64 lines
2.3 KiB
Python
64 lines
2.3 KiB
Python
|
from typing import Any, Dict, Union
|
||
|
|
|
||
|
|
from channels.auth import (
|
||
|
|
AuthMiddleware,
|
||
|
|
CookieMiddleware,
|
||
|
|
SessionMiddleware,
|
||
|
|
_get_user_session_key,
|
||
|
|
)
|
||
|
|
from django.conf import settings
|
||
|
|
from django.contrib.auth import BACKEND_SESSION_KEY, HASH_SESSION_KEY
|
||
|
|
from django.contrib.auth.models import AnonymousUser
|
||
|
|
from django.utils.crypto import constant_time_compare
|
||
|
|
|
||
|
|
from .cache import element_cache
|
||
|
|
from .collection import CollectionElement
|
||
|
|
|
||
|
|
|
||
|
|
class CollectionAuthMiddleware(AuthMiddleware):
|
||
|
|
"""
|
||
|
|
Like the channels AuthMiddleware but returns a CollectionElement instead of
|
||
|
|
a django Model as user.
|
||
|
|
"""
|
||
|
|
|
||
|
|
async def resolve_scope(self, scope: Dict[str, Any]) -> None:
|
||
|
|
scope["user"]._wrapped = await get_user(scope)
|
||
|
|
|
||
|
|
|
||
|
|
async def get_user(scope: Dict[str, Any]) -> Union[CollectionElement, AnonymousUser]:
|
||
|
|
"""
|
||
|
|
Returns a User-CollectionElement from a channels-scope-session.
|
||
|
|
|
||
|
|
If no user is retrieved, return AnonymousUser.
|
||
|
|
"""
|
||
|
|
# This can not return None because a LazyObject can not become None
|
||
|
|
|
||
|
|
# This code is basicly from channels.auth:
|
||
|
|
# https://github.com/django/channels/blob/d5e81a78e96770127da79248349808b6ee6ec2a7/channels/auth.py#L16
|
||
|
|
if "session" not in scope:
|
||
|
|
raise ValueError("Cannot find session in scope. You should wrap your consumer in SessionMiddleware.")
|
||
|
|
session = scope["session"]
|
||
|
|
user = None
|
||
|
|
try:
|
||
|
|
user_id = _get_user_session_key(session)
|
||
|
|
backend_path = session[BACKEND_SESSION_KEY]
|
||
|
|
except KeyError:
|
||
|
|
pass
|
||
|
|
else:
|
||
|
|
if backend_path in settings.AUTHENTICATION_BACKENDS:
|
||
|
|
user = await element_cache.get_element_full_data("users/user", user_id)
|
||
|
|
if user is not None:
|
||
|
|
# Verify the session
|
||
|
|
session_hash = session.get(HASH_SESSION_KEY)
|
||
|
|
session_hash_verified = session_hash and constant_time_compare(
|
||
|
|
session_hash,
|
||
|
|
user['session_auth_hash'])
|
||
|
|
if not session_hash_verified:
|
||
|
|
session.flush()
|
||
|
|
user = None
|
||
|
|
return CollectionElement.from_values("users/user", user_id, full_data=user) if user else AnonymousUser()
|
||
|
|
|
||
|
|
|
||
|
|
# Handy shortcut for applying all three layers at once
|
||
|
|
AuthMiddlewareStack = lambda inner: CookieMiddleware(SessionMiddleware(CollectionAuthMiddleware(inner))) # noqa
|