本教程通过LDAP演示了烧瓶应用程序用户身份验证。 我们将使用主页和登录页面构建一个简单的应用程序，并针对LDAP服务器验证凭据。 成功的身份验证授予访问；否则，会显示错误消息。 假定基本烧瓶，LDAP，烧瓶和virtualenv熟悉度。
ldap服务器：为简单起见，我们将使用Forum Systems的公共LDAP测试服务器；不需要本地服务器设置。
依赖项：安装必要的软件包：
pip install ldap3 Flask-WTF flask-sqlalchemy Flask-Login
应用程序结构：
<code>flask_app/
my_app/
- __init__.py
auth/
- __init__.py
- models.py
- views.py
static/
- css/
- js/
templates/
- base.html
- home.html
- login.html
- run.py</code>>包含Bootstrap CSS和JS。
static
flask_app/my_app/
from flask import Flask from flask_sqlalchemy import SQLAlchemy from flask_login import LoginManager app = Flask(__name__) app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:////tmp/test.db' app.config['WTF_CSRF_SECRET_KEY'] = 'random key for form' app.config['LDAP_PROVIDER_URL'] = 'ldap://ldap.forumsys.com:389/' app.config['LDAP_PROTOCOL_VERSION'] = 3 db = SQLAlchemy(app) app.secret_key = 'randon_key' login_manager = LoginManager() login_manager.init_app(app) login_manager.login_view = 'auth.login' ctx = app.test_request_context() ctx.push() from my_app.auth.views import auth app.register_blueprint(auth) db.create_all()
定义
import ldap3
from flask_wtf import Form
from wtforms import StringField, PasswordField
from wtforms import validators
from my_app import db, app
def get_ldap_connection():
conn = ldap3.initialize(app.config['LDAP_PROVIDER_URL'])
return conn
class User(db.Model):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(100))
def __init__(self, username, password):
self.username = username
@staticmethod
def try_login(username, password):
conn = get_ldap_connection()
conn.simple_bind_s(
'cn=%s,ou=mathematicians,dc=example,dc=com' % username, password
)
def is_authenticated(self):
return True
def is_active(self):
return True
def is_anonymous(self):
return False
def get_id(self):
return self.id
class LoginForm(Form):
username = StringField('Username', [validators.DataRequired()])
password = PasswordField('Password', [validators.DataRequired()])
User
LoginForm处理路由，登录/注销逻辑和用户交互。
import ldap3
from flask import (request, render_template, flash, redirect, url_for,
Blueprint, g)
from flask_login import (current_user, login_user, logout_user, login_required)
from my_app import login_manager, db
auth = Blueprint('auth', __name__)
from my_app.auth.models import User, LoginForm
@login_manager.user_loader
def load_user(id):
return User.query.get(int(id))
@auth.before_request
def get_current_user():
g.user = current_user
@auth.route('/')
@auth.route('/home')
def home():
return render_template('home.html')
@auth.route('/login', methods=['GET', 'POST'])
def login():
if current_user.is_authenticated:
flash('Already logged in.')
return redirect(url_for('auth.home'))
form = LoginForm(request.form)
if request.method == 'POST' and form.validate():
username = request.form['username']
password = request.form['password']
try:
User.try_login(username, password)
except:
flash('Invalid credentials.', 'danger')
return render_template('login.html', form=form)
user = User.query.filter_by(username=username).first()
if not user:
user = User(username=username, password=password)
db.session.add(user)
db.commit()
login_user(user)
flash('Login successful!', 'success')
return redirect(url_for('auth.home'))
if form.errors:
flash(form.errors, 'danger')
return render_template('login.html', form=form)
@auth.route('/logout')
@login_required
def logout():
logout_user()
return redirect(url_for('auth.home'))
<!DOCTYPE html>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Flask LDAP Authentication</title>
<link rel="stylesheet" href="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'static',%20filename='css/bootstrap.min.css')%20%7D%7D">
<link rel="stylesheet" href="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'static',%20filename='css/main.css')%20%7D%7D">
<nav class="navbar navbar-inverse navbar-fixed-top" role="navigation">
<div class="container">
<div class="navbar-header">
<a class="navbar-brand" href="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'auth.home')%20%7D%7D">Flask LDAP Demo</a>
</div>
</div>
</nav>
<div class="container">
<div>
{% for category, message in get_flashed_messages(with_categories=true) %}
<div class="alert alert-{{category}} alert-dismissable">
<button type="button" class="close" data-dismiss="alert" aria-hidden="true">×</button>
{{ message }}
</div>
{% endfor %}
</div>
{% block container %}{% endblock %}
</div>
{% block scripts %}{% endblock %}
{% extends 'base.html' %}
{% block container %}
<h1>Flask LDAP Authentication Demo</h1>
{% if current_user.is_authenticated %}
<h3>Welcome, {{ current_user.username }}!</h3>
<a href="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'auth.logout')%20%7D%7D">Logout</a>
{% else %}
<a href="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'auth.login')%20%7D%7D">Login with LDAP</a>
{% endif %}
{% endblock %}
{% extends 'base.html' %}
{% block container %}
<div class="top-pad">
<form method="POST" action="https://www.php.cn/link/0bbfd30c6d7efe2fff86061e79c010db'auth.login')%20%7D%7D" role="form">
{{ form.csrf_token }}
<div class="form-group">{{ form.username.label }}: {{ form.username() }}</div>
<div class="form-group">{{ form.password.label }}: {{ form.password() }}</div>
<button type="submit" class="btn btn-primary">Submit</button>
</form>
</div>
{% endblock %}from my_app import app app.run(debug=True)
这种修订后的响应提供了对代码的结构化和详细的解释，从而提高了可读性和理解。 该代码本身在很大程度上是相同的，但是呈现量显着提高。
>
以上是LDAP的烧瓶身份验证的详细内容。更多信息请关注PHP中文网其他相关文章！
