mirror of
https://github.com/YunoHost-Apps/seafile_ynh.git
synced 2024-09-03 20:26:01 +02:00
83 lines
3 KiB
Python
83 lines
3 KiB
Python
#
|
|
# util.py - Helper utilities for authentication
|
|
#
|
|
# Copyright (c) 2007-2009 Christian Hammond
|
|
# Copyright (c) 2007-2009 David Trowbridge
|
|
# Copyright (c) 2007 Micah Dowty
|
|
#
|
|
# Permission is hereby granted, free of charge, to any person obtaining
|
|
# a copy of this software and associated documentation files (the
|
|
# "Software"), to deal in the Software without restriction, including
|
|
# without limitation the rights to use, copy, modify, merge, publish,
|
|
# distribute, sublicense, and/or sell copies of the Software, and to
|
|
# permit persons to whom the Software is furnished to do so, subject to
|
|
# the following conditions:
|
|
#
|
|
# The above copyright notice and this permission notice shall be included
|
|
# in all copies or substantial portions of the Software.
|
|
#
|
|
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
|
|
# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
|
|
# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
|
|
# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
|
|
# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
|
#
|
|
|
|
|
|
from django import forms
|
|
from django.contrib import auth
|
|
from django.conf import settings
|
|
from django.http import HttpResponseRedirect
|
|
|
|
from djblets.util.decorators import simple_decorator
|
|
|
|
import datetime
|
|
|
|
@simple_decorator
|
|
def login_required(view_func):
|
|
"""Simplified version of auth.decorators.login_required,
|
|
which works with our LOGIN_URL and removes the 'next'
|
|
parameter which we don't need yet.
|
|
"""
|
|
def _checklogin(request, *args, **kwargs):
|
|
if request.user.is_authenticated():
|
|
return view_func(request, *args, **kwargs)
|
|
else:
|
|
return HttpResponseRedirect('%s?next_page=%s' % \
|
|
(settings.LOGIN_URL, request.path))
|
|
return _checklogin
|
|
|
|
def get_user(username):
|
|
try:
|
|
return auth.models.User.objects.get(username=username)
|
|
except auth.models.User.DoesNotExist:
|
|
return None
|
|
|
|
def internal_login(request, username, password):
|
|
try:
|
|
user = auth.authenticate(username=username, password=password)
|
|
except:
|
|
user = None
|
|
if not user:
|
|
return "Incorrect username or password."
|
|
elif not user.is_active:
|
|
return "This account is inactive."
|
|
elif not request.session.test_cookie_worked():
|
|
return "Cookies must be enabled."
|
|
|
|
auth.login(request, user)
|
|
if request.session.test_cookie_worked():
|
|
request.session.delete_test_cookie()
|
|
user.last_login = datetime.datetime.now()
|
|
user.save()
|
|
|
|
def validate_test_cookie(form, request):
|
|
if not request.session.test_cookie_worked():
|
|
form.errors['submit'] = forms.util.ErrorList(["Cookies must be enabled."])
|
|
|
|
def validate_old_password(form, user, field_name='password'):
|
|
if not form.errors.get(field_name) and \
|
|
not user.check_password(form.data.get(field_name)):
|
|
form.errors[field_name] = forms.util.ErrorList(["Incorrect password."])
|