~sircmpwn/pass-rotate: passrotate/providers/linode.py - sourcehut git


                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
from passrotate.provider import Provider, ProviderOption, PromptType, register_provider
from passrotate.forms import get_form, get_form_data
from bs4 import BeautifulSoup
from urllib.parse import urlparse
import requests

class Linode(Provider):
    """
    [linode.com]
    username=Your Linode username
    expires=Optional, months till new password expires (0, 1, 3, 6, 12)
    """
    name = "Linode"
    domains = [
        "linode.com",
    ]
    options = {
        "username": ProviderOption(str, "Your Linode username"),
        "expires": ProviderOption({
            "Never": "0",
            "1 month": "1",
            "3 months": "3",
            "6 months": "6",
            "12 months": "12",
        }, "Password expiry")
    }

    def __init__(self, options):
        self.username = options["username"]
        self.expiry = options.get("expires") or "0"

    def prepare(self, old_password):
        self._session = requests.Session()
        r = self._session.get("https://manager.linode.com")
        form = get_form(r.text, id="CFForm_1")
        form.update({
            "auth_username": self.username,
            "auth_password": old_password,
        })
        r = self._session.post("https://manager.linode.com/session/login", data=form)
        soup = BeautifulSoup(r.text, "html.parser")
        title = soup.find("title")
        if title.text != "Session Engaged!":
            raise Exception("Unable to log into Linode with your current password")
        r = self._session.get("https://manager.linode.com/linodes")
        url = urlparse(r.url)
        if url.path.startswith("/session/twofactor"):
            code = self.prompt("Enter your two-factor (TOTP) code", PromptType.totp)
            soup = BeautifulSoup(r.text, "html.parser")
            form = soup.find("form", attrs={ "id": "CFForm_1" })
            action = form.get("action", "")
            r = self._session.post(action, data={
                "auth_code": code
            })
        r = self._session.get("https://manager.linode.com/profile/index")
        # Linode has a weird form on this page
        soup = BeautifulSoup(r.text, "html.parser")
        inputs = soup.find_all("input")
        form = get_form_data(inputs)
        form.update({ "auth_password": old_password })
        r = self._session.post("https://manager.linode.com/profile/reauth", data=form)
        r = self._session.get("https://manager.linode.com/profile/auth")
        # This form is also weird. Why you gotta be weird, Linode?
        soup = BeautifulSoup(r.text, "html.parser")
        self._form = {
            "authenticity_token": soup.find("input", attrs={ "name": "authenticity_token" }).get("value", "")
        }

    def execute(self, old_password, new_password):
        self._form.update({
            "password": new_password,
            "password2": new_password,
            "expires": self.expiry
        })
        r = self._session.post("https://manager.linode.com/profile/password", data=self._form)
        if r.status_code != 200:
            raise Exception("Failed to update Linode password")

register_provider(Linode)