You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
83 lines
2.6 KiB
Python
83 lines
2.6 KiB
Python
4 years ago
|
import dataclasses
|
||
|
|
|
||
|
|
from fastapi import Depends
|
||
|
|
from fastapi.security import APIKeyHeader
|
||
|
|
|
||
|
|
from django.contrib.auth import get_user_model
|
||
|
|
from django.utils import timezone
|
||
|
|
from django.db.models import QuerySet
|
||
|
|
|
||
|
|
from django_etebase import models
|
||
|
|
from django_etebase.token_auth.models import AuthToken, get_default_expiry
|
||
|
|
from .exceptions import AuthenticationFailed
|
||
|
|
from .utils import get_object_or_404
|
||
|
|
|
||
|
|
|
||
|
|
User = get_user_model()
|
||
|
|
token_scheme = APIKeyHeader(name="Authorization")
|
||
|
|
AUTO_REFRESH = True
|
||
|
|
MIN_REFRESH_INTERVAL = 60
|
||
|
|
|
||
|
|
|
||
|
|
@dataclasses.dataclass(frozen=True)
|
||
|
|
class AuthData:
|
||
|
|
user: User
|
||
|
|
token: AuthToken
|
||
|
|
|
||
|
|
|
||
|
|
def __renew_token(auth_token: AuthToken):
|
||
|
|
current_expiry = auth_token.expiry
|
||
|
|
new_expiry = get_default_expiry()
|
||
|
|
# Throttle refreshing of token to avoid db writes
|
||
|
|
delta = (new_expiry - current_expiry).total_seconds()
|
||
|
|
if delta > MIN_REFRESH_INTERVAL:
|
||
|
|
auth_token.expiry = new_expiry
|
||
|
|
auth_token.save(update_fields=("expiry",))
|
||
|
|
|
||
|
|
|
||
|
|
def __get_authenticated_user(api_token: str):
|
||
|
|
api_token = api_token.split()[1]
|
||
|
|
try:
|
||
|
|
token: AuthToken = AuthToken.objects.select_related("user").get(key=api_token)
|
||
|
|
except AuthToken.DoesNotExist:
|
||
|
|
raise AuthenticationFailed(detail="Invalid token.")
|
||
|
|
if not token.user.is_active:
|
||
|
|
raise AuthenticationFailed(detail="User inactive or deleted.")
|
||
|
|
|
||
|
|
if token.expiry is not None:
|
||
|
|
if token.expiry < timezone.now():
|
||
|
|
token.delete()
|
||
|
|
raise AuthenticationFailed(detail="Invalid token.")
|
||
|
|
|
||
|
|
if AUTO_REFRESH:
|
||
|
|
__renew_token(token)
|
||
|
|
|
||
|
|
return token.user, token
|
||
|
|
|
||
|
|
|
||
|
|
def get_auth_data(api_token: str = Depends(token_scheme)) -> AuthData:
|
||
|
|
user, token = __get_authenticated_user(api_token)
|
||
|
|
return AuthData(user, token)
|
||
|
|
|
||
|
|
|
||
|
|
def get_authenticated_user(api_token: str = Depends(token_scheme)) -> User:
|
||
|
|
user, _ = __get_authenticated_user(api_token)
|
||
|
|
return user
|
||
|
|
|
||
|
|
|
||
|
|
def get_collection_queryset(user: User = Depends(get_authenticated_user)) -> QuerySet:
|
||
|
|
default_queryset: QuerySet = models.Collection.objects.all()
|
||
|
|
return default_queryset.filter(members__user=user)
|
||
|
|
|
||
|
|
|
||
|
|
def get_collection(collection_uid: str, queryset: QuerySet = Depends(get_collection_queryset)) -> models.Collection:
|
||
|
|
return get_object_or_404(queryset, uid=collection_uid)
|
||
|
|
|
||
|
|
|
||
|
|
def get_item_queryset(collection: models.Collection = Depends(get_collection)) -> QuerySet:
|
||
|
|
default_item_queryset: QuerySet = models.CollectionItem.objects.all()
|
||
|
|
# XXX Potentially add this for performance: .prefetch_related('revisions__chunks')
|
||
|
|
queryset = default_item_queryset.filter(collection__pk=collection.pk, revisions__current=True)
|
||
|
|
|
||
|
|
return queryset
|