mirror of https://github.com/doccano/doccano.git
pythonannotation-tooldatasetsactive-learningtext-annotationdatasetnatural-language-processingdata-labelingmachine-learning
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
2.3 KiB
70 lines
2.3 KiB
import requests
|
|
from django.conf import settings
|
|
from social_core.backends.azuread_tenant import AzureADTenantOAuth2
|
|
from social_core.backends.github import GithubOAuth2
|
|
|
|
|
|
# noinspection PyUnusedLocal
|
|
def fetch_github_permissions(strategy, details, user=None, is_new=False, *args, **kwargs):
|
|
org_name = getattr(settings, 'GITHUB_ADMIN_ORG_NAME', '')
|
|
team_name = getattr(settings, 'GITHUB_ADMIN_TEAM_NAME', '')
|
|
if not user or not isinstance(kwargs['backend'], GithubOAuth2) or not org_name or not team_name:
|
|
return
|
|
|
|
response = requests.post(
|
|
url='https://api.github.com/graphql',
|
|
headers={
|
|
'Authorization': 'Bearer {}'.format(kwargs['response']['access_token']),
|
|
},
|
|
json={
|
|
'query': '''
|
|
query($userName: String!, $orgName: String!, $teamName: String!) {
|
|
organization(login: $orgName) {
|
|
teams(query: $teamName, userLogins: [$userName], first: 1) {
|
|
nodes {
|
|
name
|
|
}
|
|
}
|
|
}
|
|
}
|
|
''',
|
|
'variables': {
|
|
'userName': details['username'],
|
|
'orgName': org_name,
|
|
'teamName': team_name,
|
|
}
|
|
}
|
|
)
|
|
response.raise_for_status()
|
|
response = response.json()
|
|
|
|
is_superuser = {'name': team_name} in response['data']['organization']['teams']['nodes']
|
|
|
|
if user.is_superuser != is_superuser:
|
|
user.is_superuser = is_superuser
|
|
user.save()
|
|
|
|
|
|
# noinspection PyUnusedLocal
|
|
def fetch_azuread_permissions(strategy, details, user=None, is_new=False, *args, **kwargs):
|
|
group_id = getattr(settings, 'AZUREAD_ADMIN_GROUP_ID', '')
|
|
if not user or not isinstance(kwargs['backend'], AzureADTenantOAuth2) or not group_id:
|
|
return
|
|
|
|
response = requests.post(
|
|
url='https://graph.microsoft.com/v1.0/me/checkMemberGroups',
|
|
headers={
|
|
'Authorization': 'Bearer {}'.format(kwargs['response']['access_token']),
|
|
},
|
|
json={
|
|
'groupIds': [group_id]
|
|
}
|
|
)
|
|
response.raise_for_status()
|
|
response = response.json()
|
|
|
|
is_superuser = group_id in response['value']
|
|
|
|
if user.is_superuser != is_superuser:
|
|
user.is_superuser = is_superuser
|
|
user.save()
|