71 lines
2.0 KiB
Python
71 lines
2.0 KiB
Python
from datetime import datetime
|
|
|
|
from django.db import models
|
|
from account.models import SiteUser
|
|
|
|
from hashlib import sha512
|
|
from django.contrib.auth.hashers import check_password
|
|
|
|
from .api_errors import *
|
|
|
|
|
|
class UserToken(models.Model):
|
|
user = models.ForeignKey(SiteUser, on_delete=models.CASCADE)
|
|
access_token = models.CharField(max_length=128, editable=False, unique=True)
|
|
creation_time = models.DateTimeField(default=datetime.now)
|
|
|
|
@staticmethod
|
|
def create_token(user: SiteUser):
|
|
token = UserToken(user=user)
|
|
token.save()
|
|
|
|
print(f"created token {token.access_token[:16]}...")
|
|
|
|
return token
|
|
|
|
@staticmethod
|
|
def auth(login: str, password: str):
|
|
user = SiteUser.objects.filter(email=login)
|
|
|
|
if len(user) == 0:
|
|
raise Exception(API_ERROR_INVALID_LOGIN)
|
|
|
|
if not check_password(password, user[0].password):
|
|
raise Exception(API_ERROR_INVALID_PASSWORD)
|
|
|
|
return user[0]
|
|
|
|
@staticmethod
|
|
def deauth(token: str):
|
|
t = UserToken.objects.filter(access_token=token)
|
|
|
|
if len(t) == 0:
|
|
raise Exception(API_ERROR_INVALID_TOKEN)
|
|
|
|
t[0].delete()
|
|
|
|
@staticmethod
|
|
def get_user_by_token(token: str):
|
|
t = UserToken.objects.filter(access_token=token)
|
|
|
|
if len(t) == 0:
|
|
raise Exception(API_ERROR_INVALID_TOKEN)
|
|
return t[0].user
|
|
|
|
def __str__(self):
|
|
return self.user.email + ": " + self.access_token[:10] + "..."
|
|
|
|
def save(self, *args, **kwargs):
|
|
if len(self.access_token) == 0:
|
|
source = bytearray(self.user.email + self.user.password + str(datetime.now()), 'utf-8')
|
|
t = sha512(source).hexdigest()
|
|
|
|
# чекаем токен в базе
|
|
if UserToken.objects.filter(access_token=t).count() != 0:
|
|
# по какой-то причине есть, выкидываем исключение
|
|
raise Exception(API_ERROR_TOKEN_CREATION)
|
|
|
|
self.access_token = t
|
|
|
|
super().save(*args, **kwargs)
|