1 # Copyright 2011-2012 GRNET S.A. All rights reserved.
3 # Redistribution and use in source and binary forms, with or
4 # without modification, are permitted provided that the following
7 # 1. Redistributions of source code must retain the above
8 # copyright notice, this list of conditions and the following
11 # 2. Redistributions in binary form must reproduce the above
12 # copyright notice, this list of conditions and the following
13 # disclaimer in the documentation and/or other materials
14 # provided with the distribution.
16 # THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS
17 # OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
18 # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
19 # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR
20 # CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
21 # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
22 # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
23 # USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
24 # AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
26 # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
27 # POSSIBILITY OF SUCH DAMAGE.
29 # The views and conclusions contained in the software and
30 # documentation are those of the authors and should not be
31 # interpreted as representing official policies, either expressed
32 # or implied, of GRNET S.A.
34 from django.core.urlresolvers import reverse
35 from django.shortcuts import redirect
36 from django.utils.translation import ugettext as _
37 from django.contrib import messages
38 from django.utils.http import urlencode
39 from django.contrib.auth import authenticate
40 from django.http import HttpResponse, HttpResponseBadRequest
41 from django.core.exceptions import ValidationError
43 from urllib import quote
44 from urlparse import urlunsplit, urlsplit, urlparse, parse_qsl
46 from astakos.im.settings import COOKIE_NAME, COOKIE_DOMAIN
47 from astakos.im.util import set_cookie
48 from astakos.im.functions import login as auth_login, logout
52 logger = logging.getLogger(__name__)
56 If there is no ``next`` request parameter redirects to astakos index page
57 displaying an error message.
58 If the request user is authenticated and has signed the approval terms,
59 redirects to `next` request parameter. If not, redirects to approval terms
60 in order to return back here after agreeing with the terms.
61 Otherwise, redirects to login in order to return back here after successful login.
63 next = request.GET.get('next')
65 return HttpResponseBadRequest(_('No next parameter'))
66 force = request.GET.get('force', None)
67 response = HttpResponse()
70 response.delete_cookie(COOKIE_NAME, path='/', domain=COOKIE_DOMAIN)
71 if request.user.is_authenticated():
72 # if user has not signed the approval terms
73 # redirect to approval terms with next the request path
74 if not request.user.signed_terms():
75 # first build next parameter
76 parts = list(urlsplit(request.build_absolute_uri()))
77 params = dict(parse_qsl(parts[3], keep_blank_values=True))
78 # delete force parameter
79 parts[3] = urlencode(params)
80 next = urlunsplit(parts)
83 parts[2] = reverse('latest_terms')
84 params = {'next':next}
85 parts[3] = urlencode(params)
86 url = urlunsplit(parts)
87 response['Location'] = url
88 response.status_code = 302
90 renew = request.GET.get('renew', None)
92 request.user.renew_token()
95 except ValidationError, e:
96 return HttpResponseBadRequest(e)
97 # authenticate before login
98 user = authenticate(email=request.user.email, auth_token=request.user.auth_token)
99 auth_login(request, user)
100 set_cookie(response, user)
101 logger.info('Token reset for %s' % request.user.email)
102 parts = list(urlsplit(next))
103 parts[3] = urlencode({'user': request.user.email, 'token': request.user.auth_token})
104 url = urlunsplit(parts)
105 response['Location'] = url
106 response.status_code = 302
109 # redirect to login with next the request path
111 # first build next parameter
112 parts = list(urlsplit(request.build_absolute_uri()))
113 params = dict(parse_qsl(parts[3], keep_blank_values=True))
114 # delete force parameter
115 if 'force' in params:
117 parts[3] = urlencode(params)
118 next = urlunsplit(parts)
121 parts[2] = reverse('astakos.im.views.index')
122 params = {'next':next}
123 parts[3] = urlencode(params)
124 url = urlunsplit(parts)
125 response['Location'] = url
126 response.status_code = 302