vulnerablecode/vulnerabilities/forms.py at 2d1190619ff500adbe2e66a7ed52e8a3e0eff65f · aboutcode-org/vulnerablecode · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
#
# Copyright (c) nexB Inc. and others. All rights reserved.
# VulnerableCode is a trademark of nexB Inc.
# SPDX-License-Identifier: Apache-2.0
# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
# See https://github.com/aboutcode-org/vulnerablecode for support or download.
# See https://aboutcode.org for more information about nexB OSS projects.
#

from django import forms
from django.contrib.admin.forms import AdminAuthenticationForm
from django.core.validators import validate_email
from django_altcha import AltchaField

from vulnerabilities.models import ApiUser


class PackageSearchForm(forms.Form):

    search = forms.CharField(
        required=True,
        widget=forms.TextInput(
            attrs={"placeholder": "Package name, purl or purl fragment"},
        ),
    )
    vulnerable_only = forms.ChoiceField(
        required=False,
        choices=[
            ("", "All Packages"),
            ("true", "Vulnerable Only"),
            ("false", "Non-Vulnerable Only"),
        ],
    )


class VulnerabilitySearchForm(forms.Form):

    search = forms.CharField(
        required=True,
        widget=forms.TextInput(
            attrs={"placeholder": "Vulnerability id or alias such as CVE or GHSA"}
        ),
    )


class AdvisorySearchForm(forms.Form):

    search = forms.CharField(
        required=True,
        widget=forms.TextInput(attrs={"placeholder": "Advisory id or alias such as CVE or GHSA"}),
    )


class ApiUserCreationForm(forms.ModelForm):
    """Support a simplified creation for API-only users directly from the UI."""

    captcha = AltchaField(floating=True, hidefooter=True)

    class Meta:
        model = ApiUser
        fields = (
            "email",
            "first_name",
            "last_name",
        )

    def __init__(self, *args, **kwargs):
        super(ApiUserCreationForm, self).__init__(*args, **kwargs)
        email_field = self.fields["email"]
        first_name_field = self.fields["first_name"]
        last_name_field = self.fields["last_name"]
        email_field.required = True
        email_field.widget.attrs["class"] = "input"
        email_field.widget.attrs["placeholder"] = "Email"
        first_name_field.widget.attrs["class"] = "input"
        first_name_field.widget.attrs["placeholder"] = "First Name"
        last_name_field.widget.attrs["class"] = "input"
        last_name_field.widget.attrs["placeholder"] = "Last Name"
        email_field.label = ""
        first_name_field.label = ""
        last_name_field.label = ""

    def save(self, commit=True):
        return ApiUser.objects.create_api_user(
            username=self.cleaned_data["email"],
            first_name=self.cleaned_data["first_name"],
            last_name=self.cleaned_data["last_name"],
        )

    def clean_username(self):
        username = self.cleaned_data["email"]
        validate_email(username)
        return username

    def save_m2m(self):
        pass


class PipelineSchedulePackageForm(forms.Form):
    search = forms.CharField(
        required=True,
        label=False,
        widget=forms.TextInput(
            attrs={
                "placeholder": "Search a pipeline...",
                "class": "input ",
            },
        ),
    )


class AdminLoginForm(AdminAuthenticationForm):
    captcha = AltchaField(floating=True, hidefooter=True)