PassThroughAuth

Complexity

Total Complexity

7

Size/Duplication

Total Lines	34
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	auth_complete()	0	9	2
A	get_user_id()	0	3	1
A	get_user_details()	0	13	3
A	auth_url()	0	3	1

'''
    A Python Social (PSA) authentication backend.

    It performs no authentication by itself, but believes in auth information that is
    stored by a separate view in the *session*.

    This is used for performing the authentication in an independent view,
    but managing the database and user creation still in PSA.

    Since PSA really wants to do all login views by itself,
    the separate auth view needs to redirect to '/login/passthrough/'
    after storing all data in the session variable SESSION_VAR.
    The keys can be seen in get_user_details().

    After the redirect, everything works as usual in Python Social,
    with the only exception that the auth_url redirect is no longer needed.
'''

from social_core.backends.base import BaseAuth
from django.core.exceptions import PermissionDenied
from opensubmit import settings

SESSION_VAR = 'passthrough_auth_data_' + settings.SECRET_KEY


class PassThroughAuth(BaseAuth):
    name = 'passthrough'

    def auth_url(self):
        """Must return redirect URL to auth provider."""
        return '/complete/%s/' % self.name

    def auth_complete(self, *args, **kwargs):
        """Completes loging process, must return user instance"""
        if SESSION_VAR not in self.strategy.request.session:
            # This is the only protection layer when people
            # go directly to the passthrough login view.
            raise PermissionDenied
        auth_data = self.strategy.request.session[SESSION_VAR]
        kwargs.update({'response': auth_data, 'backend': self})
        return self.strategy.authenticate(*args, **kwargs)

    def get_user_details(self, response):
        """ Complete with additional information from session, as available. """
        result = {
            'id': response['id'],
            'username': response.get('username', None),
            'email': response.get('email', None),
            'first_name': response.get('first_name', None),
            'last_name': response.get('last_name', None)
        }
        if result['first_name'] and result['last_name']:
            result['fullname'] = result['first_name'] + \
                ' ' + result['last_name']
        return result

    def get_user_id(self, details, response):
        """Return a unique ID for the current user, by default from server response."""
        return response['id']