49 lines
1.5 KiB
Python
49 lines
1.5 KiB
Python
import time
|
|
import logging
|
|
from hashlib import sha256
|
|
from django.contrib import messages
|
|
from django.contrib.auth import authenticate, login
|
|
from django.contrib.auth.decorators import login_required
|
|
from django.shortcuts import get_object_or_404
|
|
from django.http import HttpResponseRedirect, HttpResponse
|
|
from django.urls import reverse_lazy
|
|
from django.utils.timezone import now
|
|
from django.utils.translation import gettext_lazy as _
|
|
from .models import OneTimeLogin
|
|
from .utils import one_time_login
|
|
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
def login_view(request, secret: str):
|
|
"""
|
|
View for one time login.
|
|
"""
|
|
# waste a little time as brute force protection
|
|
time.sleep(1)
|
|
|
|
logger.debug('one_time_login: secret %s', secret)
|
|
|
|
(user, url) = one_time_login(request, secret)
|
|
|
|
logger.debug('one_time_login: user %s, url %s', user, url)
|
|
|
|
if user is not None:
|
|
login(request, user)
|
|
messages.add_message(request, messages.INFO, _('Login successful!'))
|
|
if url is not None:
|
|
logger.debug('one_time_login: redirecting to url %s', url)
|
|
return HttpResponseRedirect(url)
|
|
else: # pragma: no cover
|
|
# would be an invalid OTL, which should never happen
|
|
return HttpResponseRedirect('/')
|
|
|
|
messages.add_message(request, messages.ERROR, _('Login failed!'))
|
|
return HttpResponseRedirect('/')
|
|
|
|
|
|
@login_required
|
|
def protected_test(request): # pragma: no cover
|
|
# this view is only used for a live server test case
|
|
return HttpResponse('protected content')
|