support impersonating other users.

Support for impersonating other users using an impersonation operator when specifying the username.

The current impersonation operator is as. The left-hand argument is the actual user logging in, the right-hand argument is the impersonated user.

Example of how to use the operator:

app/ldap_authentication/authenticator.py

@@ -9,7 +9,7 @@ from ldap.ldapobject import SimpleLDAPObject
 from app.protocols import Authenticator
 
 # Impersonation constants
-IMPERSONATION_OPERATOR = ".as."
+IMPERSONATION_PATTERN = r"([a-z0-9]+) as ([a-z0-9]+)"
 IMPERSONATORS = ["ac4014", "infosys", "ip914", "jsbailey", "ld507", "rbc"]
 
 
@@ -77,11 +77,11 @@ class DocLdapAuthenticator(Authenticator):
         :return: attr_name -> attr_value dict for given username
         """
         logging_in_as = username
-        if IMPERSONATION_OPERATOR in username:
-            users = username.split(IMPERSONATION_OPERATOR)
-            if users[0] in IMPERSONATORS:
-                username = users[0]
-                logging_in_as = users[1]
+        users = re.match(IMPERSONATION_PATTERN, username)
+        if users:
+            impersonator, impersonated = users.groups()
+            username = impersonator
+            logging_in_as = impersonated if impersonator in IMPERSONATORS else impersonator
         connection = ldap.initialize(self.server_url)
         connection.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_ALLOW)
         connection.set_option(ldap.OPT_X_TLS_NEWCTX, 0)