django-unifi-portal: A Python repository from IsaacDdR

Django-Unifi-Portal is a custom portal based on two authentication/registration mechanism:

Django user authentication system
Facebook OAuth2 logging.

It is a powerful reusable Django app for interacting with the Unifi AP Controller software, version 4 and 5.

The UniFi® AP is an Access Point ideal for deployment of high-performance wireless networks. Here you can find more details.

Overview

Django-Unifi-Portal works with Django 1.10/1.11. It is based on this article from community.

How It Works

When an guest try to connects to a wireless network with the guest policy enabled, http requests are redirected to the django-portal server.

When the form is submitted or the Facebook sign in has been validated, Django validates the user and then uses the Unifi API to authorize the guest’s MAC address.

Quick start

Setup Django-Unifi-Portal application in Python environment:
```
$ pip install django-unifi-portal
```

To get the latest version

 $ pip install git+https://github.com/bsab/django-unifi-portal.git

Migrate the django_unifi_portal app to create the user model:

 $ python manage.py migrate django_unifi_portal
 $ python manage.py migrate

Add "django_unifi_portal" to your INSTALLED_APPS:

    INSTALLED_APPS = (
        ...,
        'django_unifi_portal',
    )

Copy this configuration and paste it on file named unifi_settings.py:

from django.core.urlresolvers import reverse_lazy

UNIFI_INSTALLED_APPS = [
    # material apps
    'material',
    'oauth2_provider',
    'social_django',
    'rest_framework_social_oauth2',
    'django_unifi_portal',
]

UNIFI_LOGIN_URL = '/unifi-portal/login'
UNIFI_LOGIN_REDIRECT_URL = reverse_lazy('index')

UNIFI_TEMPLATE_CONTEXT_PROCESSORS = [
        'material.frontend.context_processors.modules',
        'social_django.context_processors.backends',
        'social_django.context_processors.login_redirect',
        'django_unifi_portal.context_processor.unifi_context'
]

UNIFI_TEMPLATE_BUILTINS = 'material.templatetags.material_form'

UNIFI_AUTHENTICATION_BACKENDS = (

    # Others auth providers (e.g. Google, OpenId, etc)

    # Facebook OAuth2
    'social_core.backends.facebook.FacebookAppOAuth2',
    'social_core.backends.facebook.FacebookOAuth2',

    # Django
    'django.contrib.auth.backends.ModelBackend',

)

UNIFI_SOCIAL_AUTH_PIPELINE = (
    'social_core.pipeline.social_auth.social_details',
    'social_core.pipeline.social_auth.social_uid',
    'social_core.pipeline.social_auth.auth_allowed',
    'django_unifi_portal.pipeline.manage_auth_already_associated',
    'social_core.pipeline.social_auth.social_user',
    'social_core.pipeline.user.get_username',
    #'django_unifi_portal.pipeline.require_email',
    'social_core.pipeline.mail.mail_validation',
    'social_core.pipeline.user.create_user',
    'social_core.pipeline.social_auth.associate_user',
    'social_core.pipeline.debug.debug',
    'social_core.pipeline.social_auth.load_extra_data',
    'social_core.pipeline.user.user_details',
    'django_unifi_portal.pipeline.user_details',
    'django_unifi_portal.pipeline.save_profile',
    'social_core.pipeline.debug.debug',
)

# Define SOCIAL_AUTH_FACEBOOK_SCOPE to get extra permissions from facebook.
# Email is not sent by default, to get it, you must request the email permission:
SOCIAL_AUTH_FACEBOOK_SCOPE = ['email']
SOCIAL_AUTH_FACEBOOK_PROFILE_EXTRA_PARAMS = {
    'fields': 'id, name, about, email, birthday, gender, hometown, languages'
}

UNIFI_SERVER = "<your UniFi Server ip>
UNIFI_PORT = <your Unifi Server Port>  # default is 8443
UNIFI_VERSION = 'v4'
UNIFI_SITE_ID = 'default'

# It's important to note that if this server is offsite, you need to have port 8443 forwarded through to it
UNIFI_SSID = '<your ssid name>'
UNIFI_LOGO = '<relative path under the static folder to the logo png>'

UNIFI_USER = "<your UniFi Username>"
UNIFI_PASSWORD = "<your UniFi Password>"
UNIFI_TIMEOUT_MINUTES = <minutes>  # ex. 8 hours is 480

# Facebook configuration
SOCIAL_AUTH_FACEBOOK_KEY = "<your Facebook key>"
SOCIAL_AUTH_FACEBOOK_SECRET = "<your Facebook api secret>"

Then add this configuration to your settings.py:

#################################################
#                 UNIFI CONFIGURATION           #
#################################################
from unifi_settings import *

INSTALLED_APPS += UNIFI_INSTALLED_APPS

LOGIN_URL = UNIFI_LOGIN_URL
LOGIN_REDIRECT_URL = UNIFI_LOGIN_REDIRECT_URL

TEMPLATES[0]['OPTIONS']['context_processors'] += UNIFI_TEMPLATE_CONTEXT_PROCESSORS

# shortcut for in form templates
try:
    # shortcut for in form templates
    from django.template.base import add_to_builtins
    add_to_builtins(UNIFI_TEMPLATE_BUILTINS)
except ImportError:
    """
    Django 1.9.
    """
    TEMPLATES[0]['OPTIONS']['builtins'] = [
        UNIFI_TEMPLATE_BUILTINS,
    ]

AUTHENTICATION_BACKENDS = UNIFI_AUTHENTICATION_BACKENDS
SOCIAL_AUTH_PIPELINE = UNIFI_SOCIAL_AUTH_PIPELINE

You need to map the views to an url in url.py file:
```
url(r'', include('django_unifi_portal.urls')),
```

If you want you can use the base UnifiUser model or extend it defining a simple model like this :

from unifi_portal.models import UnifiUser
class CustomUnifiUser(UnifiUser):
   nick = models.CharField(max_length=100)

Unifi Server Configuration

Last, setup UniFi to point to the IP of the django portal al server. You can test authentication by inserting a dummy account in to the database.

It's important to note that you cannot include folders in your External Portal option, just an IP address. You can either modify the default Apache2 index.html file to redirect to the appropriate path, or create a symlink to the guest/s/default/index.php file.

Contributing

Contributions welcome; Please submit all pull requests against the master branch. If your pull request contains Python patches or features, you should include relevant unit tests. Thanks!

Author

Sabatino Severino, @bsab

License

Django-Unifi-Portal is available under the MIT license. See the LICENSE file for more info.

Disclaimer

Ubiquiti will not support this code. It is provided simply as an example of a rudimentary, functioning external portal.

##PLEASE NOTE: This package is still in development so please use with caution.

IsaacDdR/django-unifi-portal