zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-07-25 03:58:27 +02:00
Code Issues Projects Releases Packages Wiki Activity

while logging in with id/mid pick only users who have whitelisted ip

Browse source
This commit is contained in:
Georg Kahest 2017-11-13 17:14:26 +02:00
parent 1c6d47380f
commit 06049cd22f
2 changed files with 30 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

18
app/controllers/registrar/sessions_controller.rb
View file

@ -53,7 +53,7 @@ class Registrar
end
def id
@user = ApiUser.find_by_idc_data(request.env['SSL_CLIENT_S_DN'])
@user = ApiUser.find_by_idc_data_and_allowed(request.env['SSL_CLIENT_S_DN'],request.ip)
if @user
sign_in(@user, event: :authentication)
@ -87,7 +87,7 @@ class Registrar
return
end
@user = find_user_by_idc(response.user_id_code)
@user = find_user_by_idc_and_allowed(response.user_id_code)
if @user.persisted?
session[:user_id_code] = response.user_id_code
@ -112,7 +112,7 @@ class Registrar
when 'OUTSTANDING_TRANSACTION'
render json: { message: t(:check_your_phone_for_confirmation_code) }, status: :ok
when 'USER_AUTHENTICATED'
@user = find_user_by_idc(session[:user_id_code])
@user = find_user_by_idc_and_allowed(session[:user_id_code])
sign_in @user
flash[:notice] = t(:welcome)
flash.keep(:notice)
@ -149,6 +149,18 @@ class Registrar
ApiUser.find_by(identity_code: idc) || User.new
end
def find_user_by_idc_and_allowed(idc)
return User.new unless idc
possible_users = ApiUser.where(identity_code: idc) || User.new
for i in 0..possible_users.count
if possible_users[i].registrar.white_ips.registrar_area.include_ip?(request.ip)
break
end
end
possible_users[i]
end
def check_ip_restriction
ip_restriction = Authorization::RestrictedIP.new(request.ip)
allowed = ip_restriction.can_access_registrar_area_sign_in_page?