hi all
so im pretty much done with making my flask-wtf password web form, may add other bits to it but what you think
from flask import Flask, render_template, request
from flask_wtf import FlaskForm
from wtforms import StringField, PasswordField, BooleanField, DecimalField, RadioField, SelectField, TextAreaField, FileField, SubmitField
from wtforms.validators import InputRequired, Length, DataRequired, EqualTo, Regexp, ValidationError
import re
import subprocess
import smtplib
from email.mime.text import MIMEText
app = Flask(__name__)
app.config['SECRET_KEY'] = 'secretkey'
class PasswordForm(FlaskForm):
un = StringField('Username', [InputRequired(message='please enter your Username')])
op = PasswordField('Current Password', [InputRequired(message='please enter your current password')])
np = PasswordField('New Password', [InputRequired(message='please enter your new password')])
cnp = PasswordField('Confirm New Password')
dom = SelectField('Domain', choices=[('lon-prod-dc01.domain1.com', 'prod'), ('lon-corp-dc01.domain2.com', 'corp'), ('dc01.robo84.net', 'robo84')])
def validate_un(form, field):
if not field.data == form.un.data.lower():
raise ValidationError('Username needs to be Lowercase')
def validate_np(form, field):
if form.un.data:
if any (name in field.data.lower() for name in form.un.data.split(".")):
raise ValidationError('New password cant contain firstname or lastname')
if field.data.lower() == form.op.data.lower():
raise ValidationError('New password cant match Current password')
if re.search(r"\s", field.data):
raise ValidationError('New password cant contain any spaces')
if not re.search(r"[0-9]", field.data):
raise ValidationError('New password has to contain one number')
if not re.search(r"[a-z]", field.data):
raise ValidationError('New password has to contain one lower case character')
if not re.search(r"[A-Z]", field.data):
raise ValidationError('New password has to contain one upper case character')
if not re.search(r"[\`\¬\!\"\£\$\%\^\&\*\(\)\-\_\=\+\\\|\[\]\;\'\#\,\.\/\{\}\:\@\~\<\>\?]", field.data):
raise ValidationError('New password has to contain one special character')
if len(field.data) < 12:
raise ValidationError('New password must be at least 12 characters')
if not field.data == form.cnp.data:
raise ValidationError('New password has to match Confirm new password')
@app.route('/password', methods=['GET', 'POST'])
def password():
form = PasswordForm()
if request.method == 'POST' and form.validate():
result = subprocess.run(f'powershell.exe $cred = Import-CliXml -Path C:\\python\\cred.xml; Set-ADAccountPassword -Credential $cred -Identity {form.un.data} -OldPassword (ConvertTo-SecureString -AsPlainText {form.op.data} -Force) -NewPassword (ConvertTo-SecureString -AsPlainText {form.cnp.data} -Force) -Server {form.dom.data}', capture_output=True, text=True, shell=False)
if 'The specified network password is not correct' in result.stderr:
return 'your current password is wrong, please click back and try again'
if 'The password does not meet the length, complexity, or history requirement of the domain' in result.stderr:
return 'cant re-use one of your old passwords or cant change password as still less than one day old, please click back and try again'
if result.returncode == 0:
try:
une = subprocess.run(f'powershell.exe $cred = Import-CliXml -Path C:\\python\\cred.xml; Get-aduser -credential $cred -server {form.dom.data} -identity {form.un.data} -properties * | select-object -expandproperty mail', capture_output=True, text=True, shell=False)
smtp_server = '172.17.1.5'
smtp_user = 'robertkwild@gmail.com'
smtp_connection = smtplib.SMTP(smtp_server)
email_body = f'hello {form.un.data} your new password is {form.cnp.data} for {form.dom.data}'
email_message = MIMEText(email_body)
email_message['Subject'] = 'password change'
email_message['From'] = 'robertkwild@gmail.com'
smtp_connection.sendmail(smtp_user, {une.stdout}, email_message.as_string())
smtp_connection.quit()
return 'found an email for your user, please check email for your new password'
except:
return 'changed your password but could not find an email address for you, please contact IT to add one'
return render_template('password.html', form=form)
if __name__ == '__main__':
app.run(debug=True, ssl_context='adhoc')
#'<h1>The username is {}. The old password is {}. the new password is {}. changing for domain {}'.format(form.un.data, form.op.data, form.cnp.data, form.dom.data)
thanks,
rob