root / snf-astakos-app / astakos / oa2 / backends / djangobackend.py @ efaec842
History | View | Annotate | Download (4.2 kB)
1 |
import astakos.oa2.models as oa2_models |
---|---|
2 |
|
3 |
from astakos.oa2.backends import base as oa2base |
4 |
from astakos.oa2.backends import base as errors |
5 |
|
6 |
from django import http |
7 |
from django.conf import settings |
8 |
from django.core.exceptions import ValidationError |
9 |
from django.core.validators import URLValidator |
10 |
from django.core.urlresolvers import reverse |
11 |
from django.conf.urls.defaults import patterns, url |
12 |
from django.views.decorators.csrf import csrf_exempt |
13 |
|
14 |
import logging |
15 |
logger = logging.getLogger(__name__) |
16 |
|
17 |
|
18 |
class DjangoViewsMixin(object): |
19 |
|
20 |
def auth_view(self, request): |
21 |
oa2request = self.build_request(request)
|
22 |
oa2response = self.authorize(oa2request, accept=False) |
23 |
return self._build_response(oa2response) |
24 |
|
25 |
@csrf_exempt
|
26 |
def token_view(self, request): |
27 |
oa2request = self.build_request(request)
|
28 |
oa2response = self.grant_token(oa2request)
|
29 |
return self._build_response(oa2response) |
30 |
|
31 |
|
32 |
class DjangoBackendORMMixin(object): |
33 |
|
34 |
def get_client_by_credentials(self, username, password): |
35 |
try:
|
36 |
return oa2_models.Client.objects.get(identifier=username,
|
37 |
secret=password) |
38 |
except oa2_models.Client.DoesNotExist:
|
39 |
raise errors.InvalidClientID("No such client found") |
40 |
|
41 |
def get_client_by_id(self, clientid): |
42 |
try:
|
43 |
return oa2_models.Client.objects.get(identifier=clientid)
|
44 |
except oa2_models.Client.DoesNotExist:
|
45 |
raise errors.InvalidClientID("No such client found") |
46 |
|
47 |
def get_authorization_code(self, code): |
48 |
try:
|
49 |
return oa2_models.AuthorizationCode.objects.get(code=code)
|
50 |
except oa2_models.AuthorizationCode.DoesNotExist:
|
51 |
raise errors.OA2Error("No such authorization code") |
52 |
|
53 |
def get_token(self, token): |
54 |
try:
|
55 |
return oa2_models.Token.objects.get(code=token)
|
56 |
except oa2_models.Token.DoesNotExist:
|
57 |
raise errors.OA2Error("No such token") |
58 |
|
59 |
def delete_authorization_code(self, code): |
60 |
code.delete() |
61 |
logger.info('%r deleted' % code)
|
62 |
|
63 |
def delete_token(self, token): |
64 |
token.delete() |
65 |
logger.info('%r deleted' % token)
|
66 |
|
67 |
def check_credentials(self, client, username, secret): |
68 |
if not (username == client.get_id() and secret == client.secret): |
69 |
raise errors.InvalidAuthorizationRequest("Invalid credentials") |
70 |
|
71 |
|
72 |
class DjangoBackend(DjangoBackendORMMixin, oa2base.SimpleBackend, |
73 |
DjangoViewsMixin): |
74 |
|
75 |
code_model = oa2_models.AuthorizationCode.objects |
76 |
token_model = oa2_models.Token.objects |
77 |
client_model = oa2_models.Client.objects |
78 |
|
79 |
def _build_response(self, oa2response): |
80 |
response = http.HttpResponse() |
81 |
response.status_code = oa2response.status |
82 |
response.content = oa2response.body |
83 |
for key, value in oa2response.headers.iteritems(): |
84 |
response[key] = value |
85 |
return response
|
86 |
|
87 |
def build_request(self, django_request): |
88 |
params = { |
89 |
'method': django_request.method,
|
90 |
'path': django_request.path,
|
91 |
'GET': django_request.GET,
|
92 |
'POST': django_request.POST,
|
93 |
'META': django_request.META,
|
94 |
'secure': settings.DEBUG or django_request.is_secure(), |
95 |
#'secure': django_request.is_secure(),
|
96 |
} |
97 |
# TODO: check for valid astakos user
|
98 |
if django_request.user.is_authenticated():
|
99 |
params['user'] = django_request.user
|
100 |
return oa2base.Request(**params)
|
101 |
|
102 |
def get_url_patterns(self): |
103 |
sep = '/' if self.endpoints_prefix else '' |
104 |
_patterns = patterns( |
105 |
'',
|
106 |
url(r'^%s%sauth/?$' % (self.endpoints_prefix, sep), |
107 |
self.auth_view,
|
108 |
name='%s_authenticate' % self.id), |
109 |
url(r'^%s%stoken/?$' % (self.endpoints_prefix, sep), |
110 |
self.token_view,
|
111 |
name='%s_token' % self.id), |
112 |
) |
113 |
return _patterns
|
114 |
|
115 |
def is_uri(self, string): |
116 |
validator = URLValidator() |
117 |
try:
|
118 |
validator(string) |
119 |
except ValidationError:
|
120 |
return False |
121 |
else:
|
122 |
return True |
123 |
|
124 |
def get_login_uri(self): |
125 |
return reverse('login') |
126 |
|
127 |
|
128 |
class AstakosBackend(DjangoBackend): |
129 |
pass
|