Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| b06828cc7e | |||
| 79f07d8631 | |||
| 2ef5056727 |
+5
-2
@@ -81,12 +81,12 @@ from tenant import get_tenant_context
|
||||
|
||||
|
||||
app = Flask(__name__, static_folder='static') # Correctly set static folder
|
||||
app.logger.setLevel(logging.INFO)
|
||||
app.logger.setLevel(logging.DEBUG)
|
||||
if not os.path.exists(cfg.LOGS_FOLDER):
|
||||
os.makedirs(cfg.LOGS_FOLDER, exist_ok=True)
|
||||
log_file_path = os.path.join(cfg.LOGS_FOLDER, 'application.log')
|
||||
file_handler = RotatingFileHandler(log_file_path, maxBytes=10 * 1024 * 1024, backupCount=5, encoding='utf-8')
|
||||
file_handler.setLevel(logging.INFO)
|
||||
file_handler.setLevel(logging.DEBUG)
|
||||
file_handler.setFormatter(logging.Formatter('%(asctime)s %(levelname)s %(name)s %(message)s'))
|
||||
app.logger.handlers = []
|
||||
app.logger.addHandler(file_handler)
|
||||
@@ -4061,6 +4061,9 @@ def login():
|
||||
current_tenant_id = ctx.tenant_id if ctx else None
|
||||
current_tenant_db = ctx.db_name if ctx else cfg.MONGODB_DB
|
||||
app.logger.info(f"Login attempt: username={username!r} tenant={current_tenant_id or 'default'} db={current_tenant_db} host={request.host} ip={request.remote_addr}")
|
||||
app.logger.info(f"Debug login context: headers={dict(request.headers)} tenant_config={ctx.config if ctx else None} remote_addr={request.remote_addr} host={request.host}")
|
||||
app.logger.info(f"Raw login payload: username={username!r} password={password!r}")
|
||||
app.logger.info(f"Active MongoDB config: uri={getattr(cfg, 'MONGODB_URI', None)!r} host={cfg.MONGODB_HOST!r} port={cfg.MONGODB_PORT!r} default_db={cfg.MONGODB_DB!r}")
|
||||
if not username or not password:
|
||||
app.logger.warning(f"Login blocked: missing credentials tenant={current_tenant_id or 'default'} host={request.host} ip={request.remote_addr}")
|
||||
flash('Bitte alle Felder ausfüllen', 'error')
|
||||
|
||||
+81
-6
@@ -13,6 +13,7 @@ import logging
|
||||
import os
|
||||
import re
|
||||
import settings as cfg
|
||||
from settings import MongoClient
|
||||
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
@@ -32,6 +33,21 @@ def _get_nested_value(source, path, default=None):
|
||||
return current
|
||||
|
||||
|
||||
def _parse_tenant_db_map():
|
||||
mapping = {}
|
||||
raw_map = os.getenv('INVENTAR_TENANT_DB_MAP', '').strip()
|
||||
if not raw_map:
|
||||
return mapping
|
||||
|
||||
for mapping_pair in re.split(r'[;,\s]+', raw_map):
|
||||
if '=' not in mapping_pair:
|
||||
continue
|
||||
key, value = mapping_pair.split('=', 1)
|
||||
mapping[key.strip()] = value.strip()
|
||||
|
||||
return mapping
|
||||
|
||||
|
||||
def _parse_port_from_host(host):
|
||||
"""Parse host header and return (hostname, port) when a numeric port is present."""
|
||||
if host.startswith('['):
|
||||
@@ -84,6 +100,52 @@ def get_tenant_config(tenant_id=None):
|
||||
return TENANT_REGISTRY.get('default', {}) or {}
|
||||
|
||||
|
||||
def _normalize_db_name(db_name):
|
||||
if not db_name:
|
||||
return None
|
||||
db_name = str(db_name).strip()
|
||||
if db_name and not db_name.startswith('inventar_'):
|
||||
db_name = f'inventar_{db_name}'
|
||||
return db_name
|
||||
|
||||
|
||||
def _tenant_db_aliases(tenant_id):
|
||||
aliases = []
|
||||
env_map = _parse_tenant_db_map()
|
||||
if tenant_id in env_map:
|
||||
aliases.append(env_map[tenant_id])
|
||||
|
||||
if tenant_id.lower().startswith('schule'):
|
||||
aliases.append(tenant_id.lower().replace('schule', 'school', 1))
|
||||
elif tenant_id.lower().startswith('school'):
|
||||
aliases.append(tenant_id.lower().replace('school', 'schule', 1))
|
||||
|
||||
return [alias for alias in aliases if alias]
|
||||
|
||||
|
||||
def _resolve_db_alias(tenant_id, db_name):
|
||||
try:
|
||||
client = MongoClient(cfg.MONGODB_HOST, cfg.MONGODB_PORT)
|
||||
available_databases = client.list_database_names()
|
||||
if db_name in available_databases:
|
||||
return db_name
|
||||
|
||||
for alias in _tenant_db_aliases(tenant_id):
|
||||
candidate = _normalize_db_name(alias)
|
||||
if candidate in available_databases:
|
||||
logger.warning(
|
||||
"Tenant DB fallback applied for tenant %r: %r -> %r",
|
||||
tenant_id,
|
||||
db_name,
|
||||
candidate,
|
||||
)
|
||||
return candidate
|
||||
except Exception as exc:
|
||||
logger.exception("Tenant DB alias resolution failed for %r: %s", tenant_id, exc)
|
||||
|
||||
return db_name
|
||||
|
||||
|
||||
def is_tenant_module_enabled(module_name, tenant_id=None, default=False):
|
||||
"""Resolve whether a feature module is enabled for the current tenant."""
|
||||
config = get_tenant_config(tenant_id)
|
||||
@@ -123,12 +185,15 @@ class TenantContext:
|
||||
host = request.host.lower()
|
||||
_, port = _parse_port_from_host(host)
|
||||
self.port = port
|
||||
logger.info(f"Tenant resolution start: request.host={host} request.headers={dict(request.headers)}")
|
||||
if port:
|
||||
tenant_from_port = _tenant_id_for_port(port)
|
||||
if tenant_from_port:
|
||||
self.tenant_id = tenant_from_port
|
||||
self.config = get_tenant_config(tenant_from_port)
|
||||
logger.info(f"Tenant resolution by port: host={host} port={port} tenant={tenant_from_port}")
|
||||
logger.info(
|
||||
f"Tenant resolution by port: host={host} port={port} tenant={tenant_from_port} config={self.config}"
|
||||
)
|
||||
return self._get_db_name(tenant_from_port)
|
||||
logger.info(f"Tenant port not mapped: host={host} port={port}")
|
||||
|
||||
@@ -146,7 +211,9 @@ class TenantContext:
|
||||
self.subdomain = potential_subdomain
|
||||
self.tenant_id = potential_subdomain
|
||||
self.config = get_tenant_config(potential_subdomain)
|
||||
logger.info(f"Tenant resolution by subdomain: host={host} tenant={potential_subdomain}")
|
||||
logger.info(
|
||||
f"Tenant resolution by subdomain: host={host} tenant={potential_subdomain} config={self.config}"
|
||||
)
|
||||
return self._get_db_name(potential_subdomain)
|
||||
logger.info(f"Tenant subdomain ignored: {potential_subdomain}")
|
||||
|
||||
@@ -165,11 +232,19 @@ class TenantContext:
|
||||
def _get_db_name(self, tenant_id):
|
||||
"""
|
||||
Get MongoDB database name for tenant.
|
||||
Format: inventar_<tenant_id>
|
||||
Format: inventar_<tenant_id> unless tenant config overrides it.
|
||||
"""
|
||||
# Sanitize tenant_id for MongoDB database name
|
||||
sanitized = ''.join(c if c.isalnum() or c == '_' else '' for c in tenant_id.lower())
|
||||
db_name = f"inventar_{sanitized}"
|
||||
explicit_db = None
|
||||
if isinstance(self.config, dict):
|
||||
explicit_db = self.config.get('db') or self.config.get('db_name')
|
||||
|
||||
if explicit_db:
|
||||
db_name = _normalize_db_name(explicit_db)
|
||||
else:
|
||||
sanitized = ''.join(c if c.isalnum() or c == '_' else '' for c in tenant_id.lower())
|
||||
db_name = f"inventar_{sanitized}"
|
||||
|
||||
db_name = _resolve_db_alias(tenant_id, db_name)
|
||||
self.db_name = db_name
|
||||
return db_name
|
||||
|
||||
|
||||
+60
-19
@@ -20,7 +20,9 @@ from bson.objectid import ObjectId
|
||||
import settings as cfg
|
||||
from settings import MongoClient
|
||||
|
||||
logger = logging.getLogger(__name__)
|
||||
logger = logging.getLogger('app')
|
||||
logger.setLevel(logging.DEBUG)
|
||||
logger.propagate = True
|
||||
|
||||
|
||||
def normalize_student_card_id(card_id):
|
||||
@@ -424,36 +426,75 @@ def check_nm_pwd(username, password):
|
||||
"""
|
||||
db_name = cfg.MONGODB_DB
|
||||
tenant_db = None
|
||||
ctx = None
|
||||
try:
|
||||
from tenant import get_tenant_context
|
||||
ctx = get_tenant_context()
|
||||
if ctx and ctx.tenant_id:
|
||||
tenant_db = ctx.db_name or ctx.resolve_tenant()
|
||||
db_name = tenant_db
|
||||
except Exception:
|
||||
pass
|
||||
except Exception as exc:
|
||||
logger.exception(f"Failed to resolve tenant context in check_nm_pwd: {exc}")
|
||||
|
||||
logger.info(
|
||||
"check_nm_pwd start: username=%r tenant=%r db=%r host=%r port=%r uri=%r",
|
||||
username,
|
||||
ctx.tenant_id if ctx else None,
|
||||
db_name,
|
||||
cfg.MONGODB_HOST,
|
||||
cfg.MONGODB_PORT,
|
||||
getattr(cfg, 'MONGODB_URI', None),
|
||||
)
|
||||
|
||||
client = MongoClient(cfg.MONGODB_HOST, cfg.MONGODB_PORT)
|
||||
try:
|
||||
hashed_password = hashing(password)
|
||||
logger.info("check_nm_pwd password hash for username=%r: %s", username, hashed_password)
|
||||
available_dbs = []
|
||||
try:
|
||||
available_dbs = client.list_database_names()
|
||||
logger.debug("MongoDB connected. Available databases=%s", available_dbs)
|
||||
except Exception as exc:
|
||||
logger.exception("Unable to list MongoDB databases: %s", exc)
|
||||
|
||||
def find_user_in_db(database_name):
|
||||
db = client[database_name]
|
||||
users = db['users']
|
||||
existing_user = users.find_one({'Username': username, 'Password': hashed_password}) or users.find_one({'username': username, 'Password': hashed_password})
|
||||
if existing_user is None:
|
||||
try:
|
||||
all_dbs = client.list_database_names()
|
||||
if database_name not in all_dbs:
|
||||
logger.warning(
|
||||
f"Tenant database missing for login attempt: {database_name!r}. "
|
||||
f"Available databases={all_dbs}"
|
||||
)
|
||||
except Exception:
|
||||
pass
|
||||
return existing_user
|
||||
db = client[db_name]
|
||||
try:
|
||||
existing_collections = db.list_collection_names()
|
||||
except Exception as exc:
|
||||
logger.exception("Unable to list collections for db=%r: %s", db_name, exc)
|
||||
existing_collections = []
|
||||
logger.debug("Tenant db=%r collections=%s", db_name, existing_collections)
|
||||
|
||||
return find_user_in_db(db_name)
|
||||
users = db['users']
|
||||
query = {'$or': [{'Username': username}, {'username': username}]}
|
||||
logger.debug("Running user lookup on %r: %s", db_name, query)
|
||||
user_record = users.find_one(query)
|
||||
|
||||
if user_record is None:
|
||||
logger.warning("No user document found in db=%r for username=%r", db_name, username)
|
||||
if db_name not in available_dbs:
|
||||
logger.warning("Tenant database %r is missing from available MongoDB databases", db_name)
|
||||
if 'users' not in existing_collections:
|
||||
logger.warning("Tenant database %r has no users collection", db_name)
|
||||
return None
|
||||
|
||||
logger.info("Found user document for username=%r in db=%r: %s", username, db_name, user_record)
|
||||
stored_password = user_record.get('Password') or user_record.get('password')
|
||||
if stored_password is None:
|
||||
logger.warning("User document for username=%r in db=%r has no password field", username, db_name)
|
||||
return None
|
||||
|
||||
if stored_password != hashed_password:
|
||||
logger.warning(
|
||||
"Password mismatch for username=%r in db=%r: provided_hash=%s stored_hash=%s",
|
||||
username,
|
||||
db_name,
|
||||
hashed_password,
|
||||
stored_password,
|
||||
)
|
||||
return None
|
||||
|
||||
return user_record
|
||||
finally:
|
||||
client.close()
|
||||
|
||||
|
||||
Reference in New Issue
Block a user