1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
"""Script to register and mark a user account as sysadmin."""
import sys
import uuid
import getpass
from pathlib import Path
import click
from email_validator import validate_email, EmailNotValidError
from gn3.auth import db
from gn3.auth.authentication.users import hash_password
def fetch_email() -> str:
"""Prompt user for email."""
while True:
try:
user_input = input("Enter the administrator's email: ")
email = validate_email(user_input.strip(), check_deliverability=True)
return email["email"]
except EmailNotValidError as _enve:
print("You did not provide a valid email address. Try again...",
file=sys.stderr)
def fetch_password() -> str:
"""Prompt user for password."""
while True:
passwd = getpass.getpass(prompt="Enter password: ").strip()
passwd2 = getpass.getpass(prompt="Confirm password: ").strip()
if passwd != "" and passwd == passwd2:
return passwd
if passwd == "":
print("Empty password not accepted", file=sys.stderr)
continue
if passwd != passwd2:
print("Passwords *MUST* match", file=sys.stderr)
continue
def fetch_name() -> str:
"""Prompt user for name"""
while True:
name = input("Enter the user's name: ").strip()
if name == "":
print("Invalid name.")
continue
return name
def save_admin(conn: db.DbConnection, name: str, email: str, passwd: str):
"""Save the details to the database and assign the new user as admin."""
admin_id = uuid.uuid4()
admin = {
"user_id": str(admin_id),
"email": email,
"name": name,
"hash": hash_password(passwd)
}
with db.cursor(conn) as cursor:
cursor.execute("INSERT INTO users VALUES (:user_id, :email, :name)",
admin)
cursor.execute("INSERT INTO user_credentials VALUES (:user_id, :hash)",
admin)
cursor.execute(
"SELECT * FROM roles WHERE role_name='system-administrator'")
admin_role = cursor.fetchone()
cursor.execute("INSERT INTO user_roles VALUES (:user_id, :role_id)",
{**admin, "role_id": admin_role["role_id"]})
return 0
def register_admin(authdbpath: Path):
"""Register a user as a system admin."""
assert authdbpath.exists(), "Could not find database file."
with db.connection(str(authdbpath)) as conn:
return save_admin(conn, fetch_name(), fetch_email(), fetch_password())
if __name__ == "__main__":
@click.command()
@click.argument("authdbpath")
def run(authdbpath):
"""Entry-point for when script is run directly"""
return register_admin(Path(authdbpath).absolute())
run()# pylint: disable=[no-value-for-parameter]
|
