Skip to content
Snippets Groups Projects
Commit 610dd256 authored by Benjami's avatar Benjami Committed by konykon
Browse files

Added reset password endpoint and method

parent cb7a25b3
No related branches found
No related tags found
3 merge requests!239Draft: [REL] energy_communities: dependency energy_selfconsumption bump to,!227[REL] Release 16/10/23,!142Feature/assign ce admin
Hide whitespace changes
Inline Side-by-side
energy_communities/models/auth_oauth_provider.py
+ 44
− 47
View file @ 610dd256
......@@ -10,6 +10,7 @@ URL_AUTH = "{root_endpoint}realms/{realm_name}/protocol/openid-connect/auth"
URL_VALIDATION = "{root_endpoint}realms/{realm_name}/protocol/openid-connect/userinfo"
URL_TOKEN = "{root_endpoint}realms/{realm_name}/protocol/openid-connect/token"
URL_JWKS = "{root_endpoint}realms/{realm_name}/protocol/openid-connect/certs"
URL_RESET_PASSWORD = "{root_endpoint}admin/realms/{realm_name}/users/{kc_uid}/execute-actions-email?redirect_uri={odoo_url}&client_id={cliend_id}"
class OAuthProvider(models.Model):
......@@ -17,25 +18,15 @@ class OAuthProvider(models.Model):
is_admin_provider = fields.Boolean(string="Admin provider")
is_keycloak_provider = fields.Boolean(string="Keycloak provider")
superuser = fields.Char(
string="Superuser",
help="A super power user that is able to CRUD users on KC.",
placeholder="admin",
required=False,
)
superuser_pwd = fields.Char(
string="Superuser password",
help='"Superuser" user password',
placeholder='I hope is not "admin"',
required=False,
)
admin_user_endpoint = fields.Char(string="User admin URL", required=True)
root_endpoint = fields.Char(
string="Root URL",
required=True,
default="http://keycloak-ccee.local:8080/auth/",
)
realm_name = fields.Char(string="Realm name", required=True, default="0")
superuser = fields.Char(string='Superuser', help='A super power user that is able to CRUD users on KC.',
placeholder='admin', required=False)
superuser_pwd = fields.Char(string='Superuser password', help='"Superuser" user password',
placeholder='I hope is not "admin"', required=False)
admin_user_endpoint = fields.Char(string='User admin URL', required=True)
root_endpoint = fields.Char(string='Root URL', required=True, default='http://keycloak-ccee.local:8080/auth/')
realm_name = fields.Char(string='Realm name', required=True, default='0')
reset_password_endpoint = fields.Char(string='Reset password URL', required=True)
redirect_admin_url = fields.Char(string='Redirect Link after update password', required=True)
def validate_admin_provider(self):
if not self.client_secret:
......@@ -45,40 +36,46 @@ class OAuthProvider(models.Model):
@api.onchange("root_endpoint")
def _onchange_root_endpoint(self):
# TODO: Duplicated code? 🤔
if self.is_keycloak_provider and self.root_endpoint and self.realm_name:
self.admin_user_endpoint = URL_ADMIN_USERS.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.auth_endpoint = URL_AUTH.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.validation_endpoint = URL_VALIDATION.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.token_endpoint = URL_TOKEN.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.jwks_uri = URL_JWKS.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
self.admin_user_endpoint = URL_ADMIN_USERS.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.auth_endpoint = URL_AUTH.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.validation_endpoint = URL_VALIDATION.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.token_endpoint = URL_TOKEN.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.jwks_uri = URL_JWKS.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.reset_password_endpoint = URL_RESET_PASSWORD.format(
root_endpoint=self.root_endpoint,
realm_name=self.realm_name,
kc_uid='{kc_uid}',
odoo_url=self.redirect_admin_url,
cliend_id=self.client_id,
)
@api.onchange("realm_name")
def _onchange_realm_name(self):
# TODO: Duplicated code? 🤔
if self.is_keycloak_provider and self.root_endpoint and self.realm_name:
self.admin_user_endpoint = URL_ADMIN_USERS.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.auth_endpoint = URL_AUTH.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.validation_endpoint = URL_VALIDATION.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.token_endpoint = URL_TOKEN.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
)
self.jwks_uri = URL_JWKS.format(
**{"root_endpoint": self.root_endpoint, "realm_name": self.realm_name}
self.admin_user_endpoint = URL_ADMIN_USERS.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.auth_endpoint = URL_AUTH.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.validation_endpoint = URL_VALIDATION.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.token_endpoint = URL_TOKEN.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.jwks_uri = URL_JWKS.format(**{'root_endpoint': self.root_endpoint,
'realm_name': self.realm_name})
self.reset_password_endpoint = URL_RESET_PASSWORD.format(
root_endpoint=self.root_endpoint,
realm_name=self.realm_name,
kc_uid='{kc_uid}',
odoo_url=self.redirect_admin_url,
cliend_id=self.client_id,
)
def get_auth_link(self):
......
energy_communities/models/res_users.py
+ 17
− 0
View file @ 610dd256
......@@ -207,3 +207,20 @@ class ResUsers(models.Model):
for company in role_line.allowed_company_ids:
communities.append(company.id)
return communities
def send_reset_password_mail(self):
provider_id = self.env.ref('energy_communities.keycloak_admin_provider')
provider_id.validate_admin_provider()
headers = {
'Authorization': 'Bearer %s' % self._get_admin_token(provider_id)
}
headers['Content-Type'] = "application/json"
endpoint = provider_id.reset_password_endpoint.format(
kc_uid = self.oauth_uid
)
response = requests.put(endpoint, headers=headers, data='["UPDATE_PASSWORD"]')
if response.status_code != 204:
raise exceptions.UserError(
_('Something went wrong. Mail can not be sended. More details: {}').format(response.json())
)
energy_communities/views/auth_oauth_views.xml
+ 14
− 28
View file @ 610dd256
......@@ -6,34 +6,20 @@
<field name="inherit_id" ref="auth_oauth.view_oauth_provider_form" />
<field name="arch" type="xml">
<xpath expr="//field[@name='css_class']" position="after">
<field name="is_keycloak_provider" />
<field
name="root_endpoint"
attrs="{'invisible': [('is_keycloak_provider','=',False)]}"
/>
<field
name="realm_name"
attrs="{'invisible': [('is_keycloak_provider','=',False)]}"
/>
<field
name="is_admin_provider"
attrs="{'invisible': [('is_keycloak_provider','=',False)]}"
/>
<field
name="superuser"
attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"
/>
<field
name="superuser_pwd"
attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"
/>
<field
name="admin_user_endpoint"
attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"
/>
<field name="is_keycloak_provider"/>
<field name="root_endpoint" attrs="{'invisible': [('is_keycloak_provider','=',False)]}"/>
<field name="realm_name" attrs="{'invisible': [('is_keycloak_provider','=',False)]}"/>
<field name="is_admin_provider" attrs="{'invisible': [('is_keycloak_provider','=',False)]}"/>
<field name="superuser" attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"/>
<field name="superuser_pwd" attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"/>
<field name="admin_user_endpoint" attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"/>
<field name="redirect_admin_url" attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"/>
<field name="reset_password_endpoint" attrs="{'invisible': ['|', ('is_admin_provider','=',False),
('is_keycloak_provider', '=', False)]}"/>
</xpath>
</field>
</record>
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment