- from django.contrib.auth.models import User
- from django.conf import settings
- from hc.accounts.models import Profile
- from hc.accounts.views import _make_user
-
-
- class BasicBackend(object):
- def get_user(self, user_id):
- try:
- q = User.objects.select_related("profile")
-
- return q.get(pk=user_id)
- except User.DoesNotExist:
- return None
-
-
- # Authenticate against the token in user's profile.
- class ProfileBackend(BasicBackend):
- def authenticate(self, request=None, username=None, token=None):
- try:
- profiles = Profile.objects.select_related("user")
- profile = profiles.get(user__username=username)
- except Profile.DoesNotExist:
- return None
-
- if not profile.check_token(token, "login"):
- return None
-
- return profile.user
-
-
- class EmailBackend(BasicBackend):
- def authenticate(self, request=None, username=None, password=None):
- try:
- user = User.objects.get(email=username)
- except User.DoesNotExist:
- return None
-
- if user.check_password(password):
- return user
-
-
- class CustomHeaderBackend(BasicBackend):
- """
- This backend works in conjunction with the ``CustomHeaderMiddleware``,
- and is used when the server is handling authentication outside of Django.
-
- """
-
- def authenticate(self, request, remote_user_email):
- """
- The email address passed as remote_user_email is considered trusted.
- Return the User object with the given email address. Create a new User
- if it does not exist.
-
- """
-
- # This backend should only be used when header-based authentication is enabled
- assert settings.REMOTE_USER_HEADER
- # remote_user_email should have a value
- assert remote_user_email
-
- try:
- user = User.objects.get(email=remote_user_email)
- except User.DoesNotExist:
- user = _make_user(remote_user_email)
-
- return user
|