mirror of
https://github.com/quay/quay.git
synced 2026-01-26 06:21:37 +03:00
38be6d05d0
* Convert all Python2 to Python3 syntax. * Removes oauth2lib dependency * Replace mockredis with fakeredis * byte/str conversions * Removes nonexisting __nonzero__ in Python3 * Python3 Dockerfile and related * [PROJQUAY-98] Replace resumablehashlib with rehash * PROJQUAY-123 - replace gpgme with python3-gpg * [PROJQUAY-135] Fix unhashable class error * Update external dependencies for Python 3 - Move github.com/app-registry/appr to github.com/quay/appr - github.com/coderanger/supervisor-stdout - github.com/DevTable/container-cloud-config - Update to latest mockldap with changes applied from coreos/mockldap - Update dependencies in requirements.txt and requirements-dev.txt * Default FLOAT_REPR function to str in json encoder and removes keyword assignment True, False, and str were not keywords in Python2... * [PROJQUAY-165] Replace package `bencode` with `bencode.py` - Bencode is not compatible with Python 3.x and is no longer maintained. Bencode.py appears to be a drop-in replacement/fork that is compatible with Python 3. * Make sure monkey.patch is called before anything else ( * Removes anunidecode dependency and replaces it with text_unidecode * Base64 encode/decode pickle dumps/loads when storing value in DB Base64 encodes/decodes the serialized values when storing them in the DB. Also make sure to return a Python3 string instead of a Bytes when coercing for db, otherwise, Postgres' TEXT field will convert it into a hex representation when storing the value. * Implement __hash__ on Digest class In Python 3, if a class defines __eq__() but not __hash__(), its instances will not be usable as items in hashable collections (e.g sets). * Remove basestring check * Fix expected message in credentials tests * Fix usage of Cryptography.Fernet for Python3 (#219) - Specifically, this addresses the issue where Byte<->String conversions weren't being applied correctly. * Fix utils - tar+stream layer format utils - filelike util * Fix storage tests * Fix endpoint tests * Fix workers tests * Fix docker's empty layer bytes * Fix registry tests * Appr * Enable CI for Python 3.6 * Skip buildman tests Skip buildman tests while it's being rewritten to allow ci to pass. * Install swig for CI * Update expected exception type in redis validation test * Fix gpg signing calls Fix gpg calls for updated gpg wrapper, and add signing tests. * Convert / to // for Python3 integer division * WIP: Update buildman to use asyncio instead of trollius. This dependency is considered deprecated/abandoned and was only used as an implementation/backport of asyncio on Python 2.x This is a work in progress, and is included in the PR just to get the rest of the tests passing. The builder is actually being rewritten. * Target Python 3.8 * Removes unused files - Removes unused files that were added accidentally while rebasing - Small fixes/cleanup - TODO tasks comments * Add TODO to verify rehash backward compat with resumablehashlib * Revert "[PROJQUAY-135] Fix unhashable class error" and implements __hash__ instead. This reverts commit 735e38e3c1d072bf50ea864bc7e119a55d3a8976. Instead, defines __hash__ for encryped fields class, using the parent field's implementation. * Remove some unused files ad imports Co-authored-by: Kenny Lee Sin Cheong <kenny.lee@redhat.com> Co-authored-by: Tom McKay <thomasmckay@redhat.com>
73 lines
2.0 KiB
Python
73 lines
2.0 KiB
Python
import logging
|
|
|
|
from data import model
|
|
from oauth.loginmanager import OAuthLoginManager
|
|
from oauth.oidc import PublicKeyLoadException
|
|
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class AppTokenInternalAuth(object):
|
|
"""
|
|
Forces all internal credential login to go through an app token, by disabling all other access.
|
|
"""
|
|
|
|
@property
|
|
def supports_fresh_login(self):
|
|
# Since there is no password.
|
|
return False
|
|
|
|
@property
|
|
def federated_service(self):
|
|
return None
|
|
|
|
@property
|
|
def requires_distinct_cli_password(self):
|
|
# Since there is no supported "password".
|
|
return False
|
|
|
|
def has_password_set(self, username):
|
|
# Since there is no supported "password".
|
|
return False
|
|
|
|
@property
|
|
def supports_encrypted_credentials(self):
|
|
# Since there is no supported "password".
|
|
return False
|
|
|
|
def verify_credentials(self, username_or_email, id_token):
|
|
return (None, "An application specific token is required to login")
|
|
|
|
def verify_and_link_user(self, username_or_email, password):
|
|
return self.verify_credentials(username_or_email, password)
|
|
|
|
def confirm_existing_user(self, username, password):
|
|
return self.verify_credentials(username, password)
|
|
|
|
def link_user(self, username_or_email):
|
|
return (None, "Unsupported for this authentication system")
|
|
|
|
def get_and_link_federated_user_info(self, user_info):
|
|
return (None, "Unsupported for this authentication system")
|
|
|
|
def query_users(self, query, limit):
|
|
return (None, "", "")
|
|
|
|
def check_group_lookup_args(self, group_lookup_args):
|
|
return (False, "Not supported")
|
|
|
|
def iterate_group_members(self, group_lookup_args, page_size=None, disable_pagination=False):
|
|
return (None, "Not supported")
|
|
|
|
def service_metadata(self):
|
|
return {}
|
|
|
|
def ping(self):
|
|
"""
|
|
Always assumed to be working.
|
|
|
|
If the DB is broken, other checks will handle it.
|
|
"""
|
|
return (True, None)
|