Synnefo » astakos

from functools import wraps

from astakos.im.faults import BadRequest, Unauthorized, InternalServerError, Fault

from astakos.im.util import has_signed_terms, epoch

def api_method(http_method=None, token_required=False, perms=[]):

    """Decorator function for views that implement an API method."""

    def decorator(func):

        @wraps(func)

        def wrapper(request, *args, **kwargs):

            try:

                if http_method and request.method != http_method:

                    raise BadRequest('Method not allowed.')

                x_auth_token = request.META.get('HTTP_X_AUTH_TOKEN')

                if token_required:

                    if not x_auth_token:

                        raise Unauthorized('Access denied')

                    try:

                        user = AstakosUser.objects.get(auth_token=x_auth_token)

                        if not user.has_perms(perms):

                            raise Unauthorized('Unauthorized request')

                    except AstakosUser.DoesNotExist, e:

                        raise Unauthorized('Invalid X-Auth-Token')

                    kwargs['user'] = user

                response = func(request, *args, **kwargs)

                return response

            except Fault, fault:

                return render_fault(request, fault)

            except BaseException, e:

                logger.exception('Unexpected error: %s' % e)

                fault = InternalServerError('Unexpected error')

                return render_fault(request, fault)

        return wrapper

    return decorator

@api_method(http_method='GET', token_required=True)

def authenticate_old(request, user=None):

    if not user:

        raise BadRequest('No user')

    # Check if the is active.

    if not user.is_active:

        raise Unauthorized('User inactive')

    # Check if the token has expired.

    if (time() - mktime(user.auth_token_expires.timetuple())) > 0:

        raise Unauthorized('Authentication expired')

    if not has_signed_terms(user):

        raise Unauthorized('Pending approval terms')

    response = HttpResponse()

    response.status=204

    user_info = {'username':user.username,

                 'uniq':user.email,

                 'auth_token':user.auth_token,

                 'auth_token_created':user.auth_token_created.isoformat(),

                 'auth_token_expires':user.auth_token_expires.isoformat(),

                 'has_credits':user.has_credits,

                 'has_signed_terms':has_signed_terms(user)}

    response.content = json.dumps(user_info)

    response['Content-Type'] = 'application/json; charset=UTF-8'

    response['Content-Length'] = len(response.content)

    return response

@api_method(http_method='GET', token_required=True)

def authenticate(request, user=None):

    # Normal Response Codes: 204

    # Error Response Codes: internalServerError (500)

    #                       badRequest (400)

    #                       unauthorised (401)

    if not user:

        raise BadRequest('No user')

    # Check if the is active.

    if not user.is_active:

        raise Unauthorized('User inactive')

    # Check if the token has expired.

    if (time() - mktime(user.auth_token_expires.timetuple())) > 0:

        raise Unauthorized('Authentication expired')

    if not has_signed_terms(user):

        raise Unauthorized('Pending approval terms')

    response = HttpResponse()

    response.status=204

    user_info = {'userid':user.username,

                 'email':[user.email],

                 'name':user.realname,

                 'auth_token':user.auth_token,

                 'auth_token_created':epoch(user.auth_token_created),

                 'auth_token_expires':epoch(user.auth_token_expires),

                 'has_credits':user.has_credits,

                 'is_active':user.is_active,

                 'groups':[g.name for g in user.groups.all()]}

    response.content = json.dumps(user_info)

    response['Content-Type'] = 'application/json; charset=UTF-8'

    response['Content-Length'] = len(response.content)

    return response

@api_method(http_method='GET')

def get_services(request):

@api_method()

            if request.user.has_usable_password():

@api_method(http_method='GET', token_required=True, perms=['astakos.im.can_find_userid'])

def find_userid(request):

    # Normal Response Codes: 204

    # Error Response Codes: internalServerError (500)

    #                       badRequest (400)

    #                       unauthorised (401)

    email = request.GET.get('email')

    if not email:

        raise BadRequest('Email missing')

    try:

        user = AstakosUser.objects.get(email = email)

    except AstakosUser.DoesNotExist, e:

        raise BadRequest('Invalid email')

    else:

        response = HttpResponse()

        response.status=204

        user_info = {'userid':user.username}

        response.content = json.dumps(user_info)

        response['Content-Type'] = 'application/json; charset=UTF-8'

        response['Content-Length'] = len(response.content)

        return response

@api_method(http_method='GET', token_required=True, perms=['astakos.im.can_find_email'])

def find_email(request):

    # Normal Response Codes: 204

    # Error Response Codes: internalServerError (500)

    #                       badRequest (400)

    #                       unauthorised (401)

    userid = request.GET.get('userid')

    if not userid:

        raise BadRequest('Userid missing')

    try:

        user = AstakosUser.objects.get(username = userid)

    except AstakosUser.DoesNotExist, e:

        raise BadRequest('Invalid userid')

    else:

        response = HttpResponse()

        response.status=204

        user_info = {'userid':user.email}

        response.content = json.dumps(user_info)

        response['Content-Type'] = 'application/json; charset=UTF-8'

        response['Content-Length'] = len(response.content)

        return response