mirror of
https://github.com/netbox-community/netbox.git
synced 2025-12-12 19:39:35 -06:00
88 lines
2.7 KiB
Python
88 lines
2.7 KiB
Python
from django.contrib.auth import authenticate
|
|
from rest_framework import serializers
|
|
from rest_framework.exceptions import AuthenticationFailed, PermissionDenied
|
|
|
|
from netbox.api.fields import IPNetworkSerializer
|
|
from netbox.api.serializers import ValidatedModelSerializer
|
|
from users.models import Token
|
|
from .users import *
|
|
|
|
__all__ = (
|
|
'TokenProvisionSerializer',
|
|
'TokenSerializer',
|
|
)
|
|
|
|
|
|
class TokenSerializer(ValidatedModelSerializer):
|
|
token = serializers.CharField(
|
|
required=False,
|
|
default=Token.generate,
|
|
)
|
|
user = UserSerializer(
|
|
nested=True
|
|
)
|
|
allowed_ips = serializers.ListField(
|
|
child=IPNetworkSerializer(),
|
|
required=False,
|
|
allow_empty=True,
|
|
default=[]
|
|
)
|
|
|
|
class Meta:
|
|
model = Token
|
|
fields = (
|
|
'id', 'url', 'display_url', 'display', 'version', 'key', 'user', 'description', 'created', 'expires',
|
|
'last_used', 'write_enabled', 'pepper_id', 'allowed_ips', 'token',
|
|
)
|
|
read_only_fields = ('key',)
|
|
brief_fields = ('id', 'url', 'display', 'version', 'key', 'write_enabled', 'description')
|
|
|
|
def validate(self, data):
|
|
|
|
# If the Token is being created on behalf of another user, enforce the grant_token permission.
|
|
request = self.context.get('request')
|
|
token_user = data.get('user')
|
|
if token_user and token_user != request.user and not request.user.has_perm('users.grant_token'):
|
|
raise PermissionDenied("This user does not have permission to create tokens for other users.")
|
|
|
|
return super().validate(data)
|
|
|
|
|
|
class TokenProvisionSerializer(TokenSerializer):
|
|
user = UserSerializer(
|
|
nested=True,
|
|
read_only=True
|
|
)
|
|
username = serializers.CharField(
|
|
write_only=True
|
|
)
|
|
password = serializers.CharField(
|
|
write_only=True
|
|
)
|
|
last_used = serializers.DateTimeField(
|
|
read_only=True
|
|
)
|
|
key = serializers.CharField(
|
|
read_only=True
|
|
)
|
|
|
|
class Meta:
|
|
model = Token
|
|
fields = (
|
|
'id', 'url', 'display_url', 'display', 'version', 'user', 'key', 'created', 'expires', 'last_used', 'key',
|
|
'write_enabled', 'description', 'allowed_ips', 'username', 'password', 'token',
|
|
)
|
|
|
|
def validate(self, data):
|
|
# Validate the username and password
|
|
username = data.pop('username')
|
|
password = data.pop('password')
|
|
user = authenticate(request=self.context.get('request'), username=username, password=password)
|
|
if user is None:
|
|
raise AuthenticationFailed("Invalid username/password")
|
|
|
|
# Inject the user into the validated data
|
|
data['user'] = user
|
|
|
|
return data
|