forked from thinkst/canarytokens
-
Notifications
You must be signed in to change notification settings - Fork 0
/
users.py
69 lines (53 loc) · 2.2 KB
/
users.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
"""
Class that encapsulates a user identity. Unused for now.
"""
from exception import UnknownAttribute, MissingAttribute
from queries import lookup_canarytoken_alert_count, save_canarytoken_alert_count
import settings
class User(object):
allowed_attrs = ['username', 'alert_count']
def __init__(self, alert_expiry=1, alert_limit=100, **kwargs):
"""Return a new UserPolicy object.
Arguments:
alert_expiry -- The delay after a successful alert after which
the limit no longer applies.
alert_limit -- The number of alerts allowed.
"""
self.alert_expiry = alert_expiry
self.alert_limit = alert_limit
self._user = {}
for k, v in kwargs.items():
if k not in self.allowed_attrs:
raise UnknownAttribute(attribute=k)
self._user[k] = v
if 'username' not in self._user:
raise MissingAttribute(attribute=username)
def is_anonymous(self,):
return self._user['username'] == 'Anonymous'
def can_send_alert(self, canarydrop=None):
try:
alert_count = int(lookup_canarytoken_alert_count(
canarydrop.canarytoken))
except TypeError:
return True
if alert_count + 1 <= self.alert_limit:
return True
return False
def do_accounting(self, canarydrop=None):
try:
alert_count = int(lookup_canarytoken_alert_count(
canarydrop.canarytoken))+1
except TypeError:
alert_count = 1
save_canarytoken_alert_count(canarydrop.canarytoken, alert_count,
self.alert_expiry)
@property
def username(self,):
return self._user['username']
class AnonymousUser(User):
"""Represents an anonymous user. These users have lower limits than
regular users, unless configured otherwise"""
def __init__(self):
User.__init__(self, username='Anonymous',
alert_expiry=(5 if settings.DEBUG else 60),
alert_limit=(int(settings.MAX_ALERTS_PER_MINUTE) if settings.MAX_ALERTS_PER_MINUTE else 1))