Python-Projekte/planner/webservice/auth.py

from dataclasses import dataclass, field, asdict
from ldap3 import Server, Connection, ALL
import json
from pathlib import Path
import csv
from typing import Optional


@dataclass
class User:
    lastname: str
    firstname: str
    username: str
    password: str = field(repr=False)
    title: str
    admin: bool
    write: bool
    department: list
    costcenter: list


class Auth:
    def __init__(self) -> None:
        with open(Path(__file__).parent.parent.joinpath('config', 'users.csv'), 'r') as frh:
            csv_reader = csv.DictReader(frh, delimiter=';')
            self.users = dict([(row['username'].lower(), self.parse_users_csv(row)) for row in csv_reader])

    def parse_users_csv(self, row: dict) -> User:
        row['admin'] = (row['admin'] == 'True')
        row['write'] = (row['write'] == 'True')
        row['department'] = json.loads(row['department'])
        row['costcenter'] = json.loads(row['costcenter'])
        return User(**row)

    def get_user(self, username, password) -> Optional[dict]:
        username = username.lower()
        if username not in self.users:
            return None

        if self.users[username].password != password and not self.connect_ldap(username, password):
            return None

        res = asdict(self.users[username])
        del(res['password'])
        return res

    def connect_ldap(self, username, password) -> bool:
        server = Server('ahr.local:389', get_info=ALL, use_ssl=False, connect_timeout=5)
        user = username.lower() + '@ahr.local'
        conn = Connection(server, user=user, password=password)
        try:
            return bool(conn.bind())
        except Exception:
            return False


if __name__ == '__main__':
    print(Auth().get_user('TKP', 'G9zHjA__'))