{"id":624,"date":"2016-08-01T08:06:15","date_gmt":"2016-08-01T08:06:15","guid":{"rendered":"https:\/\/marvelliu.space\/?p=624"},"modified":"2025-01-17T05:33:01","modified_gmt":"2025-01-17T05:33:01","slug":"%e5%a6%82%e4%bd%95%e5%81%9a%e4%b8%8eopenstack%e5%af%b9%e6%8e%a5%e7%9a%84%e7%94%a8%e6%88%b7%e9%aa%8c%e8%af%81","status":"publish","type":"post","link":"https:\/\/marvelliu.space\/?p=624","title":{"rendered":"\u5982\u4f55\u505a\u4e0eopenstack\u5bf9\u63a5\u7684\u7528\u6237\u9a8c\u8bc1"},"content":{"rendered":"\n

\u53ef\u4ee5\u5728openstack horizon\u4e2d\u52a0\u4e00\u4e2a\u6587\u4ef6\u5939Security\uff0c\u91cc\u9762\u6309\u7167horizon\u7684\u8981\u6c42\u653e\u7f6e\u597d\u5b50\u76ee\u5f55\u548c\u6587\u4ef6\u3002<\/p>\n\n\n\n

<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
<\/span>\nnsfocus<\/span>@controller<\/span>:<\/span>\/<\/span>usr<\/span>\/<\/span>src<\/span>\/<\/span>horizon$<\/span> <\/span>ls<\/span><\/span>\nbuild<\/span>  <\/span>HACKING<\/span>.<\/span>rst<\/span>  <\/span>horizon<\/span>.<\/span>egg<\/span>-<\/span>info<\/span>  <\/span>Makefile<\/span>   <\/span>MANIFEST<\/span>.<\/span>in<\/span>            <\/span>openstack_dashboard<\/span>  <\/span>requirements<\/span>.<\/span>txt<\/span>  <\/span>security<\/span>   <\/span>setup<\/span>.<\/span>py<\/span>  <\/span>test<\/span>-<\/span>requirements<\/span>.<\/span>txt<\/span>  <\/span>tox<\/span>.<\/span>ini<\/span><\/span>\ndoc<\/span>    <\/span>horizon<\/span>      <\/span>LICENSE<\/span>           <\/span>manage<\/span>.<\/span>py<\/span>  <\/span>openstack<\/span>-<\/span>common<\/span>.<\/span>conf<\/span>  <\/span>README<\/span>.<\/span>rst<\/span>           <\/span>run_tests<\/span>.<\/span>sh<\/span>      <\/span>setup<\/span>.<\/span>cfg<\/span>  <\/span>static<\/span>    <\/span>tools<\/span><\/span>\nnsfocus<\/span>@controller<\/span>:<\/span>\/<\/span>usr<\/span>\/<\/span>src<\/span>\/<\/span>horizon$<\/span> <\/span>cd<\/span> <\/span>security<\/span>\/<\/span><\/span>\nnsfocus<\/span>@controller<\/span>:<\/span>\/<\/span>usr<\/span>\/<\/span>src<\/span>\/<\/span>horizon<\/span>\/<\/span>security$<\/span> <\/span>ls<\/span><\/span>\nads<\/span>     <\/span>appmanager<\/span>  <\/span>byod<\/span>          <\/span>dashboard<\/span>.<\/span>pyc<\/span>  <\/span>flowviewer<\/span>  <\/span>__init__<\/span>.<\/span>py<\/span>   <\/span>knowledge<\/span>       <\/span>misc<\/span>       <\/span>models<\/span>.<\/span>pyc<\/span>    <\/span>static<\/span>     <\/span>waf<\/span><\/span>\nadsapp<\/span>  <\/span>assetcheck<\/span>  <\/span>dashboard<\/span>.<\/span>py<\/span>  <\/span>devicemanager<\/span>  <\/span>ids<\/span>         <\/span>__init__<\/span>.<\/span>pyc<\/span>  <\/span>liveprotection<\/span>  <\/span>models<\/span>.<\/span>py<\/span>  <\/span>moduleviewer<\/span>  <\/span>templates<\/span>  <\/span>webprotection<\/span><\/span>\nnsfocus<\/span>@controller<\/span>:<\/span>\/<\/span>usr<\/span>\/<\/span>src<\/span>\/<\/span>horizon<\/span>\/<\/span>security$<\/span> <\/span>vi<\/span> <\/span>liveprotection<\/span>\/<\/span><\/span>\n__init__<\/span>.<\/span>py<\/span>   <\/span>__init__<\/span>.<\/span>pyc<\/span>  <\/span>panel<\/span>.<\/span>py<\/span>      <\/span>panel<\/span>.<\/span>pyc<\/span>     <\/span>templates<\/span>\/<\/span>    <\/span>urls<\/span>.<\/span>py<\/span>       <\/span>urls<\/span>.<\/span>pyc<\/span>      <\/span>views<\/span>.<\/span>py<\/span>      <\/span>views<\/span>.<\/span>pyc<\/span><\/span>\n<\/span><\/code><\/pre><\/div>\n\n\n\n
\u67e5\u770bliveprotection\/view.py<\/pre>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
from<\/span> <\/span>django<\/span>.<\/span>core<\/span>.<\/span>urlresolvers<\/span> <\/span>import<\/span> <\/span>reverse_lazy<\/span> # <\/span>noqa<\/span> <\/span><\/span>\nfrom<\/span> <\/span>django<\/span>.<\/span>utils<\/span>.<\/span>translation<\/span> <\/span>import<\/span> <\/span>ugettext_lazy<\/span> <\/span>as<\/span> <\/span>_<\/span> # <\/span>noqa<\/span> <\/span><\/span>\nfrom<\/span> <\/span>horizon<\/span> <\/span>import<\/span> <\/span>tables<\/span> <\/span><\/span>\nfrom<\/span> <\/span>horizon<\/span> <\/span>import<\/span> <\/span>exceptions<\/span> <\/span><\/span>\nfrom<\/span> <\/span>openstack_dashboard<\/span> <\/span>import<\/span> <\/span>api<\/span> <\/span><\/span>\nfrom<\/span> <\/span>django<\/span>.<\/span>http<\/span> <\/span>import<\/span> <\/span>HttpResponse<\/span> <\/span><\/span>\nfrom<\/span> <\/span>django<\/span>.<\/span>template<\/span> <\/span>import<\/span> <\/span>RequestContext<\/span>,<\/span> <\/span>loader<\/span> <\/span><\/span>\nfrom<\/span> <\/span>horizon<\/span> <\/span>import<\/span> <\/span>forms<\/span> <\/span>def<\/span> <\/span>index<\/span>(<\/span>request<\/span>): <\/span>template_name<\/span> = <\/span>'<\/span>security\/liveprotection\/index.html<\/span>'<\/span> <\/span><\/span>\ntemplate<\/span> = <\/span>loader<\/span>.<\/span>get_template<\/span>(<\/span>template_name<\/span>) <\/span>context<\/span> = <\/span>RequestContext<\/span>(<\/span>request<\/span>,<\/span> <\/span>{<\/span> '<\/span>target<\/span>': '<\/span>http<\/span>:<\/span>\/\/liveprotection.research.intra.nsfocus.com:8000\/?username=%s&token=%s'%(request.user,request.user.token.id), }) <\/span><\/span>\nreturn<\/span> <\/span>HttpResponse<\/span>(<\/span>template<\/span>.<\/span>render<\/span>(<\/span>context<\/span>))<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u5728liveprotection\u9875\u9762\u4e2d\uff0c\u5904\u7406\u51fd\u6570\u4e3a\uff1a<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
def<\/span> <\/span>index<\/span>(<\/span>request<\/span>):<\/span><\/span>\n    <\/span>print<\/span> <\/span>request<\/span>.<\/span>GET<\/span><\/span>\n    <\/span>error<\/span> <\/span>=<\/span> <\/span>None<\/span><\/span>\n    <\/span>username<\/span> <\/span>=<\/span> <\/span>auth<\/span>.<\/span>verify<\/span>(<\/span>request<\/span>)<\/span><\/span>\n    <\/span>if<\/span> <\/span>username<\/span> <\/span>is<\/span> None<\/span>:<\/span><\/span>\n        <\/span>error<\/span> <\/span>=<\/span> <\/span>"<\/span>You are not logined in<\/span>"<\/span><\/span>\n    <\/span>return<\/span> <\/span>render_to_response<\/span>(<\/span>"<\/span>routers.html<\/span>"<\/span>)<\/span><\/span>\n<\/span>\nfrom<\/span> <\/span>datetime<\/span> <\/span>import<\/span> <\/span>datetime<\/span><\/span>\nimport<\/span> <\/span>time<\/span><\/span>\nimport<\/span> <\/span>client<\/span><\/span>\n<\/span>\nimport<\/span> <\/span>iso8601<\/span><\/span>\ndef<\/span> <\/span>parse_isotime<\/span>(<\/span>timestr<\/span>):<\/span><\/span>\n    <\/span>"""<\/span>Parse time from ISO 8601 format.<\/span>"""<\/span><\/span>\n    <\/span>try<\/span>:<\/span><\/span>\n        <\/span>return<\/span> <\/span>iso8601<\/span>.<\/span>parse_date<\/span>(<\/span>timestr<\/span>)<\/span><\/span>\n    <\/span>except<\/span> <\/span>iso8601<\/span>.<\/span>ParseError<\/span> <\/span>as<\/span> <\/span>e<\/span>:<\/span><\/span>\n        <\/span>raise<\/span> <\/span>ValueError<\/span>(<\/span>six<\/span>.<\/span>text_type<\/span>(<\/span>e<\/span>))<\/span><\/span>\n    <\/span>except<\/span> <\/span>TypeError<\/span> <\/span>as<\/span> <\/span>e<\/span>:<\/span><\/span>\n        <\/span>raise<\/span> <\/span>ValueError<\/span>(<\/span>six<\/span>.<\/span>text_type<\/span>(<\/span>e<\/span>))<\/span><\/span>\n<\/span>\ndef<\/span> <\/span>valid_token<\/span>(<\/span>expires<\/span>):<\/span><\/span>\n    #<\/span>return<\/span> <\/span>datetime<\/span>.<\/span>now<\/span>() > <\/span>time<\/span>.<\/span>replace<\/span>(<\/span>tzinfo<\/span>=<\/span>None<\/span>)<\/span><\/span>\n    <\/span>now<\/span> = <\/span>time<\/span>.<\/span>time<\/span>()<\/span><\/span>\n    <\/span>return<\/span> <\/span>now<\/span> < <\/span>expires<\/span><\/span>\n<\/span>\ndef<\/span> <\/span>verify<\/span>(<\/span>request<\/span>):<\/span><\/span>\n<\/span>\n    <\/span>token<\/span> = <\/span>None<\/span><\/span>\n    <\/span>expire<\/span> = <\/span>None<\/span><\/span>\n    <\/span>username<\/span> = <\/span>None<\/span><\/span>\n    <\/span>verified_username<\/span> = <\/span>None<\/span><\/span>\n<\/span>\n    <\/span>if<\/span> <\/span>request<\/span>.<\/span>session<\/span>.<\/span>has_key<\/span>(<\/span>"<\/span>token<\/span>"<\/span>):<\/span><\/span>\n        <\/span>token<\/span> = <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>token<\/span>"<\/span>]<\/span><\/span>\n    <\/span>if<\/span> <\/span>request<\/span>.<\/span>session<\/span>.<\/span>has_key<\/span>(<\/span>"<\/span>expires<\/span>"<\/span>):<\/span><\/span>\n        <\/span>expires<\/span> = <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>expires<\/span>"<\/span>]<\/span><\/span>\n    <\/span>if<\/span> <\/span>request<\/span>.<\/span>session<\/span>.<\/span>has_key<\/span>(<\/span>"<\/span>username<\/span>"<\/span>):<\/span><\/span>\n        <\/span>username<\/span> = <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>username<\/span>"<\/span>]<\/span><\/span>\n<\/span>\n    <\/span>if<\/span> <\/span>not<\/span> <\/span>token<\/span> <\/span>is<\/span> <\/span>None<\/span> :<\/span><\/span>\n        <\/span>if<\/span> <\/span>valid_token<\/span>(<\/span>expires<\/span>):<\/span><\/span>\n            <\/span>return<\/span> <\/span>username<\/span><\/span>\n    <\/span>print<\/span> <\/span>'<\/span>session :%s<\/span>'<\/span> %<\/span>request<\/span>.<\/span>session<\/span><\/span>\n    <\/span>print<\/span> <\/span>'<\/span>Get :%s<\/span>'<\/span>%<\/span>request<\/span>.<\/span>GET<\/span><\/span>\n    <\/span>token<\/span> =<\/span>request<\/span>.<\/span>GET<\/span>.<\/span>get<\/span>(<\/span>'<\/span>token<\/span>'<\/span>)<\/span><\/span>\n    <\/span>username<\/span> =<\/span>request<\/span>.<\/span>GET<\/span>.<\/span>get<\/span>(<\/span>'<\/span>username<\/span>'<\/span>)<\/span><\/span>\n    <\/span>print<\/span> <\/span>'<\/span>username :%s<\/span>'<\/span>%<\/span>username<\/span><\/span>\n    <\/span>if<\/span> <\/span>token<\/span> <\/span>is<\/span> <\/span>None<\/span> <\/span>or<\/span> <\/span>username<\/span> <\/span>is<\/span> <\/span>None<\/span>:<\/span><\/span>\n        <\/span>return<\/span> <\/span>None<\/span><\/span>\n    <\/span>headers<\/span> = <\/span>{<\/span><\/span>\n        "<\/span>X<\/span>-<\/span>Auth<\/span>-<\/span>Token<\/span>": <\/span>token<\/span>,<\/span><\/span>\n        <\/span>}<\/span><\/span>\n    <\/span>code<\/span>,<\/span> <\/span>data<\/span> = <\/span>client<\/span>.<\/span>http_request<\/span>(<\/span>url<\/span>=<\/span>"<\/span>http:\/\/192.168.19.1:35357\/v2.0<\/span>"<\/span>+<\/span>"<\/span>\/tokens\/<\/span>"<\/span>+<\/span>token<\/span>+<\/span>"<\/span>?belongsTo<\/span>"<\/span>,<\/span> <\/span>headers<\/span>=<\/span>headers<\/span>)<\/span><\/span>\n    <\/span>print<\/span> <\/span>'<\/span>__________________________++++++++++++++++++++++++_____________________<\/span>'<\/span><\/span>\n    <\/span>print<\/span> <\/span>data<\/span><\/span>\n    <\/span>if<\/span> <\/span>code<\/span> != <\/span>"<\/span>200<\/span>"<\/span>:<\/span><\/span>\n        <\/span>valid<\/span> = 0<\/span><\/span>\n        <\/span>print<\/span> <\/span>"<\/span>token invalid: return code:%s<\/span>"<\/span> % <\/span>code<\/span><\/span>\n    <\/span>else<\/span>:<\/span><\/span>\n        <\/span>expires_dt<\/span> = <\/span>parse_isotime<\/span>(<\/span>data<\/span>[<\/span>"<\/span>access<\/span>"<\/span>][<\/span>"<\/span>token<\/span>"<\/span>][<\/span>"<\/span>expires<\/span>"<\/span>])<\/span><\/span>\n        <\/span>expires_dt<\/span> = <\/span>expires_dt<\/span>.<\/span>replace<\/span>(<\/span>tzinfo<\/span>=<\/span>None<\/span>)<\/span><\/span>\n        <\/span>expires<\/span> = <\/span>long<\/span>(<\/span>time<\/span>.<\/span>mktime<\/span>(<\/span>expires_dt<\/span>.<\/span>timetuple<\/span>()))<\/span><\/span>\n<\/span>\n        <\/span>verified_username<\/span> = <\/span>data<\/span>[<\/span>"<\/span>access<\/span>"<\/span>][<\/span>"<\/span>user<\/span>"<\/span>][<\/span>"<\/span>username<\/span>"<\/span>]<\/span><\/span>\n        <\/span>if<\/span> <\/span>valid_token<\/span>(<\/span>expires<\/span>):<\/span><\/span>\n            <\/span>valid<\/span> = 1<\/span><\/span>\n        <\/span>else<\/span>:<\/span><\/span>\n            <\/span>valid<\/span> = 0<\/span><\/span>\n<\/span>\n    <\/span>print<\/span> <\/span>'<\/span>valid :%d<\/span>'<\/span>%<\/span>valid<\/span><\/span>\n    <\/span>print<\/span> <\/span>'<\/span>token :%s<\/span>'<\/span>%<\/span>token<\/span><\/span>\n    <\/span>if<\/span> <\/span>valid<\/span>:<\/span><\/span>\n        <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>username<\/span>"<\/span>] = <\/span>verified_username<\/span><\/span>\n        <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>token<\/span>"<\/span>] = <\/span>token<\/span><\/span>\n        <\/span>request<\/span>.<\/span>session<\/span>[<\/span>"<\/span>expires<\/span>"<\/span>] = <\/span>expires<\/span><\/span>\n    <\/span>return<\/span> <\/span>verified_username<\/span><\/span><\/code><\/pre><\/div>\n","protected":false},"excerpt":{"rendered":"
\u53ef\u4ee5\u5728openstack horizon\u4e2d\u52a0\u4e00\u4e2a\u6587\u4ef6\u5939Security\uff0c\u91cc\u9762\u6309\u7167horizon\u7684\u8981\u6c42\u653e\u7f6e\u597d\u5b50\u76ee\u5f55\u548c\u6587\u4ef6\u3002 \u67e5\u770bliveprotection\/view.py \u5728liveprotection\u9875\u9762\u4e2d\uff0c\u5904\u7406\u51fd\u6570\u4e3a\uff1a<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-624","post","type-post","status-publish","format-standard","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/posts\/624","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/marvelliu.space\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=624"}],"version-history":[{"count":7,"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/posts\/624\/revisions"}],"predecessor-version":[{"id":643,"href":"https:\/\/marvelliu.space\/index.php?rest_route=\/wp\/v2\/posts\/624\/revisions\/643"}],"wp:attachment":[{"href":"https:\/\/marvelliu.space\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/marvelliu.space\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=624"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/marvelliu.space\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}