65 lines
1.8 KiB
Python
65 lines
1.8 KiB
Python
"""
|
|
Authentication backends for RepApp.
|
|
"""
|
|
from django.contrib.auth import get_user_model
|
|
from django.contrib.auth.backends import ModelBackend
|
|
from mozilla_django_oidc.auth import OIDCAuthenticationBackend
|
|
from .utils import generate_username, create_repapp_user
|
|
from .models import OneTimeLogin
|
|
|
|
|
|
class OneTimeLoginBackend(ModelBackend):
|
|
"""
|
|
OneTimeLoginBackend implements a login using a onetime secret.
|
|
"""
|
|
|
|
def authenticate(self, request, username=None, password=None, **kwargs):
|
|
login = OneTimeLogin.objects.filter(secret=username).first()
|
|
if login:
|
|
return login.user
|
|
else:
|
|
return None
|
|
|
|
|
|
class EmailBackend(ModelBackend):
|
|
"""
|
|
EmailBackend allows a login using email address as username.
|
|
"""
|
|
|
|
def authenticate(self, request, username=None, password=None, **kwargs):
|
|
user_model = get_user_model()
|
|
try:
|
|
user = user_model.objects.get(email=username)
|
|
except user_model.DoesNotExist:
|
|
return None
|
|
else:
|
|
if user.check_password(password):
|
|
return user
|
|
return None
|
|
|
|
|
|
class KeycloakOIDCAB(OIDCAuthenticationBackend):
|
|
"""
|
|
KeycloakOIDCAB allows a login using Open ID Connect
|
|
(with the Repair-Café Keycloak Single Sign On server)
|
|
"""
|
|
|
|
def create_user(self, claims):
|
|
user = super(KeycloakOIDCAB, self).create_user(claims)
|
|
|
|
user.username = claims.get(
|
|
'preferred_username', generate_username(user.email))
|
|
user.save()
|
|
|
|
create_repapp_user(user)
|
|
|
|
return user
|
|
|
|
def update_user(self, user, claims):
|
|
user.username = claims.get(
|
|
'preferred_username', generate_username(user.email))
|
|
user.save()
|
|
|
|
create_repapp_user(user)
|
|
|
|
return user
|