204 lines
9.2 KiB
Python
204 lines
9.2 KiB
Python
# -*- coding: utf-8 -*-
|
|
import werkzeug
|
|
from odoo import http,tools
|
|
from odoo.http import request, Response
|
|
from odoo.addons.auth_signup.models.res_users import SignupError
|
|
from odoo.exceptions import UserError
|
|
import base64
|
|
from ..validator import validator
|
|
from ..http_helper import http_helper
|
|
import json
|
|
import logging
|
|
from odoo.tools.translate import _
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
|
|
|
|
SENSITIVE_FIELDS = ['password', 'password_crypt', 'new_password', 'create_uid', 'write_uid']
|
|
|
|
class AuthenticationController(http.Controller):
|
|
|
|
@http.route('/rest_api/validate',type='http', auth='none', csrf=False, cors='*',methods=['POST'])
|
|
def validate_token(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
|
|
result = validator.validate_token(token)
|
|
if result['code'] == 497 or result['code'] == 498:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
|
|
return http_helper.response(message="uploaded success",data=result['data'])
|
|
|
|
@http.route('/rest_api/refresh',type='http', auth='none', csrf=False, cors='*',methods=['POST'])
|
|
def refresh_token(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
|
|
result = validator.refresh_token(token)
|
|
if result['code'] == 497:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
|
|
return http_helper.response(message="uploaded success",data=result['data'])
|
|
|
|
@http.route('/rest_api/users/avatar',type='http', auth='none', csrf=False, cors='*',methods=['POST'])
|
|
def update_avatar(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
if not body.get('image'):
|
|
return http_helper.response(code=400,message=_("Image must not be empty"),success=False)
|
|
|
|
result = validator.verify_token(token)
|
|
if not result['status']:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
|
|
user = validator.verify(token)
|
|
if not user:
|
|
return http_helper.response(code=400,message=_("You are not allowed to perform this operation. please check with one of your team admins"),success=False)
|
|
|
|
try:
|
|
binary = base64.encodestring(body.get("image").read())
|
|
content = tools.image_resize_image(base64_source=binary, size=(200,200), encoding='base64')
|
|
if not content:
|
|
return http_helper.response(message=_("uploaded failed"), success=False)
|
|
|
|
user.write({
|
|
"image":content
|
|
})
|
|
except Exception as e:
|
|
_logger.error(str(e))
|
|
return http_helper.response_500()
|
|
|
|
return http_helper.response(message="uploaded success",data={"uid":user.id})
|
|
|
|
@http.route('/rest_api/users/password',type='http', auth='none', csrf=False, cors='*',methods=['PUT'])
|
|
def change_password(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
if not body.get('old_password') or not body.get('new_password'):
|
|
return http_helper.errcode(code=400, message='Password must not be empty')
|
|
|
|
result = validator.verify_token(token)
|
|
|
|
if not result['status']:
|
|
return http_helper.errcode(code=400, message='Invalid passwords')
|
|
|
|
user = validator.verify(token)
|
|
if not user:
|
|
return http_helper.errcode(code=400, message=_("You are not allowed to perform this operation. please check with one of your team admins"))
|
|
|
|
if not http_helper.is_authentic(user.login, body.get('old_password')):
|
|
return http_helper.errcode(code=400, message='Invalid passwords')
|
|
|
|
request.env.user.write({
|
|
'password':str(body.get('new_password')).strip()
|
|
})
|
|
request.session.logout()
|
|
|
|
|
|
return http_helper.response(message=_("password changed successfully"),data={'id':user.id})
|
|
|
|
# Reet password with email
|
|
@http.route(['/rest_api/reset'], type='http', auth='none', csrf=False, methods=['POST'])
|
|
def reset_email(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
if not body.get('email'):
|
|
return http_helper.response(code=400, message="Email must not be empty", success=False)
|
|
user = http.request.env['res.users'].sudo().search([('login', '=', kw.get('email'))])
|
|
if user:
|
|
user.sudo().action_reset_password()
|
|
return http_helper.response(message=_("A verification link has been sent to you email account"), data={})
|
|
else:
|
|
return http_helper.errcode(code=403, message="Password reset failed")
|
|
|
|
|
|
# res.lang
|
|
# change language
|
|
@http.route('/rest_api/get_language',type='http', auth='none', csrf=False ,methods=['GET'])
|
|
def get_language(self, **kw):
|
|
lang = http.request.env['res.lang'].sudo().search_read([('active', '=', True)],['name','code'],)
|
|
return http_helper.response(message=_("Languages"), data=lang ,success=False)
|
|
|
|
|
|
@http.route('/rest_api/change_language',type='http', auth='none', csrf=False, cors='*',methods=['PUT'])
|
|
def change_language(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
result = validator.verify_token(token)
|
|
|
|
if not result['status']:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
|
|
user = validator.verify(token)
|
|
if not user:
|
|
return http_helper.response(code=400, message=_("You are not allowed to perform this operation. please check with one of your team admins"), success=False)
|
|
if not body.get("lang"):
|
|
return http_helper.response(message=_("Language must not be empty"),success=False)
|
|
|
|
# if not body.get("phone"):
|
|
# return http_helper.response(message="Phone must not be empty",success=False)
|
|
try:
|
|
user.write({
|
|
'lang':body.get('lang'),
|
|
# 'phone':body.get('phone'),
|
|
})
|
|
except Exception as e:
|
|
_logger.error(str(e))
|
|
return http_helper.response_500()
|
|
return http_helper.response(message=_("Update success"),data={"uid":user.id})
|
|
|
|
@http.route('/rest_api/users', type='http', auth='none', csrf=False, cors='*', methods=['GET'])
|
|
def info(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
result = validator.verify_token(token)
|
|
if not result['status']:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
user = validator.verify(token)
|
|
if not user:
|
|
return http_helper.response(code=400, message=_("You are not allowed to perform this operation. please check with one of your team admins"), success=False)
|
|
|
|
return http_helper.response(data=user.to_dict(True))
|
|
|
|
@http.route('/rest_api/logout', type='http', auth='none', csrf=False, cors='*', methods=['POST'])
|
|
def logout(self, **kw):
|
|
http_method, body, headers, token = http_helper.parse_request()
|
|
result = validator.verify_token(token)
|
|
if not result['status']:
|
|
return http_helper.errcode(code=result['code'], message=result['message'])
|
|
|
|
http_helper.do_logout(token)
|
|
return http_helper.response()
|
|
|
|
@http.route('/rest_api/login', type='http', auth='none', csrf=False, cors='*', methods=['POST'])
|
|
def login_phone(self, **kw):
|
|
login=kw.get('login')
|
|
password=kw.get('password')
|
|
if not login :
|
|
return http_helper.response(code=400,message=_('username or email is missing'),success=False)
|
|
|
|
if not password:
|
|
return http_helper.response(code=400,message=_('Password is missing'),success=False)
|
|
if not kw.get('device_id'):
|
|
return http_helper.response(code=400,message=_('Device id is missing'),success=False)
|
|
|
|
#check fcm_token
|
|
if not kw.get('fcm_token'):
|
|
return http_helper.response(code=400,message=_('FCM Token is missing'),success=False)
|
|
|
|
user = request.env['res.users'].sudo().search([('login', '=',login)], limit=1)
|
|
|
|
if not user or not user.login:
|
|
return http_helper.response(code=400,message=_('User account with login {} not found').format(login),success=False)
|
|
|
|
uid = http_helper.is_authentic(login,password)
|
|
if not uid:
|
|
return http_helper.errcode(code=400, message=_('Unable to Sign In. invalid user password'))
|
|
token = validator.create_token(request.env.user)
|
|
dic = request.env.user.to_dict(True)
|
|
employee = http.request.env['hr.employee'].sudo().search([('user_id', '=', user.id)], limit=1)
|
|
if employee and kw.get('device_id') and not employee.device_id:
|
|
employee.sudo().write({'device_id':kw.get('device_id')})
|
|
|
|
#write fcm_token in employee
|
|
if employee and kw.get('fcm_token'):
|
|
employee.sudo().write({'fcm_token':kw.get('fcm_token')})
|
|
|
|
dic['token'] = token
|
|
dic['is_approve'] = 'group_division_manager' in dic.get('groups',[])
|
|
http_helper.cleanup();
|
|
return http_helper.response(data=dic, message=_("User log in successfully"))
|