mirror of
https://github.com/chatmail/relay.git
synced 2026-05-10 16:04:37 +00:00
d0c396538b
Per Python docs, secrets module should be used for security-sensitive data. random.choices uses Mersenne Twister PRNG which is predictable. secrets.choice was already used for password generation in the same file.
52 lines
1.5 KiB
Python
52 lines
1.5 KiB
Python
#!/usr/local/lib/chatmaild/venv/bin/python3
|
|
|
|
"""CGI script for creating new accounts."""
|
|
|
|
import json
|
|
import secrets
|
|
import string
|
|
from urllib.parse import quote
|
|
|
|
from chatmaild.config import Config, read_config
|
|
|
|
CONFIG_PATH = "/usr/local/lib/chatmaild/chatmail.ini"
|
|
ALPHANUMERIC = string.ascii_lowercase + string.digits
|
|
ALPHANUMERIC_PUNCT = string.ascii_letters + string.digits + string.punctuation
|
|
|
|
|
|
def create_newemail_dict(config: Config):
|
|
user = "".join(
|
|
secrets.choice(ALPHANUMERIC) for _ in range(config.username_max_length)
|
|
)
|
|
password = "".join(
|
|
secrets.choice(ALPHANUMERIC_PUNCT)
|
|
for _ in range(config.password_min_length + 3)
|
|
)
|
|
return dict(email=f"{user}@{config.mail_domain}", password=f"{password}")
|
|
|
|
|
|
def create_dclogin_url(email, password):
|
|
"""Build a dclogin: URL with credentials and self-signed cert acceptance.
|
|
|
|
Uses ic=3 (AcceptInvalidCertificates) so chatmail clients
|
|
can connect to servers with self-signed TLS certificates.
|
|
"""
|
|
return f"dclogin:{quote(email, safe='@')}?p={quote(password, safe='')}&v=1&ic=3"
|
|
|
|
|
|
def print_new_account():
|
|
config = read_config(CONFIG_PATH)
|
|
creds = create_newemail_dict(config)
|
|
|
|
result = dict(email=creds["email"], password=creds["password"])
|
|
if config.tls_cert_mode == "self":
|
|
result["dclogin_url"] = create_dclogin_url(creds["email"], creds["password"])
|
|
|
|
print("Content-Type: application/json")
|
|
print("")
|
|
print(json.dumps(result))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
print_new_account()
|