mirror of
https://github.com/OpenBankProject/API-Manager.git
synced 2026-02-06 09:26:49 +00:00
82 lines
3.0 KiB
Python
82 lines
3.0 KiB
Python
# -*- coding: utf-8 -*-
|
|
import hashlib
|
|
|
|
from django.conf import settings
|
|
from django.contrib import messages
|
|
from django.contrib.auth import login, logout
|
|
from django.contrib.auth.models import User
|
|
from django.urls import reverse
|
|
from django.views.generic import RedirectView
|
|
|
|
from requests_oauthlib import OAuth1Session
|
|
|
|
from base.utils import api_get
|
|
|
|
|
|
class InitiateView(RedirectView):
|
|
def get_callback_uri(self, request):
|
|
base_url = '{}://{}'.format(
|
|
request.scheme, request.environ['HTTP_HOST'])
|
|
uri = base_url + reverse('oauth-authorize')
|
|
if 'next' in request.GET:
|
|
uri = '{}?next={}'.format(uri, request.GET['next'])
|
|
return uri
|
|
|
|
def get_redirect_url(self, *args, **kwargs):
|
|
callback_uri = self.get_callback_uri(self.request)
|
|
api = OAuth1Session(
|
|
settings.OAUTH_CLIENT_KEY,
|
|
client_secret=settings.OAUTH_CLIENT_SECRET,
|
|
callback_uri=callback_uri,
|
|
)
|
|
|
|
try:
|
|
url = settings.OAUTH_API + settings.OAUTH_TOKEN_PATH
|
|
fetch_response = api.fetch_request_token(url)
|
|
except ValueError as exc:
|
|
messages.error(self.request, exc)
|
|
return reverse('home')
|
|
|
|
url = settings.OAUTH_API + settings.OAUTH_AUTHORIZATION_PATH
|
|
authorization_url = api.authorization_url(url)
|
|
self.request.session['oauth_token'] = fetch_response.get('oauth_token')
|
|
self.request.session['oauth_secret'] = fetch_response.get('oauth_token_secret')
|
|
self.request.session.modified = True
|
|
return authorization_url
|
|
|
|
|
|
class AuthorizeView(RedirectView):
|
|
def login_to_django(self):
|
|
# Kind of faking it to establish if a user is authenticated later on
|
|
data = api_get(self.request, '/users/current')
|
|
userid = data['user_id'] or data['email']
|
|
username = hashlib.sha256(userid.encode('utf-8')).hexdigest()
|
|
password = username
|
|
user, _ = User.objects.get_or_create(
|
|
username=username, password=password,
|
|
)
|
|
login(self.request, user)
|
|
|
|
def get_redirect_url(self, *args, **kwargs):
|
|
api = OAuth1Session(
|
|
settings.OAUTH_CLIENT_KEY,
|
|
settings.OAUTH_CLIENT_SECRET,
|
|
resource_owner_key=self.request.session['oauth_token'],
|
|
resource_owner_secret=self.request.session['oauth_secret']
|
|
)
|
|
api.parse_authorization_response(self.request.build_absolute_uri())
|
|
url = settings.OAUTH_API + settings.OAUTH_ACCESS_TOKEN_PATH
|
|
fetch_response = api.fetch_access_token(url)
|
|
|
|
self.request.session['oauth_token'] = fetch_response.get('oauth_token')
|
|
self.request.session['oauth_secret'] = fetch_response.get('oauth_token_secret')
|
|
self.login_to_django()
|
|
redirect_url = self.request.GET.get('next', reverse('consumers-index'))
|
|
return redirect_url
|
|
|
|
|
|
class LogoutView(RedirectView):
|
|
def get_redirect_url(self, *args, **kwargs):
|
|
logout(self.request)
|
|
return reverse('home')
|