You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
55 lines
1.4 KiB
55 lines
1.4 KiB
# -*- coding: utf-8 -*-
|
|
# Copyright 2016-2017 LasLabs Inc.
|
|
# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl.html).
|
|
|
|
import logging
|
|
from openerp import _, api, fields, models
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
try:
|
|
import pyotp
|
|
except ImportError:
|
|
_logger.debug(
|
|
'Could not import PyOTP. Please make sure this library is available in'
|
|
' your environment.'
|
|
)
|
|
|
|
|
|
class ResUsersAuthenticator(models.Model):
|
|
_name = 'res.users.authenticator'
|
|
_description = 'MFA App/Device'
|
|
_sql_constraints = [(
|
|
'user_id_name_uniq',
|
|
'UNIQUE(user_id, name)',
|
|
_(
|
|
'There is already an MFA app/device with this name associated with'
|
|
' your account. Please pick a new name and try again.'
|
|
),
|
|
)]
|
|
|
|
name = fields.Char(
|
|
required=True,
|
|
readonly=True,
|
|
)
|
|
secret_key = fields.Char(
|
|
required=True,
|
|
readonly=True,
|
|
)
|
|
user_id = fields.Many2one(
|
|
comodel_name='res.users',
|
|
ondelete='cascade',
|
|
)
|
|
|
|
@api.multi
|
|
@api.constrains('user_id')
|
|
def _check_has_user(self):
|
|
self.filtered(lambda r: not r.user_id).unlink()
|
|
|
|
@api.multi
|
|
def validate_conf_code(self, confirmation_code):
|
|
for record in self:
|
|
totp = pyotp.TOTP(record.secret_key)
|
|
if totp.verify(confirmation_code):
|
|
return True
|
|
|
|
return False
|