dmart 1.4.3__py3-none-any.whl → 1.4.5__py3-none-any.whl

alembic/versions/eb5f1ec65156_adding_user_locked_to_device.py

@@ -23,7 +23,7 @@ depends_on: Union[str, Sequence[str], None] = None
 def upgrade() -> None:
     # ### commands auto generated by Alembic - please adjust! ###
     with op.batch_alter_table('users', schema=None) as batch_op:
-        batch_op.add_column(sa.Column('locked_to_device', sa.Boolean(),  nullable=False))
+        batch_op.add_column(sa.Column('locked_to_device', sa.Boolean(), nullable=False, server_default='false'))
 
     # ### end Alembic commands ###
 

api/managed/utils.py

@@ -3,6 +3,8 @@ from io import BytesIO
 from typing import Any
 
 from fastapi import status
+from models.api import Exception as API_Exception, Error as API_Error
+from utils import password_hashing
 from utils.generate_email import generate_email_from_template, generate_subject
 from data_adapters.file.custom_validations import validate_csv_with_schema, validate_jsonl_with_schema
 from utils.internal_error_code import InternalErrorCode
@@ -526,6 +528,26 @@ async def serve_request_update(request, owner_shortname: str):
                 else:
                     new_resource_payload_data = None
             else:
+                if 'password' in record.attributes:
+                    if 'old_password' not in record.attributes:
+                        raise API_Exception(
+                            status.HTTP_403_FORBIDDEN,
+                            API_Error(
+                                type="auth",
+                                code=InternalErrorCode.PASSWORD_RESET_ERROR,
+                                message="missing old_password!",
+                            ),
+                        )
+                    else:
+                        if not password_hashing.verify_password(record.attributes.get('old_password'), old_resource_obj.password):
+                            raise API_Exception(
+                                status.HTTP_403_FORBIDDEN,
+                                API_Error(
+                                    type="auth",
+                                    code=InternalErrorCode.PASSWORD_RESET_ERROR,
+                                    message="Wrong password have been provided!",
+                                ),
+                            )
                 new_resource_payload_data = resource_obj.update_from_record(
                     record=record,
                     old_body=old_resource_payload_body,
@@ -600,7 +622,12 @@ async def serve_request_update(request, owner_shortname: str):
 
             if (
                 isinstance(resource_obj, core.User) and
-                record.attributes.get("is_active", None) is not None
+                (
+                    record.attributes.get("is_active", None) is not None
+                    or (
+                        settings.logout_on_pwd_change and record.attributes.get("password", None) is not None
+                    )
+                )
             ):
                 if not record.attributes.get("is_active"):
                     await db.remove_user_session(record.shortname)

api/user/router.py

@@ -673,7 +673,16 @@ async def update_profile(
 
     old_version_flattened = flatten_dict(user.model_dump())
 
-    if profile_user.password and "old_password" in profile.attributes:
+    if profile_user.password:
+        if "old_password" not in profile.attributes:
+            raise Exception(
+                status.HTTP_403_FORBIDDEN,
+                Error(
+                    type="auth",
+                    code=InternalErrorCode.PASSWORD_RESET_ERROR,
+                    message="Wrong password have been provided!",
+                ),
+            )
         if not password_hashing.verify_password(
             profile.attributes["old_password"], user.password or ""
         ):
@@ -766,6 +775,9 @@ async def update_profile(
         retrieve_lock_status=profile.retrieve_lock_status,
     )
 
+    if settings.logout_on_pwd_change and profile_user.password:
+        await db.remove_user_session(shortname)
+
     await plugin_manager.after_action(
         core.Event(
             space_name=MANAGEMENT_SPACE,