portal: improved user and slice request/validation
[myslice.git] / portal / registrationview.py
1 import os.path, re
2 import json
3
4 from django.core.mail           import send_mail
5
6 from django.views.generic       import View
7 from django.template.loader     import render_to_string
8 from django.shortcuts           import render
9
10 from unfold.page                import Page
11 from ui.topmenu                 import topmenu_items
12
13 from manifold.manifoldapi       import execute_admin_query
14 from manifold.core.query        import Query
15
16 from portal.models              import PendingUser
17 from portal.actions             import authority_get_pi_emails 
18
19 # This is a rough porting from views.py
20 # the former function-based view is now made a class
21 # we redefine dispatch as it is simple
22 # and coincidentally works since we do not need LoginRequiredAutoLogoutView
23 # a second stab should redefine post and get instead
24 # also this was not thoroughly tested either, might miss some imports
25 # to be continued...
26
27 class RegistrationView (View):
28
29     def dispatch (self, request):
30         errors = []
31
32         authorities_query = Query.get('authority').\
33             select('name', 'authority_hrn')
34         
35         onelab_enabled_query = Query.get('local:platform').filter_by('platform', '==', 'ple').filter_by('disabled', '==', 'False')
36         onelab_enabled = not not execute_admin_query(request, onelab_enabled_query)
37         if onelab_enabled:
38             print "ONELAB ENABLED"
39             authorities_query = authorities_query.filter_by('authority_hrn', 'included', ['ple.inria', 'ple.upmc', 'ple.ibbtple'])
40         else:
41             print "FIREXP ENABLED"
42
43         authorities = execute_admin_query(request, authorities_query)
44         # xxx tocheck - if authorities is empty, it's no use anyway
45         # (users won't be able to validate the form anyway)
46
47         page = Page(request)
48         page.add_js_files  ( [ "js/jquery.validate.js", "js/my_account.register.js" ] )
49         page.add_css_files ( [ "css/onelab.css", "css/registration.css" ] )
50
51         print 'registration view, method',request.method
52
53         if request.method == 'POST':
54             # We shall use a form here
55
56             #get_email = PendingUser.objects.get(email)
57             reg_fname  = request.POST.get('firstname', '')
58             reg_lname  = request.POST.get('lastname', '')
59             #reg_aff   = request.POST.get('affiliation','')
60             reg_auth   = request.POST.get('authority_hrn', '')
61             reg_login  = request.POST.get('login', '')
62             reg_email  = request.POST.get('email','').lower()
63       
64             #POST value validation  
65             if (re.search(r'^[\w+\s.@+-]+$', reg_fname)==None):
66                 errors.append('First Name may contain only letters, numbers, spaces and @/./+/-/_ characters.')
67             if (re.search(r'^[\w+\s.@+-]+$', reg_lname) == None):
68                 errors.append('Last Name may contain only letters, numbers, spaces and @/./+/-/_ characters.')
69             # XXX validate authority hrn !!
70             if PendingUser.objects.filter(email__iexact=reg_email):
71                 errors.append('Email already registered.Please provide a new email address.')
72
73 # XXX TODO: Factorize with portal/accountview.py
74             if 'generate' in request.POST['question']:
75                 from Crypto.PublicKey import RSA
76                 private = RSA.generate(1024)
77                 private_key = json.dumps(private.exportKey())
78                 public  = private.publickey()
79                 public_key = json.dumps(public.exportKey(format='OpenSSH'))
80
81 #                # Generate public and private keys using SFA Library
82 #                from sfa.trust.certificate  import Keypair
83 #                k = Keypair(create=True)
84 #                public_key = k.get_pubkey_string()
85 #                private_key = k.as_pem()
86 #                private_key = ''.join(private_key.split())
87 #                public_key = "ssh-rsa " + public_key
88                 # Saving to DB
89                 keypair = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + '}'
90                 #keypair = re.sub("\r", "", keypair)
91                 #keypair = re.sub("\n", "\\n", keypair)
92                 #keypair = keypair.rstrip('\r\n')
93                 #keypair = ''.join(keypair.split())
94             else: 
95                 up_file = request.FILES['user_public_key']
96                 file_content =  up_file.read()
97                 file_name = up_file.name
98                 file_extension = os.path.splitext(file_name)[1]
99                 allowed_extension =  ['.pub','.txt']
100                 if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content):
101                     keypair = '{"user_public_key":"'+ file_content +'"}'
102                     keypair = re.sub("\r", "", keypair)
103                     keypair = re.sub("\n", "\\n",keypair)
104                     keypair = ''.join(keypair.split())
105                     # for sending email
106                     public_key = file_content
107                 else:
108                     errors.append('Please upload a valid RSA public key [.txt or .pub].')
109
110             #b = PendingUser(first_name=reg_fname, last_name=reg_lname, affiliation=reg_aff, 
111             #                email=reg_email, password=request.POST['password'], keypair=keypair)
112             #b.save()
113             if not errors:
114                 b = PendingUser(
115                     first_name    = reg_fname, 
116                     last_name     = reg_lname, 
117                     #affiliation  = reg_aff,
118                     authority_hrn = reg_auth,
119                     login         = reg_login,
120                     email         = reg_email, 
121                     password      = request.POST['password'],
122                     keypair       = keypair,
123                 )
124                 b.save()
125
126                 # Send email
127                 ctx = {
128                     'first_name'    : reg_fname, 
129                     'last_name'     : reg_lname, 
130                     'authority_hrn' : reg_auth,
131                     'email'         : reg_email, 
132                     'keypair'       : 'Public Key :' + public_key,
133                     'cc_myself'     : True # form.cleaned_data['cc_myself']
134                     }
135
136                 recipients = authority_get_pi_emails(request,reg_auth)
137
138                 if ctx['cc_myself']:
139                     recipients.append(ctx['email'])
140
141                 msg = render_to_string('user_request_email.txt', ctx)
142                 send_mail("Onelab New User request for %s submitted"%reg_email, msg, reg_email, recipients)
143
144                 return render(request, 'user_register_complete.html')
145
146         template_env = {
147           'topmenu_items': topmenu_items('Register', request),
148           'errors': errors,
149           'firstname': request.POST.get('firstname', ''),
150           'lastname': request.POST.get('lastname', ''),
151           #'affiliation': request.POST.get('affiliation', ''),
152           'authority_hrn': request.POST.get('authority_hrn', ''),
153           'email': request.POST.get('email', ''),
154           'password': request.POST.get('password', ''),           
155           'authorities': authorities,
156           }
157         template_env.update(page.prelude_env ())
158         return render(request, 'registration_view.html',template_env)