mirror of
https://git.anonymousland.org/anonymousland/synapse-product.git
synced 2024-12-12 05:24:18 -05:00
ef771cc4c2
Broadly three things here: * disable W504 which seems a bit whacko * remove a bunch of `as e` expressions from exception handlers that don't use them * use `r""` for strings which include backslashes Also, we don't use pep8 any more, so we can get rid of the duplicate config there.
191 lines
6.1 KiB
Python
191 lines
6.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Copyright 2015, 2016 OpenMarket Ltd
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import logging
|
|
|
|
from twisted.internet import defer
|
|
|
|
from synapse.api.constants import LoginType
|
|
from synapse.api.errors import SynapseError
|
|
from synapse.api.urls import CLIENT_V2_ALPHA_PREFIX
|
|
from synapse.http.server import finish_request
|
|
from synapse.http.servlet import RestServlet
|
|
|
|
from ._base import client_v2_patterns
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
RECAPTCHA_TEMPLATE = """
|
|
<html>
|
|
<head>
|
|
<title>Authentication</title>
|
|
<meta name='viewport' content='width=device-width, initial-scale=1,
|
|
user-scalable=no, minimum-scale=1.0, maximum-scale=1.0'>
|
|
<script src="https://www.google.com/recaptcha/api.js"
|
|
async defer></script>
|
|
<script src="//code.jquery.com/jquery-1.11.2.min.js"></script>
|
|
<link rel="stylesheet" href="/_matrix/static/client/register/style.css">
|
|
<script>
|
|
function captchaDone() {
|
|
$('#registrationForm').submit();
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<form id="registrationForm" method="post" action="%(myurl)s">
|
|
<div>
|
|
<p>
|
|
Hello! We need to prevent computer programs and other automated
|
|
things from creating accounts on this server.
|
|
</p>
|
|
<p>
|
|
Please verify that you're not a robot.
|
|
</p>
|
|
<input type="hidden" name="session" value="%(session)s" />
|
|
<div class="g-recaptcha"
|
|
data-sitekey="%(sitekey)s"
|
|
data-callback="captchaDone">
|
|
</div>
|
|
<noscript>
|
|
<input type="submit" value="All Done" />
|
|
</noscript>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
SUCCESS_TEMPLATE = """
|
|
<html>
|
|
<head>
|
|
<title>Success!</title>
|
|
<meta name='viewport' content='width=device-width, initial-scale=1,
|
|
user-scalable=no, minimum-scale=1.0, maximum-scale=1.0'>
|
|
<link rel="stylesheet" href="/_matrix/static/client/register/style.css">
|
|
<script>
|
|
if (window.onAuthDone) {
|
|
window.onAuthDone();
|
|
} else if (window.opener && window.opener.postMessage) {
|
|
window.opener.postMessage("authDone", "*");
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<div>
|
|
<p>Thank you</p>
|
|
<p>You may now close this window and return to the application</p>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
|
|
class AuthRestServlet(RestServlet):
|
|
"""
|
|
Handles Client / Server API authentication in any situations where it
|
|
cannot be handled in the normal flow (with requests to the same endpoint).
|
|
Current use is for web fallback auth.
|
|
"""
|
|
PATTERNS = client_v2_patterns(r"/auth/(?P<stagetype>[\w\.]*)/fallback/web")
|
|
|
|
def __init__(self, hs):
|
|
super(AuthRestServlet, self).__init__()
|
|
self.hs = hs
|
|
self.auth = hs.get_auth()
|
|
self.auth_handler = hs.get_auth_handler()
|
|
self.registration_handler = hs.get_handlers().registration_handler
|
|
|
|
@defer.inlineCallbacks
|
|
def on_GET(self, request, stagetype):
|
|
yield
|
|
if stagetype == LoginType.RECAPTCHA:
|
|
if ('session' not in request.args or
|
|
len(request.args['session']) == 0):
|
|
raise SynapseError(400, "No session supplied")
|
|
|
|
session = request.args["session"][0]
|
|
|
|
html = RECAPTCHA_TEMPLATE % {
|
|
'session': session,
|
|
'myurl': "%s/auth/%s/fallback/web" % (
|
|
CLIENT_V2_ALPHA_PREFIX, LoginType.RECAPTCHA
|
|
),
|
|
'sitekey': self.hs.config.recaptcha_public_key,
|
|
}
|
|
html_bytes = html.encode("utf8")
|
|
request.setResponseCode(200)
|
|
request.setHeader(b"Content-Type", b"text/html; charset=utf-8")
|
|
request.setHeader(b"Content-Length", b"%d" % (len(html_bytes),))
|
|
|
|
request.write(html_bytes)
|
|
finish_request(request)
|
|
defer.returnValue(None)
|
|
else:
|
|
raise SynapseError(404, "Unknown auth stage type")
|
|
|
|
@defer.inlineCallbacks
|
|
def on_POST(self, request, stagetype):
|
|
yield
|
|
if stagetype == "m.login.recaptcha":
|
|
if ('g-recaptcha-response' not in request.args or
|
|
len(request.args['g-recaptcha-response'])) == 0:
|
|
raise SynapseError(400, "No captcha response supplied")
|
|
if ('session' not in request.args or
|
|
len(request.args['session'])) == 0:
|
|
raise SynapseError(400, "No session supplied")
|
|
|
|
session = request.args['session'][0]
|
|
|
|
authdict = {
|
|
'response': request.args['g-recaptcha-response'][0],
|
|
'session': session,
|
|
}
|
|
|
|
success = yield self.auth_handler.add_oob_auth(
|
|
LoginType.RECAPTCHA,
|
|
authdict,
|
|
self.hs.get_ip_from_request(request)
|
|
)
|
|
|
|
if success:
|
|
html = SUCCESS_TEMPLATE
|
|
else:
|
|
html = RECAPTCHA_TEMPLATE % {
|
|
'session': session,
|
|
'myurl': "%s/auth/%s/fallback/web" % (
|
|
CLIENT_V2_ALPHA_PREFIX, LoginType.RECAPTCHA
|
|
),
|
|
'sitekey': self.hs.config.recaptcha_public_key,
|
|
}
|
|
html_bytes = html.encode("utf8")
|
|
request.setResponseCode(200)
|
|
request.setHeader(b"Content-Type", b"text/html; charset=utf-8")
|
|
request.setHeader(b"Content-Length", b"%d" % (len(html_bytes),))
|
|
|
|
request.write(html_bytes)
|
|
finish_request(request)
|
|
|
|
defer.returnValue(None)
|
|
else:
|
|
raise SynapseError(404, "Unknown auth stage type")
|
|
|
|
def on_OPTIONS(self, _):
|
|
return 200, {}
|
|
|
|
|
|
def register_servlets(hs, http_server):
|
|
AuthRestServlet(hs).register(http_server)
|