authentik.policies.geoip.api

 1"""GeoIP Policy API Views"""
 2
 3from django_countries import countries
 4from django_countries.serializer_fields import CountryField
 5from django_countries.serializers import CountryFieldMixin
 6from rest_framework import serializers
 7from rest_framework.generics import ListAPIView
 8from rest_framework.permissions import AllowAny
 9from rest_framework.viewsets import ModelViewSet
10
11from authentik.core.api.used_by import UsedByMixin
12from authentik.policies.api.policies import PolicySerializer
13from authentik.policies.geoip.models import GeoIPPolicy
14from authentik.policies.geoip.serializer_fields import DetailedCountryField
15
16
17class DetailedCountrySerializer(serializers.Serializer):
18    code = CountryField()
19    name = serializers.CharField()
20
21
22class ISO3166View(ListAPIView):
23    """Get all countries in ISO-3166-1"""
24
25    permission_classes = [AllowAny]
26    queryset = [{"code": code, "name": name} for (code, name) in countries]
27    serializer_class = DetailedCountrySerializer
28    filter_backends = []
29    pagination_class = None
30
31
32class GeoIPPolicySerializer(CountryFieldMixin, PolicySerializer):
33    """GeoIP Policy Serializer"""
34
35    countries_obj = serializers.ListField(
36        child=DetailedCountryField(), source="countries", read_only=True
37    )
38
39    class Meta:
40        model = GeoIPPolicy
41        fields = PolicySerializer.Meta.fields + [
42            "asns",
43            "countries",
44            "countries_obj",
45            "check_history_distance",
46            "history_max_distance_km",
47            "distance_tolerance_km",
48            "history_login_count",
49            "check_impossible_travel",
50            "impossible_tolerance_km",
51        ]
52
53
54class GeoIPPolicyViewSet(UsedByMixin, ModelViewSet):
55    """GeoIP Viewset"""
56
57    queryset = GeoIPPolicy.objects.all()
58    serializer_class = GeoIPPolicySerializer
59    filterset_fields = ["name"]
60    ordering = ["name"]
61    search_fields = ["name"]