external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-04-06 00:37:06 +00:00
Code Issues Releases Wiki Activity

Trying to create the api key before launch so multiple workers do not conflict

Browse Source
This commit is contained in:
Steve Hay 2022-09-05 20:18:09 -04:00
parent b7b334ac0b
commit f2227de85a
2 changed files with 15 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
management/auth.py
View File

@ -22,20 +22,20 @@ class AuthService:
def init_system_api_key(self): def init_system_api_key(self):
"""Write an API key to a local file so local processes can use the API""" """Write an API key to a local file so local processes can use the API"""
def create_file_with_mode(path, mode): # def create_file_with_mode(path, mode):
# Based on answer by A-B-B: http://stackoverflow.com/a/15015748 # # Based on answer by A-B-B: http://stackoverflow.com/a/15015748
old_umask = os.umask(0) # old_umask = os.umask(0)
try: # try:
return os.fdopen(os.open(path, os.O_WRONLY | os.O_CREAT, mode), 'w') # return os.fdopen(os.open(path, os.O_WRONLY | os.O_CREAT, mode), 'w')
finally: # finally:
os.umask(old_umask) # os.umask(old_umask)
self.key = secrets.token_hex(32) # self.key = secrets.token_hex(32)
os.makedirs(os.path.dirname(self.key_path), exist_ok=True) # os.makedirs(os.path.dirname(self.key_path), exist_ok=True)
with create_file_with_mode(self.key_path, 0o640) as key_file: # with create_file_with_mode(self.key_path, 0o640) as key_file:
key_file.write(self.key + '\n') # key_file.write(self.key + '\n')
def authenticate(self, request, env, login_only=False, logout=False): def authenticate(self, request, env, login_only=False, logout=False):
"""Test if the HTTP Authorization header's username matches the system key, a session key, """Test if the HTTP Authorization header's username matches the system key, a session key,

5
setup/management.sh
View File

@ -98,9 +98,12 @@ export LC_ALL=en_US.UTF-8
export LANG=en_US.UTF-8 export LANG=en_US.UTF-8
export LC_TYPE=en_US.UTF-8 export LC_TYPE=en_US.UTF-8
mkdir -p /var/lib/mailinabox
{ tr -cd '[:xdigit:]' < /dev/urandom | head -c 32 } > /var/lib/mailinabox/api.key
source $venv/bin/activate source $venv/bin/activate
export PYTHONPATH=$(pwd)/management export PYTHONPATH=$(pwd)/management
exec gunicorn -b localhost:10222 -w 1 wsgi:app exec gunicorn -b localhost:10222 -w 2 wsgi:app
EOF EOF
chmod +x $inst_dir/start chmod +x $inst_dir/start
cp --remove-destination conf/mailinabox.service /lib/systemd/system/mailinabox.service # target was previously a symlink so remove it first cp --remove-destination conf/mailinabox.service /lib/systemd/system/mailinabox.service # target was previously a symlink so remove it first