Premiere implementation de sso

Reviewed-on: #37

.gitignore

@@ -1,3 +1,7 @@
 db.sqlite3
-venv/*
-media/*
+venv/
+media/
+staticfiles/
+.env
+migrations/
+*.pyc

Jenkinsfile

@@ -1,6 +1,10 @@
 pipeline 
 { 
     agent any
+    options {
+        // This is required if you want to clean before build
+        skipDefaultCheckout(true)
+    }
 
     environment
     {
@@ -14,6 +18,7 @@ pipeline
             steps 
             { 
                 sh 'echo "Debut du pipeline"'
+                cleanWs()
                 checkout scm 
             } 
         }
@@ -22,16 +27,24 @@ pipeline
             when { branch 'main' }
             steps {
                 sh '''
-                echo $SUDO_PASSWORD
-                cd /jenkins_test/sirh
-                echo $SUDO_PASSWORD | sudo -S chown -R jenkins:jenkins /jenkins_test/sirh
-                git pull origin main
+                cd /var/www/sirh
+                echo $SUDO_PASSWORD | sudo -S chown -R jenkins:jenkins /var/www/sirh
+
+                git fetch origin main
+                git reset --hard origin/main
+
                 python3 -m venv venv 
                 . venv/bin/activate
                 pip install -r requirements.txt
+
                 python manage.py makemigrations
                 python manage.py migrate
+                echo $SUDO_PASSWORD | sudo -S rm -r staticfiles
+                python manage.py collectstatic --noinput
+                
+                echo $SUDO_PASSWORD | sudo -S chown -R www-data:www-data /var/www/sirh
                 echo "Deploiement reussi"
+                echo $SUDO_PASSWORD | sudo -S supervisorctl restart sirh
                 '''
             }
         } 

SIRH/settings.py

@@ -12,21 +12,22 @@ https://docs.djangoproject.com/en/5.2/ref/settings/
 
 import os
 from pathlib import Path
+from decouple import config
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
 
-
 # Quick-start development settings - unsuitable for production
 # See https://docs.djangoproject.com/en/5.2/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure--wdb9t(77rvyac$_q!n5gw86&0r(0&&j171v9h!-_$jahsza*5'
+SECRET_KEY = config('SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = False
+DEBUG = config('DEBUG', default=True, cast=bool)
 
-ALLOWED_HOSTS = ["https://support.cerfig.org", "support.cerfig.org"]
+ALLOWED_HOSTS = config('ALLOWED_HOSTS', default=[]).split(',') 
+CSRF_TRUSTED_ORIGINS = config("CSRF_TRUSTED_ORIGINS", default=[]).split(",")
 
 # Application definition
 
@@ -40,12 +41,9 @@ INSTALLED_APPS = [
     'gestion_employe',
     'gestion_conge',
     'gestion_projet',
-    'gestion_salle',
-    'simple_sso.sso_server'
+    'gestion_salle'
 ]
 
-LOGIN_URL = 'login'  
-
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
@@ -79,25 +77,18 @@ WSGI_APPLICATION = 'SIRH.wsgi.application'
 # Database
 # https://docs.djangoproject.com/en/5.2/ref/settings/#databases
 
-# DATABASES = {
-#     'default': {
-#         'ENGINE': 'django.db.backends.mysql',
-#         'NAME': 'sirh',
-#         'USER': 'sirh',
-#         'PASSWORD': 'sirh-cerfig',
-#         'HOST': 'localhost',
-#         'PORT': '3306',
-#     }
-# }
 
 DATABASES = {
-    'default': {
-        'ENGINE': 'django.db.backends.sqlite3',
-        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
+        'default': {
+        'ENGINE': 'django.db.backends.mysql',
+        'NAME': config("DB_NAME"),
+        'USER': config("DB_USER"),
+        'PASSWORD': config("DB_PASSWORD"),
+        'HOST': config("DB_HOST"),
+        'PORT': config("DB_PORT", cast=int),
     }
 }
 
-
 # Password validation
 # https://docs.djangoproject.com/en/5.2/ref/settings/#auth-password-validators
 
@@ -149,11 +140,21 @@ MEDIA_ROOT = BASE_DIR / "media"
 
 DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
+# Connexion sso
+# LOGIN_URL = '/client/'
+LOGIN_URL = 'simple-sso-login'
+
+SSO_PRIVATE_KEY = 'D2brFY3LnNDLQBBnvYPXAn185Wi9EpPvnHsUosjEZ9vZMyEtXqkcVfFWkVbN0xpG'
+SSO_PUBLIC_KEY = 'm9JDP3uGPmGG9ULqPw2BY3ryBNMTGRsuukgIOhk7lIN9lT0wlr2zhoRZiNZ28UCM'
+SSO_SERVER  = 'http://test-authentification.cerfig.org:89/server/'
+#SSO_LOGOUT_URL = 'http://test-authentification.cerfig.org:89/deconnexion'
+
+# Configuration de l'email
 EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
 EMAIL_HOST = 'ssl0.ovh.net'
 EMAIL_PORT = 465
 EMAIL_USE_SSL = True
 EMAIL_USE_TLS = False
-EMAIL_HOST_USER = 'support.it@cerfig.org'
-EMAIL_HOST_PASSWORD = 'Cerfig2025'
+EMAIL_HOST_USER = config("EMAIL_HOST_USER")
+EMAIL_HOST_PASSWORD = config("EMAIL_HOST_PASSWORD")
 DEFAULT_FROM_EMAIL = EMAIL_HOST_USER

SIRH/sso.py

@@ -0,0 +1,33 @@
+# SGL/sso.py
+from gestion_employe.models import Employe, Departement
+from simple_sso.sso_client.client import Client
+from django.contrib.auth import get_user_model
+from django.contrib.auth.models import Group
+
+User = get_user_model()
+
+class SIRHClient(Client):
+    def build_user(self, user_data):
+        """Crée le User et son Profile avec les infos reçues du serveur."""
+        user_data_copy = user_data.copy()
+        user_data.pop("departement")
+        user_data.pop("chef_departement")
+        user_data.pop("groups")
+
+        user = super().build_user(user_data)
+        departement = Departement.objects.get_or_create(
+            nom=user_data_copy.get("departement", ""))[0]
+
+        Employe.objects.update_or_create(
+            user = user,
+            defaults = {
+                "departement": departement,
+                "chef": user_data_copy.get("chef_departement", ""),
+            }
+        )
+
+        for group_name in user_data_copy.get("groups", []):
+            group, _ = Group.objects.get_or_create(name=group_name)
+            user.groups.add(group)
+
+        return user

SIRH/templates/SIRH/BASE.html

@@ -15,8 +15,9 @@
     <body>
         <div class="container-fluid">
             <div class="row flex-nowrap">
+                {% include 'parts/menu_application.html' %}
                 {% include 'parts/menu_principal.html' %}
-                <div class="col-9 p-4">
+                <div class="col p-4">
                     {% block 'contenu' %} {% endblock %}
                 </div>
             </div>

SIRH/templates/SIRH/login.html

@@ -24,15 +24,16 @@
                         {% endfor %}
                     {% endif %}
                     {% csrf_token %}
+                    <input type="hidden" name="next" value="{{ next }}">
                     <div class="mb-3">
-                    <label for="mail">Votre adresse email :</label>
-                    <input type="text" name="mail" class="form-control" placeholder="Entrez votre e-mail" required>
+                        <label for="mail">Votre adresse email :</label>
+                        <input type="text" name="mail" class="form-control" placeholder="Entrez votre e-mail" required>
                     </div>
                     <div class="mb-3">
-                    <label for="mot_de_passe">Mot de passe</label>
-                    <input type="password" name="mot_de_passe" class="form-control" placeholder="Entrez votre mot de passe" required>
-                    <i class="bi bi-eye toggle-password" onclick="togglePassword()" 
-                        style="position:absolute; right:10px; top:38px; cursor:pointer;"></i>
+                        <label for="mot_de_passe">Mot de passe</label>
+                        <input type="password" name="mot_de_passe" class="form-control" placeholder="Entrez votre mot de passe" required>
+                        <i class="bi bi-eye toggle-password" onclick="togglePassword()" 
+                            style="position:absolute; right:10px; top:38px; cursor:pointer;"></i>
                     </div>
                     <button type="submit" class="btn btn-primary w-100">Se connecter</button>
                 </form>

SIRH/templates/SIRH/parts/menu_application.html

@@ -0,0 +1,8 @@
+<div class="col-1 bg-danger border d-flex flex-column vh-100 pt-5 sticky-top">
+    <a href="http://test-sirh.cerfig.org:89/" class="text-white text-center fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+        <i class="bi bi-people-fill fs-1 d-block"></i>SIRH
+    </a>
+    <a href="http://test-sgl.cerfig.org:89/" class="text-white text-center fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+        <i class="bi bi-building-gear fs-1 d-block"></i> SGL
+    </a>
+</div>

SIRH/templates/SIRH/parts/menu_principal.html

@@ -2,40 +2,47 @@
 {% load tags_personnaliser %}
 
 <div class="col-3 bg-danger d-flex flex-column vh-100 pt-5 sticky-top">
-    <a href="{% url 'gestion_employe:mon-profil' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <div class="text-center mb-4">
+        {% if user.employe.photo %}
+            <img src="{{ user.employe.photo.url }}" 
+                class="rounded-circle" 
+                width="100" 
+                height="100"
+                style="object-fit:cover;">
+        {% else %}
+            <i class="bi bi-person-circle text-white" style="font-size:60px;"></i>
+        {% endif %}
+        <div class="text-white mt-2 fw-bold fs-5">
+            {{ user.first_name }} {{ user.last_name }}
+        </div>
+    </div>
+
+    <a href="{% url 'gestion_employe:mon-profil' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-person-circle"></i> Mon profil
     </a>
     {% if user|has_group:"ressource_humaine" or user|has_group:"direction" %}
-    <a href="{% url 'gestion_employe:index' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <a href="{% url 'gestion_employe:index' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-speedometer2"></i> Tableau de bord
     </a>
     {% endif %}
     {% if user|has_group:"ressource_humaine" or user|has_group:"direction" %}
-    <a href="{% url 'gestion_projet:index' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <a href="{% url 'gestion_projet:index' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-folder"></i> Gestion des Projets
     </a>
     {% endif %}
-    <a href="{% url 'gestion_conges:conge' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <a href="{% url 'gestion_conges:conge' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-airplane"></i> Gestion des congés
     </a>
     {% if user|is_chef_projet %}
-    <a href="{% url 'gestion_projet:activites-projet' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <a href="{% url 'gestion_projet:activites-projet' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-list-task"></i> Suivi des Activités
     </a>
     {% endif %}
-    <a href="{% url 'gestion_salle:reservation-salle' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    <a href="{% url 'gestion_salle:reservation-salle' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-calendar-check"></i> Réservation
     </a>
-    {% comment %} <a href="{% url 'rapport-rh' %}" class="text-white fw-bold text-decoration-none mb-2" style="font-size:1.2em">
-        <i class="bi bi-graph-up"></i> Rapports et Statistiques
-    </a> {% endcomment %}
-    {% comment %} <a href="" class="text-white fw-bold text-decoration-none mb-2" style="font-size:1.2em">
-        <i class="bi bi-person-gear"></i> Gestion des Utilisateurs
-    </a> {% endcomment %}
-    {% comment %} <a href="{% url 'gestion_employe:departement' %}" class="text-white fw-bold text-decoration-none mb-2" style="font-size:1.2em">
-        <i class="bi bi-gear"></i> Paramètres
-    </a> {% endcomment %}
-    <a href="{% url 'deconnexion' %}" class="text-white fw-bold text-decoration-none mb-4" style="font-size:1.4em">
+    {% comment %} {% url 'deconnexion' %} {% endcomment %}
+    <a href="http://test-authentification.cerfig.org:89/deconnexion" class="text-white fw-bold text-decoration-none mb-4" style="font-size: 1.2em;">
         <i class="bi bi-box-arrow-right"></i> Déconnexion
     </a>
-</div>
+</div>

SIRH/urls.py

@@ -16,32 +16,29 @@ Including another URLconf
 """
 from django.contrib import admin
 from django.urls import include, path
-from django.conf.urls.static import static
+# from django.conf.urls.static import static
 from django.conf import settings
-# from simple_sso.sso_server.server import Server
 
-from . import views
+from .sso import SIRHClient
 
-# server_sso = Server()
+client_sirh = SIRHClient(
+    settings.SSO_SERVER,
+    settings.SSO_PUBLIC_KEY,
+    settings.SSO_PRIVATE_KEY
+)
 
-urlpatterns = [
+urlpatterns = [    
+    # path('login/',
+    #     views.login_view,
+    #     name='login'
+    # ),
+    # path(
+    #     'deconnexion/',
+    #     views.deconnexion_view,
+    #     name='deconnexion'
+    # ),
     path(
         '',
-        views.login_view,
-        name='index'
-    ), 
-    
-    path('login/',
-        views.login_view,
-        name='login'
-    ),
-    path(
-        'deconnexion/',
-        views.deconnexion_view,
-        name='deconnexion'
-    ),
-    path(
-        'employé/',
         include("gestion_employe.urls")
     ),
     path(
@@ -59,9 +56,7 @@ urlpatterns = [
     path(
         'admin/',
         admin.site.urls
-    ),  
-    # path(
-    #     'sso',
-    #     include(server_sso.get_urls())
-    # )
-] + static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)
+    ), 
+    path("client/", include(client_sirh.get_urls())),
+]
+#  + static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)

SIRH/views.py

@@ -1,37 +0,0 @@
-from django.contrib.auth import authenticate, login, logout
-from django.shortcuts import render, redirect
-from django.contrib import messages
-
-def login_view(request):
-    """
-    Gère la connexion des utilisateurs avec redirection selon le rôle et 
-    vérification de l'acceptation de la politique d'utilisation.
-    """
-    if request.method == 'POST':
-        email = request.POST.get('mail')
-        password = request.POST.get('mot_de_passe')
-
-        if not (email and password):
-            messages.error(request, "Veuillez remplir tous les champs.")
-            return render(request, 'login.html')
-
-        user = authenticate(request, username=email, password=password)
-
-        if user is None:
-            messages.error(request, "Nom d’utilisateur ou mot de passe incorrect.")
-            return render(request, 'login.html')
-
-        if not user.is_active:
-            messages.error(request, "Compte inactif. Contactez l'administrateur.")
-            return render(request, 'login.html')
-
-        login(request, user)
-
-        return redirect("gestion_conges:conge")
-
-    return render(request, 'login.html')
-
-def deconnexion_view(request):
-    """Gère la déconnexion de l'utilisateur."""
-    logout(request)
-    return redirect('login')

fonction_utilitaire/fonctions_utilitaire.py

@@ -1,5 +1,5 @@
 from django.utils import timezone
-from gestion_employe.models import Contrat
+from gestion_employe.models import Contrat, Employe
 from gestion_conge.models import Conge
 
 
@@ -7,6 +7,7 @@ QUOTA_CONGE_ANNUEL = 30
 NOMBRE_PAGINATION = 8
 DEBUT_RAPPEL = 60
 DUREE_FIN_CONTRAT = 90
+# EMAIL_ASSISTANTE_DE_DIRECTION = list(Employe.objects.filter(fonction="assistant_direction").values_list('user__email', flat=True))
 
 def solde_conge(employe):
     """Fonction de calcul du solde de congé restant l'employé"""
@@ -31,4 +32,26 @@ def solde_conge(employe):
         "success": True,
         "quota_annuel": QUOTA_CONGE_ANNUEL - jours_conges_valider,
         "nombre_jours_valide": jours_conges_valider
-    }
+    }
+
+def envoyer_mail(sujet, message, destinataires):
+    """Fonction d'envoi de mail"""
+    from django.core.mail import send_mail
+    from django.conf import settings
+
+    send_mail(
+        sujet,
+        message,
+        settings.EMAIL_HOST_USER,
+        destinataires,
+        fail_silently=False,
+    )
+
+def destinataire_mail_demande_conges(employe):
+    """Fonction de récupération des destinataires pour les mails de demande de congés"""
+    if employe.chef:
+        return EMAIL_ASSISTANTE_DE_DIRECTION
+    else:
+        if employe.departement:
+            chefs_departement = Employe.objects.filter(departement=employe.departement, chef=True)
+            return list(chefs_departement.values_list('user__email', flat=True))

gestion_conge/migrations/0001_initial.py

@@ -1,4 +1,4 @@
-# Generated by Django 5.2.13 on 2026-04-17 12:03
+# Generated by Django 5.2.13 on 2026-06-16 11:06
 
 import django.db.models.deletion
 from django.db import migrations, models