EsupPortail / Esup-Pod / 17546551976

import ipaddress

from django.conf import settings

from django.utils.translation import gettext_lazy as _

ALLOWED_SUPERUSER_IPS = getattr(settings, "ALLOWED_SUPERUSER_IPS", [])

def ip_in_allowed_range(ip) -> bool:

    try:

        ip_obj = ipaddress.ip_address(ip)

    except ValueError:

        return False

    for allowed in ALLOWED_SUPERUSER_IPS:

        try:

            if '/' in allowed:

                net = ipaddress.ip_network(allowed, strict=False)

                if ip_obj in net:

                    return True

                if ip_obj == ipaddress.ip_address(allowed):

                    return True

        except ValueError:

            continue

    return False

class IPRestrictionMiddleware:

    def __init__(self, get_response) -> None:

        self.get_response = get_response

    def __call__(self, request):

        ip = request.META.get('REMOTE_ADDR')

        user = request.user

        if user.is_authenticated and user.is_superuser:

            if not ip_in_allowed_range(ip):

                user.is_superuser = False

                user.last_name = _(

        return self.get_response(request)