v0.1

Author: huanghr

.gitattributes

@@ -0,0 +1 @@
+*.html linguist-language=Python

.gitignore

@@ -0,0 +1,8 @@
+*.py[cod]
+nohup.out
+*.log
+*.swp
+db.sqlite3
+/env/
+/env2.7/
+.svn/

README.md

@@ -0,0 +1,39 @@
+# SSO单点登录系统
+运维云平台之单点登录系统，SSO的概念、用途和好处就不在这说明了，总之能接入好接入单点登录的系统就接入，二次开发成本高的系统如果支持LDAP就先接入LDAP，这样运维同学尽可能减>少应用系统账号管理维护工作。<br>
+
+本系统基于Cookie方式，由认证中心统一配置cookie，不支持跨域。这已经基本能满足内部各系统接入需求，对于子系统接入开发成本也是最低。<br>
+
+注：如果要求跨域，只需在本系统中稍加改动就可实现，改成认证中心不配置cookie，在认证中心成功登录后跳转回子系统时把token传递回去，由子系统配置cookie即可。
+
+### 流程图
+![](sso.png)
+
+### 部署运行环境
+* Centos6.5 x86_64
+* saltstack master
+* Python2.7
+* Virtualenv
+* Django1.9.2
+
+### 安装部署
+
+```
+cd salt-deploy
+sh update_python2.7.8.sh 
+pip install virtualenv
+virtualenv ./env
+source env/bin/activate
+pip install -r pip_requirements.txt
+python manage.py makemigrations
+python manage.py migrate
+python init.py
+vim mysite/settings.py #手动修改配置SYS_API和EMAIL等配置
+sh service.sh start
+```
+
+### 截图
+![](home.png)
+
+### 技术交流
+
+Email：飞龙 <[email protected]>

home.png

@@ -0,0 +1,24 @@
+# coding: utf-8
+#1. 创建默认角色
+
+import sys
+
+reload(sys)
+sys.setdefaultencoding('utf8')
+
+import os
+import re
+import time
+import getpass
+import readline
+import django
+import uuid
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "mysite.settings")
+django.setup()
+from django.core.management import execute_from_command_line
+from django.contrib.auth.models import User
+from django.conf import settings
+
+#创建管理员
+User.objects.create_superuser('admin', '[email protected]', 'password', last_name='admin')

init.py

@@ -0,0 +1,10 @@
+#!/usr/bin/env python
+import os
+import sys
+
+if __name__ == "__main__":
+    os.environ.setdefault("DJANGO_SETTINGS_MODULE", "mysite.settings")
+
+    from django.core.management import execute_from_command_line
+
+    execute_from_command_line(sys.argv)

manage.py

@@ -0,0 +1,144 @@
+#coding=utf-8
+
+import sys
+import base64
+from itsdangerous import URLSafeTimedSerializer as utsr
+from django.core.mail import EmailMessage
+from django.conf import settings
+reload(sys)
+sys.setdefaultencoding('utf8')
+
+
+def request_get(url, timeout=5, headers=None):
+    """
+    发送get请求
+    默认超时5秒
+    默认http请求，如果https请求url中必须是https://开发
+    headers = {'User-Agent': 'hhrtest'}
+    ret, err = request_get('http://ip.taobao.com/service/getIpInfo.php?ip=122.88.60.28', headers=headers)
+    if not err: print ret.text
+    状态码：ret.status_code
+    返回Unicode型的数据，如文本文件：ret.text
+    返回bytes型也就是二进制的数据，如图片、文件等：ret.content
+    返回json数据：ret.json()
+    headers: ret.request.headers['User-Agent'] 
+    直接获取返回json串内容 ret.json()['data']['country']
+    """
+    import re
+    import requests
+    ret = err = None
+    requests.packages.urllib3.disable_warnings()
+    if not re.match('https?://',url.strip()): url = 'http://' + url
+    try:
+        ret = requests.get(url, timeout=timeout, headers=headers)
+    except Exception as e:
+        return ret, e
+    return ret, err
+
+def request_post(url, post_data, timeout=5, headers=None):
+    """
+    发送post请求
+    默认http请求，如果https请求url中必须是https://开发
+    post_data = {'key1': 'value1', 'key2': 'value2'}
+    ret, err = request_post('http://httpbin.org/post', post_data=post_data)
+    if not err: print ret.text
+    状态码：ret.status_code
+    文本内容：ret.text
+    headers: ret.request.headers['User-Agent'] 
+    直接获取返回json串内容 ret.json()['data']['country']
+    """
+    import re
+    import requests
+    ret = err = None
+    requests.packages.urllib3.disable_warnings()
+    if not re.match('https?://',url.strip()): url = 'http://' + url
+    try:
+        ret = requests.post(url, post_data, timeout=timeout, headers=headers)
+    except Exception as e:
+        return ret, e
+    return ret, err
+
+def local_cmd(cmd):
+    """
+    返回退出状态码和执行输出结果（标准输出和错误输出）
+    ret, err = local_cmd('date')
+
+    """
+    import commands
+    err, ret = commands.getstatusoutput(cmd)
+    return ret, err
+
+def send_html_mail(tolist, subject, html_content, fromer=None, cclist=None, bcclist=None):
+    '''
+    发送html邮件
+    '''
+    if fromer: 
+        _fromer = '%s<%s>' % (fromer, settings.EMAIL_HOST_USER)
+    else:
+        _fromer = settings.EMAIL_HOST_USER
+    
+    msg = EmailMessage(subject, html_content, _fromer, tolist)
+    msg.content_subtype = "html"
+    if cclist: msg.cc = cclist
+    if bcclist: msg.bcc = bcclist
+    ret = msg.send(fail_silently=True)
+    if ret == 1:
+        ret = True
+    else:
+        ret = False
+    return ret
+
+def make_password(length=8):
+    '''
+    生成随机密码
+    '''
+    from random import choice
+    import string
+    chars=string.ascii_letters+string.digits
+    return ''.join([choice(chars) for i in range(length)])
+
+def redis_set(key, value, ex=0, host='localhost', port=6379):
+    '''
+    写redis
+    '''
+    ret = err = None
+    try:
+        import redis
+        r = redis.StrictRedis(host=host,port=port)
+        ret = r.set(key, value, ex)
+    except Exception as e:
+        err = e
+    return ret, err
+
+def redis_get(key, host='localhost', port=6379):
+    '''
+    读redis
+    '''
+    ret = err = None
+    try:
+        import redis
+    except Exception as e:
+        return False, e
+    try:
+        r = redis.StrictRedis(host=host,port=port)
+        ret = r.get(key)
+    except Exception as e:
+        err = e
+    return ret, err
+
+class Token:
+    def __init__(self, security_key):
+        self.security_key = security_key
+        self.salt = base64.encodestring(security_key)
+    def generate_validate_token(self, username):
+        serializer = utsr(self.security_key)
+        return serializer.dumps(username, self.salt)
+    def confirm_validate_token(self, token, expiration=600):
+        serializer = utsr(self.security_key)
+        return serializer.loads(token, salt=self.salt, max_age=expiration)
+    def remove_validate_token(self, token):
+        serializer = utsr(self.security_key)
+        return serializer.loads(token, salt=self.salt)
+
+def ustr_to_utf8(ustr):
+    return ustr.encode('utf-8')

mysite/__init__.py

@@ -0,0 +1,8 @@
+#coding=utf-8
+
+import sys
+import os
+from django.conf import settings
+
+sys.path.append(settings.BASE_DIR)
+os.environ['DJANGO_SETTINGS_MODULE'] ='mysite.settings'