automatically create hedgedoc user accounts so that edits are no longer anonymous

ctfpad/helpers.py

@@ -1,6 +1,7 @@
 import pathlib
 import magic
 import requests
+from uuid import uuid4
 
 from ctftools.settings import (
     CODIMD_URL,
@@ -9,20 +10,12 @@
 
 
 def create_new_note() -> str:
-    """"Connects to CodiMD to create a new note, and returns its ID
+    """"Returns a unique note ID so that the note will be automatically created when accessed for the first time
 
     Returns:
         str: the string ID of the new note
     """
-    s = requests.Session()
-    res = s.get(f"{CODIMD_URL}/new", allow_redirects=False)
-    if res.status_code != requests.codes.found:
-        raise RuntimeError(f"CodiMD service returned HTTP code {res.status_code} (expected {requests.codes.found}): {res.reason}")
-    location = res.headers["location"]
-    res = s.get(f"{CODIMD_URL}{location}")
-    if res.status_code != requests.codes.ok:
-        raise RuntimeError(f"CodiMD service returned HTTP code {res.status_code} (expected {requests.codes.ok}): {res.reason}")
-    return  location
+    return f"/{uuid4()}"
 
 
 def check_note_id(id: str) -> bool:

ctfpad/templates/ctfpad/dashboard/dashboard.html

@@ -10,6 +10,16 @@
 
 {% include 'snippets/messages.html' %}
 
+<script>
+fetch("{{CODIMD_URL}}/login", {
+  method: 'POST',
+  mode: 'no-cors',
+  cache: 'no-cache',
+  credentials: 'include',
+  headers: { 'Content-Type': 'application/x-www-form-urlencoded'},
+  body: "email={{request.user}}%40localhost.localdomain&password=hedgedoc"});
+</script>
+
 <div aria-live="polite" aria-atomic="true" style="position: relative; min-height: 200px;">
 	<div style="position: absolute; top: 0; right: 0;">
 	  <div class="toast" role="alert" aria-live="assertive" aria-atomic="true">

ctfpad/views/__init__.py

@@ -1,5 +1,6 @@
 from ctfpad.forms import CreateUpdateCtfForm
 from ctfpad.decorators import only_if_authenticated_user
+from ctftools.settings import CODIMD_URL
 from django.http.request import HttpRequest
 from django.http.response import HttpResponse
 from django.shortcuts import redirect, render
@@ -61,6 +62,7 @@ def dashboard(request: HttpRequest) -> HttpResponse:
         "ctfs": ctfs,
         "current_ctfs": current_ctfs,
         "quick_add_form": quick_add_form,
+        "CODIMD_URL": CODIMD_URL,
     }
     return render(request, "ctfpad/dashboard/dashboard.html", context)
 

ctfpad/views/users.py

@@ -1,4 +1,5 @@
 import datetime
+import requests
 
 from django.contrib import auth, messages
 from django.contrib.auth.mixins import LoginRequiredMixin
@@ -21,7 +22,7 @@
 from ctfpad.models import Challenge, ChallengeFile, Member, Team
 from ctfpad.forms import CreateUserForm, UpdateMemberForm
 from ctfpad.decorators import only_if_unauthenticated_user, only_if_authenticated_user
-
+from ctftools.settings import CODIMD_URL
 
 class CtfpadLogin(LoginView):
     template_name = "users/login.html"
@@ -70,6 +71,17 @@ def form_valid(self, form):
             messages.error(self.request, "Username already exists, try logging in instead")
             return redirect("ctfpad:home")
 
+        # create the hedgedoc user
+        email = form.cleaned_data["username"] + '@localhost.localdomain'
+        res = requests.post(f'{CODIMD_URL}/register',
+            data={'email': email, 'password': 'hedgedoc'},
+            allow_redirects = False)
+
+        if res.status_code != requests.codes.found:
+            form.errors["name"] = "FailedToCreateHedgedocUser"
+            messages.error(self.request, "Failed to create Hedgedoc user")
+            return redirect("ctfpad:home")
+
         # create the django user
         user = User.objects.create_user(
             username=form.cleaned_data["username"],
@@ -137,4 +149,4 @@ def get_context_data(self, **kwargs):
         context.update(
             {"solved_challenges": Challenge.objects.filter(solver = self.object.id).order_by("-solved_time")}
         )
-        return context
+        return context

docker-compose.yml

@@ -31,6 +31,8 @@ services:
     environment:
       - CMD_DB_URL=postgres://ctfpad:tookahlaiphee2KieTeeg5ooxutang4o@db:5432/ctfpad
       - CMD_COOKIE_POLICY=none
+      - CMD_ALLOW_ANONYMOUS=false
+      - CMD_ALLOW_FREEURL=true
     ports:
       - "3000:3000"
     networks: