request, 'Delete error: Credentials are not stored in the server')
417                             return HttpResponseRedirect("/portal/account/")
418         else:
419             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
420             return HttpResponseRedirect("/portal/account/")
421
422
423     # Download delegated_user_cred
424     elif 'dl_user_cred' in request.POST:
425         if 'delegated_user_credential' in account_config:
426             user_cred = account_config['delegated_user_credential']
427             response = HttpResponse(user_cred, content_type='text/plain')
428             response['Content-Disposition'] = 'attachment; filename="user_cred.txt"'
429             return response
430         else:
431             messages.error(request, 'Download error: User credential  is not stored in the server')
432             return HttpResponseRedirect("/portal/account/")
433         
434     # add reference platforms  
435     elif 'add_fuseco' in request.POST:
436         for platform_detail in platform_details:
437             if platform_detail['platform'] == "fuseco":
438                 platform_id = platform_detail['platform_id']
439
440         user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
441         manifold_add_account(request,user_params)
442
443         messages.info(request, 'Reference Account added on Fuseco platform. You have now access to Fuseco resources.')
444         return HttpResponseRedirect("/portal/account/")
445
446     elif 'add_ple' in request.POST:
447         for platform_detail in platform_details:
448             if platform_detail['platform'] == "ple":
449                 platform_id = platform_detail['platform_id']
450         user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
451         manifold_add_account(request,user_params)
452         messages.info(request, 'Reference Account added on PLE platform. You have now access to PLE resources.')
453         return HttpResponseRedirect("/portal/account/")
454
455     elif 'add_omf' in request.POST:
456         for platform_detail in platform_details:
457             if platform_detail['platform'] == "omf":
458                 platform_id = platform_detail['platform_id']
459         user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
460         manifold_add_account(request,user_params)
461         messages.info(request, 'Reference Account added on OMF:Nitos platform. You have now access to OMF:Nitos resources.')
462         return HttpResponseRedirect("/portal/account/")
463
464     elif 'add_wilab' in request.POST:
465         for platform_detail in platform_details:
466             if platform_detail['platform'] == "wilab":
467                 platform_id = platform_detail['platform_id']
468         user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
469         manifold_add_account(request,user_params)
470         messages.info(request, 'Reference Account added on Wilab platform. You have now access to Wilab resources.')
471         return HttpResponseRedirect("/portal/account/")
472
473     elif 'iotlab' in request.POST:
474         for platform_detail in platform_details:
475             if platform_detail['platform'] == "iotlab":
476                 platform_id = platform_detail['platform_id']
477         user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
478         manifold_add_account(request,user_params)
479         messages.info(request, 'Reference Account added on IOTLab platform. You have now access to IOTLab resources.')
480         return HttpResponseRedirect("/portal/account/")
481         
482     # delete reference platforms  
483     elif 'delete_fuseco' in request.POST:
484         for platform_detail in platform_details:
485             if platform_detail['platform'] == "fuseco":
486                 platform_id = platform_detail['platform_id']
487         user_params = {'user_id':user_id}
488         manifold_delete_account(request,platform_id,user_params)
489         messages.info(request, 'Reference Account is removed from Fuseco platform. You have no access to Fuseco resources anymore.')
490         return HttpResponseRedirect("/portal/account/")
491
492     elif 'delete_ple' in request.POST:
493         for platform_detail in platform_details:
494             if platform_detail['platform'] == "ple":
495                 platform_id = platform_detail['platform_id']
496         user_params = {'user_id':user_id}
497         manifold_delete_account(request,platform_id,user_params)
498         messages.info(request, 'Reference Account is removed from PLE platform. You have no access to PLE resources anymore.')
499         return HttpResponseRedirect("/portal/account/")
500     
501     elif 'delete_omf' in request.POST:
502         for platform_detail in platform_details:
503             if platform_detail['platform'] == "omf":
504                 platform_id = platform_detail['platform_id']
505         user_params = {'user_id':user_id}
506         manifold_delete_account(request,platform_id,user_params)
507         messages.info(request, 'Reference Account is removed from OMF:Nitos platform. You have no access to OMF:Nitos resources anymore.')
508         return HttpResponseRedirect("/portal/account/")
509     
510     elif 'delete_wilab' in request.POST:
511         for platform_detail in platform_details:
512             if platform_detail['platform'] == "wilab":
513                 platform_id = platform_detail['platform_id']
514         user_params = {'user_id':user_id}
515         manifold_delete_account(request,platform_id,user_params)
516         query = Query.delete('local:account').filter_by('platform_id','==',platform_id)
517         results = execute_query(request,query)
518         messages.info(request, 'Reference Account is removed from Wilab platform. You have no access to Wilab resources anymore.')
519         return HttpResponseRedirect("/portal/account/")
520
521     elif 'delete_iotlab' in request.POST:
522         for platform_detail in platform_details:
523             if platform_detail['platform'] == "iotlab":
524                 platform_id = platform_detail['platform_id']
525         user_params = {'user_id':user_id}
526         manifold_delete_account(request,platform_id,user_params)
527         messages.info(request, 'Reference Account is removed from IOTLab platform. You have no access to IOTLab resources anymore.')
528         return HttpResponseRedirect("/portal/account/")
529
530     else:
531         messages.info(request, 'Under Construction. Please try again later!')
532         return HttpResponseRedirect("/portal/account/")
533
534