django-restit 4.2.64__py3-none-any.whl → 4.2.66__py3-none-any.whl

account/models/group.py

@@ -200,6 +200,12 @@ class Group(models.Model, RestModel, MetaDataModel):
             self.auditLog(note, "group_edit", level=21)
             self.logEvent("group_edit", component="account.Member", component_id=request.member.id, note=note)
 
+    def set_name(self, value):
+        if value is not None:
+            self.name = value.strip()
+        else:
+            self.name = None
+    
     def set_child_of(self, value):
         # this is a helper to add this group to another group
         parent = Group.objects.filter(pk=value).last()

account/models/member.py

@@ -284,13 +284,12 @@ class Member(User, RestModel, MetaDataModel):
         # can force login
         if not request:
             request = rh.getActiveRequest()
-        if password:
-            if not self.checkPassword(password):
-                # invalid password
-                self.recordFailedLogin(request)
-                return False
-            else:
-                self.recordSuccessLogin(request)
+        if not self.checkPassword(password):
+            # invalid password
+            self.recordFailedLogin(request)
+            return False
+        else:
+            self.recordSuccessLogin(request)
         if use_jwt:
             self.recordSuccessLogin(request)
             self.locateByIP(request.ip)
@@ -300,6 +299,17 @@ class Member(User, RestModel, MetaDataModel):
         self.locateByIP(request.ip)
         return True
 
+    def loginNoPassword(self, request=None):
+        if not self.is_active or self.is_blocked:
+            return False
+        # can force login
+        if not request:
+            request = rh.getActiveRequest()
+        self.user_ptr.backend = 'django.contrib.auth.backends.ModelBackend'
+        auth_login(request, self.user_ptr)
+        self.locateByIP(request.ip)
+        return True
+
     def canLogin(self, request=None, throw_exception=True):
         if not self.is_active:
             self.log("login_blocked", F"account is not active {self.username}", request, method="login", level=31)

account/passkeys/core.py

@@ -115,7 +115,7 @@ def authComplete(request, fido2_state, rp_id):
         response=credential)
     request.member = upk.member
     request.member.canLogin(request)  # throws exception if cannot login
-    request.member.login(request=request)
+    request.member.loginNoPassword(request=request)
     request.member.log(
         "passkey_login", "passkey login succesful", 
         request, method="login", level=7)

account/rpc/auth.py

@@ -37,6 +37,9 @@ def jwt_login(request):
     member = getMemberByUsername(username)
     if not member:
         return rv.restPermissionDenied(request, error=f"Password and/or Username is incorrect for {username}", error_code=422)
+    auth_code = request.DATA.get(["auth_code", "code", "invite_token"], None)
+    if username and auth_code:
+        return member_login_uname_code(request, username, auth_code)
     password = request.DATA.get('password', None)
     member.canLogin(request)  # throws exception if cannot login
     if member.requires_totp or member.has_totp:
@@ -205,7 +208,6 @@ def member_login_uname_code(request, username, auth_code):
     member.log("code_login", "code login", request, method="login", level=8)
     if request.DATA.get("auth_method") == "basic":
         return rv.restGet(request, dict(id=member.pk, session_key=request.session.session_key))
-
     return on_complete_jwt(request, member)
 
 

{django_restit-4.2.64.dist-info → django_restit-4.2.66.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: django-restit
-Version: 4.2.64
+Version: 4.2.66
 Summary: A Rest Framework for DJANGO
 License: MIT
 Author: Ian Starnes

{django_restit-4.2.64.dist-info → django_restit-4.2.66.dist-info}/RECORD

@@ -26,9 +26,9 @@ account/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuF
 account/models/__init__.py,sha256=cV_lMnT2vL_mjiYtT4hlcIHo52ocFbGSNVkOIHHLXZY,385
 account/models/device.py,sha256=MVWZEYrX_4zJaqmJS_feFplfVXYyqBJ-0_Fm3B1SVg8,5226
 account/models/feeds.py,sha256=vI7fG4ASY1M0Zjke24RdnfDcuWeATl_yR_25jPmT64g,2011
-account/models/group.py,sha256=4fk-RavG1wNVzfuXMaD2XDiX2DhK1hgL0-OA54Uym18,21576
+account/models/group.py,sha256=my4KT71BlS64d-Ozz9n6d57nH429kFpVdJQZZTlMqhs,21723
 account/models/legacy.py,sha256=zYdtv4LC0ooxPVqWM-uToPwV-lYWQLorSE6p6yn1xDw,2720
-account/models/member.py,sha256=CxxhNnFCQPEw7MGc5147J8eandYqUj6HhhQ_YRyFQX4,50397
+account/models/member.py,sha256=uantXINX1lHcJPnQJ6nSddgxIvpvYgQtl0qKqWApzNc,50742
 account/models/membership.py,sha256=GJ6bSFLfU1CN9466k0XjSwn1sQIEwFeC8-oUYd2MrSs,9217
 account/models/notify.py,sha256=YnZujSHJHY7B09e6FIyZIEJRWLPYk1Sk1e92tFzB1IA,12078
 account/models/passkeys.py,sha256=TJxITUi4DT4_1tW2K7ZlOcRjJuMVl2NtKz7pKQU8-Tw,1516
@@ -37,10 +37,10 @@ account/models/settings.py,sha256=gOyRWBVd3BQpjfj_hJPtqX3H46ztyRAFxBrPbv11lQg,21
 account/oauth/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 account/oauth/google.py,sha256=q5M6Qhpfp9QslKRVYFZBvtG6kgXV6vYMrR5fp6Xdb9I,2078
 account/passkeys/__init__.py,sha256=FwXYJXwSJXfkLojGBcVpF1dFpgFhzDdd9N_3naYQ0cc,89
-account/passkeys/core.py,sha256=X8y1TCXupZZV-GF10nuPVmdpN0qYuzKe03RnaDlepP4,4116
+account/passkeys/core.py,sha256=xj-vXjSrfWDvc5MYtEmXzwaMkNHl-cXrQKVrN9soRCg,4126
 account/periodic.py,sha256=-u0n-7QTJgDOkasGhBAPwHAwjpqWGA-MZLEFkVTqCGU,874
 account/rpc/__init__.py,sha256=SGF0M_-H0dKh3b1apSX29BotNWAvITYccGQVC0MIjL8,336
-account/rpc/auth.py,sha256=eywdJSjsi_Ds2pM4wnltPJUfjIQqf6r6e99eKS7q3BA,15593
+account/rpc/auth.py,sha256=Vrg8j_bb5jeIahIMlEm86LTKBi-pCKBagpTC4EcN8i0,15770
 account/rpc/device.py,sha256=fbbZFp3cUdhVXvD7gVFOqFWj4hKS3bjZKD_aF5fQxd8,2852
 account/rpc/group.py,sha256=FD9GymgPY68y-gtDLsZxYVdwQJeLGpqcP4hjcDUh-GM,4022
 account/rpc/member.py,sha256=PU-Uz5KUI_BZFy-F-taDqAfnt_AwONYXSzUvfm7eyTw,1264
@@ -368,7 +368,7 @@ pushit/utils.py,sha256=IeTCGa-164nmB1jIsK1lu1O1QzUhS3BKfuXHGjCW-ck,2121
 rest/.gitignore,sha256=TbEvWRMnAiajCTOdhiNrd9eeCAaIjRp9PRjE_VkMM5g,118
 rest/README.md,sha256=V3ETc-cJu8PZIbKr9xSe_pA4JEUpC8Dhw4bQeVCDJPw,5460
 rest/RemoteEvents.py,sha256=nL46U7AuxIrlw2JunphR1tsXyqi-ep_gD9CYGpYbNgE,72
-rest/__init__.py,sha256=p0-hoQXw9I4GjJGpnAZji3gbFzmQxNAIsg1J5OP5Bm8,121
+rest/__init__.py,sha256=yUGGhaiZHnz8BlV-outvcNP7abr5Samxuo6VesvF84Y,121
 rest/arc4.py,sha256=y644IbF1ec--e4cUJ3KEYsewTCITK0gmlwa5mJruFC0,1967
 rest/cache.py,sha256=1Qg0rkaCJCaVP0-l5hZg2CIblTdeBSlj_0fP6vlKUpU,83
 rest/crypto/__init__.py,sha256=Tl0U11rgj1eBYqd6OXJ2_XSdNLumW_JkBZnaJqI6Ldw,72
@@ -417,7 +417,7 @@ rest/serializers/legacy.py,sha256=a5O-x2PqMKX8wYWrhCmdcivVbkPnru7UdyLbrhCaAdY,61
 rest/serializers/localizers.py,sha256=BegaCvTQVaruhWzvGHq3zWeVFmtBChatquRqAtkke10,410
 rest/serializers/model.py,sha256=08HJeqpmytjxvyiJFfsSRRG0uH-iK2mXCw6w0oMfWrI,8598
 rest/serializers/profiler.py,sha256=OxOimhEyvCAuzUBC9Q1dz2xaakjAqmSnekMATsjduXM,997
-rest/serializers/response.py,sha256=MvfV-CXIAUjXCN3hcT2z0IzKXLrwYudfq00FyISrYsU,7149
+rest/serializers/response.py,sha256=hl5ruTWKML352Nob75uc3YGTplYmBu7OMjWeEWVEs9Y,7234
 rest/serializers/util.py,sha256=-In89fpuVTd6_Ul8nwEUt3DjVKdpeoEyAxudlyB8K6Y,2734
 rest/settings_helper.py,sha256=_Vn9nmL5_GPss9zIsXzacbTQkn99NbO42CqvOZC3ge4,1532
 rest/ssl_check.py,sha256=kH4Pk4upUEwKTAnBLR0DIKezNJHjkW3g2TdQAObEgW4,1419
@@ -501,7 +501,7 @@ ws4redis/servers/uwsgi.py,sha256=VyhoCI1DnVFqBiJYHoxqn5Idlf6uJPHvfBKgkjs34mo,172
 ws4redis/settings.py,sha256=K0yBiLUuY81iDM4Yr-k8hbvjn5VVHu5zQhmMK8Dtz0s,1536
 ws4redis/utf8validator.py,sha256=S0OlfjeGRP75aO6CzZsF4oTjRQAgR17OWE9rgZdMBZA,5122
 ws4redis/websocket.py,sha256=R0TUyPsoVRD7Y_oU7w2I6NL4fPwiz5Vl94-fUkZgLHA,14848
-django_restit-4.2.64.dist-info/LICENSE.md,sha256=VHN4hhEeVOoFjtG-5fVv4jesA4SWi0Z-KgOzzN6a1ps,1068
-django_restit-4.2.64.dist-info/METADATA,sha256=L_HZYV8PSsU8TdNKCTl2M7ZJ2U_JJEM9ImYZ99X6Ams,7594
-django_restit-4.2.64.dist-info/WHEEL,sha256=Zb28QaM1gQi8f4VCBhsUklF61CTlNYfs9YAZn-TOGFk,88
-django_restit-4.2.64.dist-info/RECORD,,
+django_restit-4.2.66.dist-info/LICENSE.md,sha256=VHN4hhEeVOoFjtG-5fVv4jesA4SWi0Z-KgOzzN6a1ps,1068
+django_restit-4.2.66.dist-info/METADATA,sha256=5QzuN2gDiDACp64YSSsI-0uCKbE1VuJev0fw64U1vrQ,7594
+django_restit-4.2.66.dist-info/WHEEL,sha256=Zb28QaM1gQi8f4VCBhsUklF61CTlNYfs9YAZn-TOGFk,88
+django_restit-4.2.66.dist-info/RECORD,,

rest/__init__.py

@@ -1,4 +1,4 @@
 from .uberdict import UberDict  # noqa: F401
 from .settings_helper import settings  # noqa: F401
 
-__version__ = "4.2.64"
+__version__ = "4.2.66"

rest/serializers/response.py

@@ -12,6 +12,7 @@ from . import json as js
 from . import csv
 from . import excel
 # from . import profiler
+STATUS_ON_PERM_DENIED = settings.get("STATUS_ON_PERM_DENIED", 403)
 
 
 def restStatus(request, status, data={}, **kwargs):
@@ -94,7 +95,7 @@ def restResponseLog(request, resp):
             PersistentLog.log(resp, 0, request, "rest", action="response")
 
 
-def restPermissionDenied(request, error="permission denied", error_code=403, status=403,
+def restPermissionDenied(request, error="permission denied", error_code=403, status=STATUS_ON_PERM_DENIED,
                          component=None, component_id=None):
     # from rest import helpers as rh
     # rh.log_error(error)