Redirecting to Kitonga Portal...
``` ### Step 4: Backend Integration Script Create a script to handle Mikrotik login from your backend: ```python # Add to your Django views.py import requests from urllib.parse import quote def mikrotik_login_user(phone_number, mac_address, ip_address, mikrotik_ip="192.168.88.1"): """ Authenticate user with Mikrotik hotspot """ try: # Mikrotik login URL login_url = f"http://{mikrotik_ip}/login" # Prepare login data login_data = { 'username': phone_number, 'password': '', # Can be empty for voucher-based auth 'dst': '', 'popup': 'true' } # Send login request to Mikrotik response = requests.post(login_url, data=login_data, timeout=10) if response.status_code == 200 and 'You are logged in' in response.text: logger.info(f'User {phone_number} logged into Mikrotik successfully') return True else: logger.error(f'Mikrotik login failed for {phone_number}') return False except Exception as e: logger.error(f'Error logging user into Mikrotik: {str(e)}') return False ``` ### Step 5: Update Your Verify Access View Update your `verify_access` view to integrate with Mikrotik: ```python @api_view(['POST']) @permission_classes([AllowAny]) def verify_access(request): """ Verify access and login user to Mikrotik """ serializer = VerifyAccessSerializer(data=request.data) if not serializer.is_valid(): return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST) phone_number = serializer.validated_data['phone_number'] ip_address = serializer.validated_data.get('ip_address', request.META.get('REMOTE_ADDR')) mac_address = serializer.validated_data.get('mac_address', '') try: user = User.objects.get(phone_number=phone_number) has_access = user.has_active_access() if has_access: # Login user to Mikrotik mikrotik_success = mikrotik_login_user(phone_number, mac_address, ip_address) if mikrotik_success: # Log successful access AccessLog.objects.create( user=user, ip_address=ip_address, mac_address=mac_address, access_granted=True ) return Response({ 'access_granted': True, 'mikrotik_login': True, 'user': UserSerializer(user).data }) else: return Response({ 'access_granted': True, 'mikrotik_login': False, 'message': 'Access granted but Mikrotik login failed', 'user': UserSerializer(user).data }) else: return Response({ 'access_granted': False, 'message': 'Access expired or not found' }) except User.DoesNotExist: return Response({ 'access_granted': False, 'message': 'User not found. Please register and pay to access Wi-Fi.' }, status=status.HTTP_404_NOT_FOUND) ``` ### Step 6: Mikrotik API Integration (Advanced) For more control, use Mikrotik's API: ```python import socket import hashlib class MikrotikAPI: def __init__(self, host, username, password, port=8728): self.host = host self.username = username self.password = password self.port = port self.socket = None; def connect(self): self.socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) self.socket.connect((self.host, self.port)) def login(self): # Mikrotik API login implementation # This is a simplified version - use a proper Mikrotik API library pass; def add_hotspot_user(self, username, mac_address, ip_address): # Add active hotspot user command = f"/ip/hotspot/active/add" params = { "user": username, "address": ip_address, "mac-address": mac_address } # Send API command pass; ``` ### Step 7: Frontend Integration Update your frontend to handle Mikrotik parameters: ```javascript // In your React/Next.js portal const handlePaymentSuccess = async (paymentData) => { try { // Verify payment with backend const response = await fetch('/api/verify/', { method: 'POST', headers: { 'Content-Type': 'application/json', }, body: JSON.stringify({ phone_number: paymentData.phone_number, ip_address: getUrlParameter('ip'), mac_address: getUrlParameter('mac') }) }); const result = await response.json(); if (result.access_granted && result.mikrotik_login) { // Success - user is now connected showSuccessMessage('Connected successfully!'); // Optionally redirect to original URL const originalUrl = getUrlParameter('link-orig'); if (originalUrl) { window.location.href = decodeURIComponent(originalUrl); } } else { showErrorMessage('Payment successful but connection failed'); } } catch (error) { showErrorMessage('Connection error'); } }; function getUrlParameter(name) { const urlParams = new URLSearchParams(window.location.search); return urlParams.get(name); } ``` ### Step 8: Testing the Integration 1. **Test Hotspot Redirect**: ```bash # Connect device to Mikrotik Wi-Fi # Open browser - should redirect to your portal ``` 2. **Test API Integration**: ```bash curl -X POST http://your-backend:8000/api/verify/ -H "Content-Type: application/json" -d '{ "phone_number": "255712345678", "ip_address": "192.168.88.101", "mac_address": "AA:BB:CC:DD:EE:FF" }' ``` 3. **Monitor Mikrotik Logs**: ```routeros /log print where topics~"hotspot" ``` ### Troubleshooting 1. **Check Hotspot Active Users**: ```routeros /ip hotspot active print ``` 2. **View Hotspot Logs**: ```routeros /log print where topics~"hotspot" ``` 3. **Test API Connectivity**: ```routeros /tool fetch url="http://your-backend:8000/api/health/" check-certificate=no ``` 4. **Debug Login Issues**: - Check if user appears in active list - Verify IP and MAC address matching - Test direct Mikrotik login form ### Security Considerations 1. **Use HTTPS**: Configure SSL certificates for production 2. **API Authentication**: Secure your backend API endpoints 3. **MAC Address Validation**: Validate MAC addresses to prevent spoofing 4. **Rate Limiting**: Implement rate limiting on authentication endpoints 5. **Firewall Rules**: Configure proper firewall rules for hotspot users This integration allows your Kitonga backend to control Mikrotik hotspot access, enabling seamless user authentication and internet access control. \`\`\`