Support authentication using SSH.

1 files changed, 26 insertions, 0 deletions

diff --git a/okupy/accounts/ssh.py b/okupy/accounts/ssh.py
index 83d1f10..37ec5c1 100644
--- a/okupy/accounts/ssh.py
+++ b/okupy/accounts/ssh.py
@@ -1,8 +1,34 @@
 # vim:fileencoding=utf8:et:ts=4:sts=4:sw=4:ft=python
 
+from django.contrib.auth import authenticate, login
+
+from ..common.test_helpers import set_request
+from ..crypto.ciphers import sessionrefcipher
+from ..otp import init_otp
+
+
 ssh_handlers = {}
 
 
 def ssh_handler(f):
     ssh_handlers[f.__name__] = f
     return f
+
+
+@ssh_handler
+def auth(session_id, key):
+    try:
+        session = sessionrefcipher.decrypt(session_id)
+    except ValueError:
+        return None
+
+    request = set_request('/')
+
+    user = authenticate(ssh_key=key)
+    if user and user.is_active:
+        login(request, user)
+        init_otp(request)
+        session.update(request.session)
+        session.save()
+        return 'Authenticated.'
+    return None