Add possibility to create users with provider (such as LDAP)

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel
2021-07-22 15:09:12 +02:00
parent 395675ce6a
commit fa8cae681f
6 changed files with 133 additions and 25 deletions

View File

@@ -6,6 +6,7 @@ defmodule Mix.Tasks.Mobilizon.Users.New do
import Mix.Tasks.Mobilizon.Common
import Mix.Tasks.Mobilizon.Actors.Utils
alias Mobilizon.Actors.Actor
alias Mobilizon.Service.Auth.Authenticator
alias Mobilizon.Users
alias Mobilizon.Users.User
@@ -21,22 +22,15 @@ defmodule Mix.Tasks.Mobilizon.Users.New do
moderator: :boolean,
admin: :boolean,
profile_username: :string,
profile_display_name: :string
profile_display_name: :string,
provider: :string
],
aliases: [
p: :password
]
)
moderator? = Keyword.get(options, :moderator, false)
admin? = Keyword.get(options, :admin, false)
role =
cond do
admin? -> :administrator
moderator? -> :moderator
true -> :user
end
start_mobilizon()
password =
Keyword.get(
@@ -45,23 +39,16 @@ defmodule Mix.Tasks.Mobilizon.Users.New do
:crypto.strong_rand_bytes(16) |> Base.encode64() |> binary_part(0, 16)
)
start_mobilizon()
provider = Keyword.get(options, :provider)
case Users.register(%{
email: email,
password: password,
role: role,
confirmed_at: DateTime.utc_now(),
confirmation_sent_at: nil,
confirmation_token: nil
}) do
case create_user(email, provider, password, options) do
{:ok, %User{} = user} ->
profile = maybe_create_profile(user, options)
shell_info("""
An user has been created with the following information:
- email: #{user.email}
- password: #{password}
- password: #{if is_nil(provider), do: password, else: "Your #{provider} password"}
- Role: #{user.role}
""")
@@ -91,6 +78,39 @@ defmodule Mix.Tasks.Mobilizon.Users.New do
shell_error("mobilizon.users.new requires an email as argument")
end
defp create_user(email, provider, password, options) do
role = get_role(options)
if is_nil(provider) do
create_database_user(email, password, role)
else
check_password_and_provider_options(options)
if provider != nil && provider != Authenticator.provider_name() do
shell_info("""
Warning: The #{provider} provider isn't currently configured as default authenticator.
""")
end
create_user_from_provider(email, provider, role)
end
end
defp create_database_user(email, password, role) do
Users.register(%{
email: email,
password: password,
role: role,
confirmed_at: DateTime.utc_now(),
confirmation_sent_at: nil,
confirmation_token: nil
})
end
defp create_user_from_provider(email, provider, role) do
Users.create_external(email, provider, %{role: role})
end
@spec maybe_create_profile(User.t(), Keyword.t()) :: Actor.t() | nil
defp maybe_create_profile(%User{} = user, options) do
profile_username = Keyword.get(options, :profile_username)
@@ -102,4 +122,26 @@ defmodule Mix.Tasks.Mobilizon.Users.New do
nil
end
end
@type role :: :administrator | :moderator | :user
@spec get_role(Keyword.t()) :: role()
defp get_role(options) do
moderator? = Keyword.get(options, :moderator, false)
admin? = Keyword.get(options, :admin, false)
cond do
admin? -> :administrator
moderator? -> :moderator
true -> :user
end
end
defp check_password_and_provider_options(options) do
if Keyword.get(options, :password) != nil && Keyword.get(options, :provider) != nil do
shell_error("""
The --password and --provider options can't be specified at the same time.
""")
end
end
end