views.py
2.49 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
import requests, json
from django.shortcuts import get_object_or_404, reverse
from django.contrib.auth import authenticate
from django.views.decorators.csrf import csrf_exempt
from rest_framework import viewsets
from rest_framework.response import Response
from rest_framework.decorators import detail_route, list_route
from rest_framework.permissions import IsAuthenticated, IsAuthenticatedOrReadOnly
from security.models import Security
from users.serializers import UserSerializer
from users.models import User
from oauth2_provider.views.generic import ProtectedResourceView
from oauth2_provider.models import Application
from django.http import HttpResponse
class LoginViewset(viewsets.ReadOnlyModelViewSet):
queryset = User.objects.all()
permissions_classes = (IsAuthenticated,)
@csrf_exempt
@list_route(methods = ['POST'], permissions_classes = [IsAuthenticated])
def login(self, request):
username = request.data['email']
user = self.queryset.get(email = username)
if not user is None:
serializer = UserSerializer(user)
json_r = json.dumps(serializer.data)
json_r = json.loads(json_r)
user_info = {}
user_info["data"] = json_r
user_info["message"] = ""
user_info["type"] = ""
user_info["title"] = ""
user_info["success"] = True
user_info["number"] = 1
user_info['extra'] = 0
response = json.dumps(user_info)
return HttpResponse(response)
@csrf_exempt
def getToken(request):
oauth = Application.objects.filter(name = "amadeus-droid")
security = Security.objects.get(id = 1)
response = ""
if request.method == "POST":
json_data = json.loads(request.body.decode('utf-8'))
try:
username = json_data['email']
password = json_data['password']
user = authenticate(username = username, password = password)
if user is not None:
if not security.maintence or user.is_staff:
if oauth.count() > 0:
oauth = oauth[0]
data = {
"grant_type": "password",
"username": username,
"password": password
}
auth = (oauth.client_id, oauth.client_secret)
response = requests.post(request.build_absolute_uri(reverse('oauth2_provider:token')), data = data, auth = auth)
json_r = json.loads(response.content.decode('utf-8'))
json_r["message"] = ""
json_r["type"] = ""
json_r["title"] = ""
json_r["success"] = True
json_r["number"] = 1
json_r['extra'] = 0
response = json.dumps(json_r)
except KeyError:
response = "Error"
return HttpResponse(response)