Produits Entr'ouvert » Authentic 2

                       url(r'^user/autologin$', api_views.userautologin,

                           name='a2-api-user-autologin'),

                       url(r'^user/autologin/(?P<token>[\w: -]+)$', api_views.userautologinview,

                           name='autologin'),

import datetime

from django import http

from django.contrib.auth import REDIRECT_FIELD_NAME, get_user_model

from django.core import signing

from django.utils.timezone import now

from django.utils.dateparse import parse_datetime

from django.views.generic.base import RedirectView

from django.core.urlresolvers import reverse

from utils import login

class IsSuperUser(permissions.BasePermission):

    """

    Allows access only to super users.

    """

    def has_permission(self, request, view):

        return request.user and request.user.is_superuser

class UserAutoLoginSerializer(serializers.Serializer):

    '''UserAutoLogin RPC payload'''

    email = serializers.EmailField()

    ou = serializers.SlugRelatedField(

        queryset=get_ou_model().objects.all(),

        slug_field='slug',

        required=False, allow_null=True)

    expire_duration = serializers.IntegerField(

        min_value=1, required=False, allow_null=False)

    redirect_url = serializers.CharField(

        required=False, allow_null=True)

    def validate(self, data):

        User = get_user_model()

        qs = User.objects.filter(email=data['email'])

        if data.get('ou'):

            qs = qs.filter(ou=data.get('ou'))

        try:

            self.user = qs.get()

        except User.DoesNotExist:

            raise serializers.ValidationError('no user found')

        except MultipleObjectsReturned:

            raise serializers.ValidationError('more than one user have this email')

        return data

class UserAutoLogin(BaseRpcView):

    permission_classes = (permissions.IsAuthenticated,

                          IsSuperUser)

    serializer_class = UserAutoLoginSerializer

    def rpc(self, request, serializer):

        data = {}

        data['email'] = serializer.validated_data.get('email')

        data['expire'] = (now()+datetime.timedelta(seconds=serializer.validated_data.get('expire_duration',300))).isoformat()

        if serializer.validated_data.get('ou'):

            data['ou'] = serializer.validated_data.get('ou')

        data[REDIRECT_FIELD_NAME] = serializer.validated_data.get('redirect_url')

        token = signing.dumps(data)

        autologinurl = request.build_absolute_uri(

            reverse('autologin', kwargs={'token': token}))

        return {'autologinurl': autologinurl}, status.HTTP_200_OK

userautologin = UserAutoLogin.as_view()

class UserAutoLoginView(RedirectView):

    def valid_token(self, token):

        try:

            result = signing.loads(token.replace(' ', ''))

            expire = result.get('expire')

            if expire:

                if now()>=parse_datetime(expire):

                    logging.getLogger(__name__).error(u'Specified token is expired')

                else:

                    return result

            else:

                logging.getLogger(__name__).error(u'No expire in token')

        except signing.BadSignature:

            logging.getLogger(__name__).error(u'Specified token is invalid')

        return None

    def get_redirect_url(self, *args, **kwargs):

            if kwargs.get('token') and kwargs.get('token').get(REDIRECT_FIELD_NAME):

                return kwargs.get('token').get(REDIRECT_FIELD_NAME)

            return reverse('auth_homepage')

    def get(self, request, *args, **kwargs):

        token = self.valid_token(kwargs.get('token'))

        url = None

        if token:

            logging.getLogger(__name__).info(u"Valid token : %s" % token)

            User = get_user_model()

            qs = User.objects.filter(email=token['email'])

            if token.get('ou'):

                qs = qs.filter(ou=token['ou'])

            try:

                user = qs.get()

                logging.getLogger(__name__).info(u"User : %s" % user)

                user.backend = 'authentic2.backends.models_backend.ModelBackend'

                login(request, user, 'autologin')

                url = self.get_redirect_url(token = token)

                logging.getLogger(__name__).info(u"Redirect to : %s" % url)

            except User.DoesNotExist:

                logging.getLogger(__name__).error(u'User %s from token does not exists' % token['email'])

            except MultipleObjectsReturned:

                logging.getLogger(__name__).error(u"More than one user return from token's email (%s)" % token['email'])

        if not url:

            url = reverse('auth_login')

        return http.HttpResponseRedirect(url)

userautologinview = UserAutoLoginView.as_view()