diff --git a/.python-version b/.python-version
index 3e72aa698..2c0733315 100644
--- a/.python-version
+++ b/.python-version
@@ -1 +1 @@
-3.11.10
+3.11
diff --git a/README.md b/README.md
index ba3cc0745..8d2f08231 100644
--- a/README.md
+++ b/README.md
@@ -289,3 +289,7 @@ To update GO countries and districts Mapbox tilesets, run the management command
## Import GEC codes
To import GEC codes along with country ids, run `python manage.py import-gec-code appeal_ingest_match.csv`. The CSV should have the columns `'GST_code', 'GST_name', 'GO ID', 'ISO'`
+
+## SSO setup
+
+For more info checkout [GO-SSO](./docs/go-sso.md)
diff --git a/api/forms.py b/api/forms.py
index 8394cc003..86ff89a09 100644
--- a/api/forms.py
+++ b/api/forms.py
@@ -1,6 +1,10 @@
from django import forms
+from django.contrib.auth import authenticate
+from django.contrib.auth.models import User
+from django.core.exceptions import ValidationError
from django.utils.translation import gettext_lazy as _
+from .logger import logger
from .models import Action, ActionOrg, ActionType
@@ -11,3 +15,41 @@ class ActionForm(forms.ModelForm):
class Meta:
model = Action
fields = "__all__"
+
+
+class LoginForm(forms.Form):
+ email = forms.CharField(label=_("email"), required=True)
+ password = forms.CharField(
+ label=_("password"),
+ widget=forms.PasswordInput(),
+ required=True,
+ )
+
+ # FIXME: We need to refactor this code
+ def get_user(self, username, password):
+ if "ifrc" in password.lower() or "redcross" in password.lower():
+ logger.warning("User should be warned to use a stronger password.")
+
+ if username is None or password is None:
+ raise ValidationError("Should not happen. Frontend prevents login without username/password")
+
+ user = authenticate(username=username, password=password)
+ if user is None and User.objects.filter(email=username).count() > 1:
+ users = User.objects.filter(email=username, is_active=True)
+ # FIXME: Use users.exists()
+ if users:
+ # We get the first one if there are still multiple available is_active:
+ user = authenticate(username=users[0].username, password=password)
+
+ return user
+
+ def clean(self):
+ cleaned_data = super().clean()
+ email = cleaned_data.get("email")
+ password = cleaned_data.get("password")
+ user = self.get_user(email, password)
+ if not user:
+ raise ValidationError("Invalid credentials.")
+
+ cleaned_data["user"] = user
+ return cleaned_data
diff --git a/api/management/commands/oauth_cleartokens.py b/api/management/commands/oauth_cleartokens.py
new file mode 100644
index 000000000..2498330e4
--- /dev/null
+++ b/api/management/commands/oauth_cleartokens.py
@@ -0,0 +1,13 @@
+from django.core import management
+from django.core.management.base import BaseCommand
+from sentry_sdk.crons import monitor
+
+from main.sentry import SentryMonitor
+
+
+class Command(BaseCommand):
+ help = "A wrapper for cleartokens command to track using sentry cron monitor. Feel free to use cleartokens"
+
+ @monitor(monitor_slug=SentryMonitor.OAUTH_CLEARTOKENS)
+ def handle(self, *args, **kwargs):
+ management.call_command("cleartokens")
diff --git a/api/templates/oauth2_provider/base.html b/api/templates/oauth2_provider/base.html
new file mode 100644
index 000000000..d2026256d
--- /dev/null
+++ b/api/templates/oauth2_provider/base.html
@@ -0,0 +1,127 @@
+{% load static %}
+
+
+
+
+ {% block title %}{% endblock title %}
+
+
+
+
+
+
+
+ {% block css %}
+ {% endblock css %}
+
+
+
+
+
+
+
+
+ {% block content %}
+ {% endblock content %}
+