1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
# Dovecot authentication plugin for Radicale.
# Copyright (C) 2017-2019 Arvedui <arvedui@posteo.de>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
from radicale.auth import BaseAuth
from radicale_dovecot_auth.dovecot_auth import DovecotAuth
from radicale_dovecot_auth.__about__ import *
from contextlib import suppress
SERVICE = "radicale"
class Auth(BaseAuth):
"""Authenticate user with dovecot auth service.
Configuration:
[auth]
type = radicale_dovecot_auth
auth_socket = path_to_socket
# or tcp based
host = example.com
port = 10000
"""
def get_connection(self):
kwargs = {}
with suppress(KeyError):
kwargs['socket_path'] = self.configuration.get('auth', 'auth_socket')
kwargs['host'] = self.configuration.get('auth', 'auth_host')
kwargs['port'] = self.configuration.get('auth', 'auth_port')
if not ('socket_path' in kwargs or {'host', 'port'} <= set(kwargs)):
raise RuntimeError('auth_socket path or auth_host and auth_port must be set')
return DovecotAuth(SERVICE, **kwargs)
def is_authenticated(self, user, password):
return self.is_authenticated2(None, user, password)
def is_authenticated2(self, login, user, password):
conn = self.get_connection()
return conn.authenticate(user, password)
def login(self, login, password):
return login if self.is_authenticated(login, password) else ""
|
