Synnefo » astakos

# Copyright 2011-2012 GRNET S.A. All rights reserved.

#

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

#

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

#

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

#

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

#

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

from django.core.urlresolvers import reverse

from django.shortcuts import redirect

from django.utils.translation import ugettext as _

from django.contrib import messages

from django.utils.http import urlencode

from django.contrib.auth import login as auth_login, authenticate, logout

from django.http import HttpResponse, HttpResponseBadRequest

from urllib import quote

from urlparse import urlunsplit, urlsplit, urlparse, parse_qsl

from astakos.im.settings import COOKIE_NAME, COOKIE_DOMAIN

from astakos.im.util import set_cookie

import logging

logger = logging.getLogger(__name__)

def login(request):

    """

    If there is no `next` request parameter redirects to astakos index page displaying an error

    message.

    If the request user is authenticated, redirects to `next` request parameter.

    Otherwise, redirects to login in order to return back here after successful login.

    """

    next = request.GET.get('next')

    if not next:

        return HttpResponseBadRequest(_('No next parameter'))

    force = request.GET.get('force', None)

    response = HttpResponse()

    if force == '':

        logout(request)

        response.delete_cookie(COOKIE_NAME, path='/', domain=COOKIE_DOMAIN)

    if request.user.is_authenticated():

        renew = request.GET.get('renew', None)

        if renew == '':

            request.user.renew_token()

            request.user.save()

            # authenticate before login

            user = authenticate(email=request.user.email, auth_token=request.user.auth_token)

            auth_login(request, user)

            set_cookie(response, user)

            logger.info('Token reset for %s' % request.user.email)

        parts = list(urlsplit(next))

        parts[3] = urlencode({'user': request.user.email, 'token': request.user.auth_token})

        url = urlunsplit(parts)

        response['Location'] = url

        response.status_code = 302

        return response

    else:

        # redirect to login with self as next

        # first build next parameter

        parts = list(urlsplit(request.build_absolute_uri()))

        params = dict(parse_qsl(parts[3], keep_blank_values=True))

        # delete force parameter

        if 'force' in params:

            del params['force']

        parts[3] = urlencode(params)

        next = urlunsplit(parts)

        # build url location

        parts[2] = reverse('astakos.im.views.index')

        params = {'next':next}

        parts[3] = urlencode(params)

        url = urlunsplit(parts)

        response['Location'] = url

        response.status_code = 302

        return response