django-pfx 1.4.dev44__tar.gz → 1.4.dev46__tar.gz

{django_pfx-1.4.dev44 → django_pfx-1.4.dev46}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: django-pfx
-Version: 1.4.dev44
+Version: 1.4.dev46
 Summary: Django PFX is a toolkit designed to streamline the development of RESTful APIs using the Django framework.
 Author: Hervé Martinet
 Author-email: herve.martinet@gmail.com

{django_pfx-1.4.dev44 → django_pfx-1.4.dev46}/django_pfx.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: django-pfx
-Version: 1.4.dev44
+Version: 1.4.dev46
 Summary: Django PFX is a toolkit designed to streamline the development of RESTful APIs using the Django framework.
 Author: Hervé Martinet
 Author-email: herve.martinet@gmail.com

{django_pfx-1.4.dev44 → django_pfx-1.4.dev46}/pfx/pfxcore/default_settings.py

@@ -2,6 +2,7 @@ PFX_TOKEN_SHORT_VALIDITY = {'hours': 12}
 PFX_TOKEN_LONG_VALIDITY = {'days': 30}
 PFX_TOKEN_OTP_VALIDITY = {'minutes': 15}
 PFX_HOTP_CODE_VALIDITY = 15
+PFX_OTP_IMAGE = None
 
 PFX_COOKIE_DOMAIN = None
 PFX_COOKIE_SECURE = True

{django_pfx-1.4.dev44 → django_pfx-1.4.dev46}/pfx/pfxcore/models/otp_user_mixin.py

@@ -69,10 +69,13 @@ class OtpUserMixin(models.Model):
         """Return the setup URL for OTP activation.
         """
         import pyotp
+        args = dict(
+            name=self.get_username(), issuer_name=settings.PFX_SITE_NAME)
+        if settings.PFX_OTP_IMAGE:
+            args['image'] = settings.PFX_OTP_IMAGE
         return pyotp.totp.TOTP(
             tmp and self.otp_secret_token_tmp or
-            self.otp_secret_token).provisioning_uri(
-                name=self.email, issuer_name=settings.PFX_SITE_NAME)
+            self.otp_secret_token).provisioning_uri(**args)
 
     def is_otp_valid(self, otp_code, tmp=False):
         """Verify an OTP code.

{django_pfx-1.4.dev44 → django_pfx-1.4.dev46}/tests/tests/test_auth_api.py

@@ -894,6 +894,7 @@ class AuthAPITest(TestAssertMixin, TransactionTestCase):
         self.assertRC(response, 200)
         self.client.token = self.get_val(response, 'token')
 
+    @override_settings(PFX_OTP_IMAGE="https://example.org/fake.png")
     def test_otp_enable(self):
         self.client.login(username='jrr.tolkien', password='RIGHT PASSWORD')
 
@@ -901,7 +902,14 @@ class AuthAPITest(TestAssertMixin, TransactionTestCase):
         response = self.client.get('/api/auth/otp/setup-uri')
         self.assertRC(response, 200)
         self.assertJIn(response, 'setup_uri', "otpauth://totp/")
+        self.assertJIn(response, 'setup_uri', "Books%20Demo:jrr.tolkien")
+        self.assertJIn(response, 'setup_uri', "issuer=Books%20Demo")
+        self.assertJIn(
+            response, 'setup_uri',
+            "image=https%3A%2F%2Fexample.org%2Ffake.png")
         self.user1.refresh_from_db()
+        self.assertJIn(
+            response, 'setup_uri', f"secret={self.user1.otp_secret_token_tmp}")
         self.assertIsNone(self.user1.otp_secret_token)
         self.assertEqual(len(self.user1.otp_secret_token_tmp), 32)