165 lines
4.9 KiB
Python
165 lines
4.9 KiB
Python
from __future__ import absolute_import, unicode_literals
|
|
|
|
from django.conf import settings
|
|
from django.contrib import messages
|
|
from django.contrib.auth import REDIRECT_FIELD_NAME, get_user_model
|
|
from django.contrib.auth.views import (
|
|
login, password_change, password_reset, password_reset_confirm,
|
|
password_reset_complete, password_reset_done
|
|
)
|
|
from django.http import HttpResponse, HttpResponseRedirect
|
|
from django.shortcuts import redirect, resolve_url
|
|
from django.template.loader import render_to_string
|
|
from django.urls import reverse
|
|
from django.utils.http import is_safe_url
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from stronghold.decorators import public
|
|
|
|
import mayan
|
|
|
|
from .forms import EmailAuthenticationForm, UsernameAuthenticationForm
|
|
from .settings import setting_login_method, setting_maximum_session_length
|
|
|
|
|
|
@public
|
|
def login_view(request):
|
|
"""
|
|
Control how the use is to be authenticated, options are 'email' and
|
|
'username'
|
|
"""
|
|
success_url_allowed_hosts = set()
|
|
kwargs = {'template_name': 'authentication/login.html'}
|
|
|
|
if setting_login_method.value == 'email':
|
|
kwargs['authentication_form'] = EmailAuthenticationForm
|
|
else:
|
|
kwargs['authentication_form'] = UsernameAuthenticationForm
|
|
|
|
allowed_hosts = {request.get_host()}
|
|
allowed_hosts.update(success_url_allowed_hosts)
|
|
|
|
redirect_to = request.POST.get(
|
|
REDIRECT_FIELD_NAME, request.GET.get(REDIRECT_FIELD_NAME, '')
|
|
)
|
|
|
|
url_is_safe = is_safe_url(
|
|
url=redirect_to,
|
|
allowed_hosts=allowed_hosts,
|
|
require_https=request.is_secure(),
|
|
)
|
|
|
|
url = redirect_to if url_is_safe else ''
|
|
|
|
if not request.user.is_authenticated:
|
|
extra_context = {
|
|
'appearance_type': 'plain',
|
|
REDIRECT_FIELD_NAME: url or resolve_url(settings.LOGIN_REDIRECT_URL)
|
|
}
|
|
|
|
result = login(request, extra_context=extra_context, **kwargs)
|
|
if request.method == 'POST':
|
|
form = kwargs['authentication_form'](request, data=request.POST)
|
|
if form.is_valid():
|
|
if form.cleaned_data['remember_me']:
|
|
request.session.set_expiry(
|
|
setting_maximum_session_length.value
|
|
)
|
|
else:
|
|
request.session.set_expiry(0)
|
|
return result
|
|
else:
|
|
return HttpResponseRedirect(resolve_url(settings.LOGIN_REDIRECT_URL))
|
|
|
|
|
|
def password_change_view(request):
|
|
"""
|
|
Password change wrapper for better control
|
|
"""
|
|
extra_context = {'title': _('Current user password change')}
|
|
|
|
if request.user.user_options.block_password_change:
|
|
messages.error(
|
|
request, _(
|
|
'Changing the password is not allowed for this account.'
|
|
)
|
|
)
|
|
return HttpResponseRedirect(reverse(settings.HOME_VIEW))
|
|
|
|
return password_change(
|
|
request, extra_context=extra_context,
|
|
template_name='appearance/generic_form.html',
|
|
post_change_redirect=reverse('authentication:password_change_done'),
|
|
)
|
|
|
|
|
|
def password_change_done(request):
|
|
"""
|
|
View called when the new user password has been accepted
|
|
"""
|
|
messages.success(
|
|
request, _('Your password has been successfully changed.')
|
|
)
|
|
return redirect('common:current_user_details')
|
|
|
|
|
|
@public
|
|
def password_reset_complete_view(request):
|
|
extra_context = {
|
|
'appearance_type': 'plain'
|
|
}
|
|
|
|
return password_reset_complete(
|
|
request, extra_context=extra_context,
|
|
template_name='authentication/password_reset_complete.html'
|
|
)
|
|
|
|
|
|
@public
|
|
def password_reset_confirm_view(request, uidb64=None, token=None):
|
|
extra_context = {
|
|
'appearance_type': 'plain'
|
|
}
|
|
|
|
return password_reset_confirm(
|
|
request, extra_context=extra_context,
|
|
template_name='authentication/password_reset_confirm.html',
|
|
post_reset_redirect=reverse(
|
|
'authentication:password_reset_complete_view'
|
|
), uidb64=uidb64, token=token
|
|
)
|
|
|
|
|
|
@public
|
|
def password_reset_done_view(request):
|
|
extra_context = {
|
|
'appearance_type': 'plain'
|
|
}
|
|
|
|
return password_reset_done(
|
|
request, extra_context=extra_context,
|
|
template_name='authentication/password_reset_done.html'
|
|
)
|
|
|
|
|
|
@public
|
|
def password_reset_view(request):
|
|
extra_context = {
|
|
'appearance_type': 'plain'
|
|
}
|
|
|
|
return password_reset(
|
|
request, extra_context=extra_context,
|
|
email_template_name='authentication/password_reset_email.html',
|
|
extra_email_context={
|
|
'project_title': mayan.__title__,
|
|
'project_website': mayan.__website__,
|
|
'project_copyright': mayan.__copyright__,
|
|
'project_license': mayan.__license__,
|
|
}, subject_template_name='authentication/password_reset_subject.txt',
|
|
template_name='authentication/password_reset_form.html',
|
|
post_reset_redirect=reverse(
|
|
'authentication:password_reset_done_view'
|
|
)
|
|
)
|