Compare commits
No commits in common. "cdd640ab9ef08181529a72395be36c75b6726a90" and "474d16ba946b31c7fa13c9365138d8245d09f724" have entirely different histories.
cdd640ab9e
...
474d16ba94
10
config.py
10
config.py
@ -99,28 +99,18 @@ conf.registerGlobalValue(Keycloak.options, 'emailVerified',
|
|||||||
"""
|
"""
|
||||||
Keycloak: Whether to set newly created users email addresses to having been verified \(true, default\) or not \(false\)
|
Keycloak: Whether to set newly created users email addresses to having been verified \(true, default\) or not \(false\)
|
||||||
"""
|
"""
|
||||||
, private=True
|
|
||||||
))
|
))
|
||||||
conf.registerGlobalValue(Keycloak.options, 'firstName',
|
conf.registerGlobalValue(Keycloak.options, 'firstName',
|
||||||
registry.String('Foo',
|
registry.String('Foo',
|
||||||
"""
|
"""
|
||||||
Keycloak: What to set as the firstName value for newly created users.
|
Keycloak: What to set as the firstName value for newly created users.
|
||||||
"""
|
"""
|
||||||
, private=True
|
|
||||||
))
|
))
|
||||||
conf.registerGlobalValue(Keycloak.options, 'lastName',
|
conf.registerGlobalValue(Keycloak.options, 'lastName',
|
||||||
registry.String('Bar',
|
registry.String('Bar',
|
||||||
"""
|
"""
|
||||||
Keycloak: What to set as the lastName value for newly created users.
|
Keycloak: What to set as the lastName value for newly created users.
|
||||||
"""
|
"""
|
||||||
, private=True
|
|
||||||
))
|
|
||||||
conf.registerGlobalValue(Keycloak.options, 'ircgroup',
|
|
||||||
registry.String('',
|
|
||||||
"""
|
|
||||||
Keycloak: Group ID for `ircprom`
|
|
||||||
"""
|
|
||||||
, private=True
|
|
||||||
))
|
))
|
||||||
|
|
||||||
# vim:set shiftwidth=4 tabstop=4 expandtab textwidth=79:
|
# vim:set shiftwidth=4 tabstop=4 expandtab textwidth=79:
|
||||||
|
90
plugin.py
90
plugin.py
@ -32,7 +32,6 @@ import re
|
|||||||
import requests
|
import requests
|
||||||
import secrets
|
import secrets
|
||||||
import string
|
import string
|
||||||
import json
|
|
||||||
from supybot import utils, plugins, ircutils, callbacks, ircmsgs
|
from supybot import utils, plugins, ircutils, callbacks, ircmsgs
|
||||||
from supybot.commands import *
|
from supybot.commands import *
|
||||||
from supybot.ircmsgs import nick
|
from supybot.ircmsgs import nick
|
||||||
@ -127,96 +126,7 @@ class Keycloak(callbacks.Plugin):
|
|||||||
|
|
||||||
register = wrap(register, ['anything'])
|
register = wrap(register, ['anything'])
|
||||||
|
|
||||||
def ircprom(self, irc, msg, args, option):
|
|
||||||
"""<status>
|
|
||||||
true/on = enable authentication to your IRC account with an SSO account going by the same username --
|
|
||||||
false/off = allow authentication to your IRC account ONLY with internal IRC credentials (NickServ) --
|
|
||||||
Warning: Enabling this without having an SSO account with the same username as your IRC nickname is a security risk."""
|
|
||||||
|
|
||||||
user = msg.nick
|
|
||||||
server = self.registryValue('backend.server')
|
|
||||||
realm = self.registryValue('backend.realm')
|
|
||||||
tokenurl = self.registryValue('backend.token')
|
|
||||||
usererr = self.registryValue('replies.error')
|
|
||||||
gid = self.registryValue('options.ircgroup')
|
|
||||||
try:
|
|
||||||
tokendl = requests.get(tokenurl)
|
|
||||||
tokendata = tokendl.json()
|
|
||||||
token = tokendata['access_token']
|
|
||||||
url = server + '/auth/admin/realms/' + realm + '/users'
|
|
||||||
userdata = requests.get(url, params = {'username': user}, headers = {'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token})
|
|
||||||
userresp = userdata.json()
|
|
||||||
uid = userresp[0]['id']
|
|
||||||
print(user, uid)
|
|
||||||
except:
|
|
||||||
print("ERROR: Keycloak token could not be installed.")
|
|
||||||
irc.error(usererr)
|
|
||||||
url = server + '/auth/admin/realms/' + realm + '/users/' + uid + '/groups/' + gid
|
|
||||||
if option == 'true' or option == 'on' or option == '1':
|
|
||||||
choice = 'enable'
|
|
||||||
elif option == 'false' or option == 'off' or option == '0':
|
|
||||||
choice = 'disable'
|
|
||||||
elif option == 'query' or option == 'status':
|
|
||||||
choice = 'query'
|
|
||||||
else:
|
|
||||||
choice = 'faulty'
|
|
||||||
if choice == 'enable':
|
|
||||||
response = requests.put(
|
|
||||||
url,
|
|
||||||
headers = {'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token})
|
|
||||||
if choice == 'disable':
|
|
||||||
response = requests.delete(
|
|
||||||
url,
|
|
||||||
headers = {'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token})
|
|
||||||
if choice == 'enable' or choice == 'disable':
|
|
||||||
try:
|
|
||||||
print("Keycloak: HTTP Status ", response.status_code)
|
|
||||||
try:
|
|
||||||
print("Keycloak: Response Text: ", response.text)
|
|
||||||
except:
|
|
||||||
print("Keycloak: No or invalid response text. This is not an error.")
|
|
||||||
try:
|
|
||||||
print("Keycloak: Response JSON: ", response.json())
|
|
||||||
except:
|
|
||||||
print("Keycloak: No or invalid response JSON. This it not an error.")
|
|
||||||
status = response.status_code
|
|
||||||
if status == 204:
|
|
||||||
print(" SSO user " + user + " has been added to group, if it wasn't already.")
|
|
||||||
#irc.reply("SSO user " + user + " is now authorized to authenticate IRC user " + user) - we currently cannot actually tell
|
|
||||||
irc.reply("Success.")
|
|
||||||
if status != 204:
|
|
||||||
print("ERROR: HTTP request did not succeed. I tried these values:")
|
|
||||||
print("URL: " + url)
|
|
||||||
print("Group: " + gid)
|
|
||||||
print("User: " + uid)
|
|
||||||
irc.error(usererr)
|
|
||||||
except:
|
|
||||||
print('Operation failed.')
|
|
||||||
# if choice == 'query':
|
|
||||||
# try:
|
|
||||||
# url = server + '/auth/admin/realms/' + realm + '/users/' + uid + '/groups'
|
|
||||||
# response = requests.get(
|
|
||||||
# url,
|
|
||||||
# headers = {'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token})
|
|
||||||
# test = "{}"
|
|
||||||
# print(url)
|
|
||||||
# userdata = response.json()
|
|
||||||
# print(userdata)
|
|
||||||
# print(response)
|
|
||||||
# userjson = json.loads(userdata)
|
|
||||||
# print(userjson)
|
|
||||||
# if userdetails != '[]' or '{}':
|
|
||||||
# if gid in userjson:
|
|
||||||
# irc.reply("Your IRC user is enabled for SSO authentication.")
|
|
||||||
# print(userdetails)
|
|
||||||
# else:
|
|
||||||
# irc.reply("Your IRC user is not enabled for SSO authentication.")
|
|
||||||
# except:
|
|
||||||
# print('Operation failed.')
|
|
||||||
else:
|
|
||||||
irc.error('Invalid argument.')
|
|
||||||
|
|
||||||
ircprom = wrap(ircprom, ['anything'])
|
|
||||||
|
|
||||||
Class = Keycloak
|
Class = Keycloak
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user