Refs #775 -- Pluggable authentication backends (#1447)

* Drag-and-drop: Force csrf_token to be present

* Rough design

* Missing file

* b.visble

* Forms

* Docs

* Tests

* Fix variable

src/pretix/control/templates/pretixcontrol/auth/login.html

@@ -2,28 +2,40 @@
 {% load bootstrap3 %}
 {% load i18n %}
 {% load static %}
+{% load urlreplace %}
 {% block content %}
     <form class="form-signin" action="" method="post">
-        {% bootstrap_form_errors form type='all' layout='inline' %}
-        {% csrf_token %}
-        {% bootstrap_field form.email %}
-        {% bootstrap_field form.password %}
-        {% if form.keep_logged_in %}
-            {% bootstrap_field form.keep_logged_in %}
+        {% if backends|length > 1 %}
+            <ul class="nav nav-pills">
+                {% for b in backends %}
+                    {% if b.visible %}
+                        <li class="{% if backend.identifier == b.identifier %}active{% endif %}">
+                            <a href="{% if b.url %}{{ b.url }}{% else %}?{% url_replace request "backend" b.identifier %}{% endif %}">
+                                {{ b.verbose_name }}
+                            </a>
+                        </li>
+                    {% endif %}
+                {% endfor %}
+            </ul>
+            <br>
         {% endif %}
+        {% csrf_token %}
+        {% bootstrap_form form %}
         <div class="form-group buttons">
             <button type="submit" class="btn btn-primary btn-block">
                 {% trans "Log in" %}
             </button>
-            {% if can_reset %}
-                <a href="{% url "control:auth.forgot" %}" class="btn btn-link btn-block">
-                    {% trans "Lost password?" %}
-                </a>
-            {% endif %}
-            {% if can_register %}
-                <a href="{% url "control:auth.register" %}" class="btn btn-link btn-block">
-                    {% trans "Register" %}
-                </a>
+            {% if backend.identifier == "native" %}
+                {% if can_reset %}
+                    <a href="{% url "control:auth.forgot" %}" class="btn btn-link btn-block">
+                        {% trans "Lost password?" %}
+                    </a>
+                {% endif %}
+                {% if can_register %}
+                    <a href="{% url "control:auth.register" %}" class="btn btn-link btn-block">
+                        {% trans "Register" %}
+                    </a>
+                {% endif %}
             {% endif %}
         </div>
     </form>

src/pretix/control/templates/pretixcontrol/user/reauth.html

@@ -10,14 +10,9 @@
         <p>
             {% trans "We just want to make sure it's really you. Please re-enter your password to continue." %}
         </p>
-        <div class="form-group">
-            <input class="form-control"
-                    value="{{ request.user.get_full_name }}" disabled>
-        </div>
-        <div class="form-group">
-            <input class="form-control" id="id_password" name="password" placeholder="{% trans "Password" %}"
-                    title="" type="password" required="" autofocus>
-        </div>
+        {% bootstrap_form form %}
+        <input class="form-control" id="webauthn-response" name="webauthn"
+                type="hidden">
         {% if jsondata %}
             <div class="sr-only alert alert-danger" id="webauthn-error">
                 {% trans "WebAuthn failed. Check that the correct authentication device is correctly plugged in." %}
@@ -45,6 +40,7 @@
             <script type="text/javascript" src="{% static "jquery/js/jquery-2.1.1.min.js" %}"></script>
             <script type="text/javascript" src="{% static "pretixcontrol/js/base64js.js" %}"></script>
             <script type="text/javascript" src="{% static "pretixcontrol/js/ui/webauthn.js" %}"></script>
+            <script type="text/javascript" src="{% static "pretixcontrol/js/ui/focus.js" %}"></script>
         {% endcompress %}
     </form>
 {% endblock %}

src/pretix/control/templates/pretixcontrol/user/settings.html

@@ -33,10 +33,14 @@
     </fieldset>
     <fieldset>
         <legend>{% trans "Login settings" %}</legend>
-        {% bootstrap_field form.old_pw layout='horizontal' %}
+        {% if form.old_pw %}
+            {% bootstrap_field form.old_pw layout='horizontal' %}
+        {% endif %}
         {% bootstrap_field form.email layout='horizontal' %}
-        {% bootstrap_field form.new_pw layout='horizontal' %}
-        {% bootstrap_field form.new_pw_repeat layout='horizontal' %}
+        {% if form.new_pw %}
+            {% bootstrap_field form.new_pw layout='horizontal' %}
+            {% bootstrap_field form.new_pw_repeat layout='horizontal' %}
+        {% endif %}
         <div class="form-group">
             <label class="col-md-3 control-label" for="id_new_pw_repeat">{% trans "Two-factor authentication" %}</label>
             <div class="col-md-9 static-form-row">

src/pretix/control/templates/pretixcontrol/users/form.html

@@ -5,10 +5,12 @@
 {% block content %}
     <h1>{% trans "User" %} {{ user.email }}</h1>
     <p>
-        <form action="{% url "control:users.reset" id=user.pk %}" method="post" class="form-inline helper-display-inline">
-            {% csrf_token %}
-            <button class="btn btn-default">{% trans "Send password reset email" %}</button>
-        </form>
+        {% if user.auth_backend == "native" %}
+            <form action="{% url "control:users.reset" id=user.pk %}" method="post" class="form-inline helper-display-inline">
+                {% csrf_token %}
+                <button class="btn btn-default">{% trans "Send password reset email" %}</button>
+            </form>
+        {% endif %}
         <form action="{% url "control:users.impersonate" id=user.pk %}" method="post" class="form-inline helper-display-inline">
             {% csrf_token %}
             <button class="btn btn-default">{% trans "Impersonate user" %}</button>
@@ -30,9 +32,17 @@
                 </fieldset>
                 <fieldset>
                     <legend>{% trans "Log-in settings" %}</legend>
+                    <div class="form-group">
+                        <label class="col-md-3 control-label">{% trans "Authentication backend" %}</label>
+                        <div class="col-md-9">
+                            <input name="text" value="{{ backend }}" class="form-control" disabled>
+                        </div>
+                    </div>
                     {% bootstrap_field form.email layout='control' %}
-                    {% bootstrap_field form.new_pw layout='control' %}
-                    {% bootstrap_field form.new_pw_repeat layout='control' %}
+                    {% if form.new_pw %}
+                        {% bootstrap_field form.new_pw layout='control' %}
+                        {% bootstrap_field form.new_pw_repeat layout='control' %}
+                    {% endif %}
                     {% bootstrap_field form.last_login layout='control' %}
                     {% bootstrap_field form.require_2fa layout='control' %}
                 </fieldset>