xiaoyu
4 years ago
parent
97cb1f08bc
commit
b0abdfa8d2
@ -1,44 +1,69 @@ |
|||||||
from django.core.cache import cache |
from django.core.cache import cache |
||||||
from rest_framework.authentication import BaseAuthentication |
from rest_framework.authentication import BaseAuthentication |
||||||
from rest_framework.exceptions import AuthenticationFailed |
from rest_framework.exceptions import AuthenticationFailed |
||||||
from api.models import Token, UserInfo |
from api.models import UserInfo |
||||||
|
from rest_framework.permissions import BasePermission |
||||||
from fir_ser.settings import CACHE_KEY_TEMPLATE |
from fir_ser.settings import CACHE_KEY_TEMPLATE |
||||||
import base64 |
import base64 |
||||||
|
|
||||||
|
|
||||||
|
def get_user_from_auth(request): |
||||||
|
if request.method == "OPTIONS": |
||||||
|
return None |
||||||
|
request_token = request.META.get("HTTP_AUTHORIZATION", request.query_params.get("token", None)) |
||||||
|
try: |
||||||
|
format_token = base64.b64decode(request_token).decode() |
||||||
|
auth_token = format_token.split(":")[0] |
||||||
|
user_name = format_token.split(":")[1] |
||||||
|
|
||||||
|
except Exception: |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "token不合法"}) |
||||||
|
|
||||||
|
if not auth_token: |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "缺少token"}) |
||||||
|
|
||||||
|
auth_key = "_".join([CACHE_KEY_TEMPLATE.get('user_auth_token_key'), auth_token]) |
||||||
|
|
||||||
|
cacheuserinfo = cache.get(auth_key) |
||||||
|
if not cacheuserinfo: |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "无效的token"}) |
||||||
|
if user_name != cacheuserinfo.get('username', None): |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "token校验失败"}) |
||||||
|
|
||||||
|
user_obj = UserInfo.objects.filter(uid=cacheuserinfo.get('uid', None), |
||||||
|
username=cacheuserinfo.get("username")).first() |
||||||
|
# token_obj = Token.objects.filter(access_token=auth_token).first() |
||||||
|
if not user_obj: |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "无效的token"}) |
||||||
|
if user_obj.is_active: |
||||||
|
cache.set(auth_key, cacheuserinfo, 3600 * 24 * 7) |
||||||
|
# cache.expire(auth_key, timeout=3600 * 24 * 7) |
||||||
|
return user_obj, auth_token |
||||||
|
else: |
||||||
|
raise AuthenticationFailed({"code": 1001, "error": "用户被禁用"}) |
||||||
|
|
||||||
|
|
||||||
class ExpiringTokenAuthentication(BaseAuthentication): |
class ExpiringTokenAuthentication(BaseAuthentication): |
||||||
|
|
||||||
def authenticate(self, request): |
def authenticate(self, request): |
||||||
if request.method == "OPTIONS": |
return get_user_from_auth(request) |
||||||
return None |
|
||||||
request_token = request.META.get("HTTP_AUTHORIZATION", request.query_params.get("token", None)) |
|
||||||
try: |
class StoragePermission(BasePermission): |
||||||
format_token = base64.b64decode(request_token).decode() |
message = "权限不足" |
||||||
auth_token = format_token.split(":")[0] |
|
||||||
user_name = format_token.split(":")[1] |
def has_permission(self, request, view): |
||||||
|
results = get_user_from_auth(request) |
||||||
except Exception: |
if results and results[0]: |
||||||
raise AuthenticationFailed({"code": 1001, "error": "token不合法"}) |
return results[0].storage_active |
||||||
|
return True |
||||||
if not auth_token: |
|
||||||
raise AuthenticationFailed({"code": 1001, "error": "缺少token"}) |
|
||||||
|
class SuperSignPermission(BasePermission): |
||||||
auth_key = "_".join([CACHE_KEY_TEMPLATE.get('user_auth_token_key'), auth_token]) |
message = "权限不足" |
||||||
|
|
||||||
cacheuserinfo = cache.get(auth_key) |
def has_permission(self, request, view): |
||||||
if not cacheuserinfo: |
results = get_user_from_auth(request) |
||||||
raise AuthenticationFailed({"code": 1001, "error": "无效的token"}) |
if results and results[0]: |
||||||
if user_name != cacheuserinfo.get('username', None): |
return results[0].supersign_active |
||||||
raise AuthenticationFailed({"code": 1001, "error": "token校验失败"}) |
return True |
||||||
|
|
||||||
user_obj = UserInfo.objects.filter(uid=cacheuserinfo.get('uid', None), |
|
||||||
username=cacheuserinfo.get("username")).first() |
|
||||||
# token_obj = Token.objects.filter(access_token=auth_token).first() |
|
||||||
if not user_obj: |
|
||||||
raise AuthenticationFailed({"code": 1001, "error": "无效的token"}) |
|
||||||
if user_obj.is_active: |
|
||||||
cache.set(auth_key, cacheuserinfo, 3600 * 24 * 7) |
|
||||||
# cache.expire(auth_key, timeout=3600 * 24 * 7) |
|
||||||
return user_obj, auth_token |
|
||||||
else: |
|
||||||
raise AuthenticationFailed({"code": 1001, "error": "用户被禁用"}) |
|
||||||
|
|||||||
Loading…
Reference in new issue