import time import pytz from django.contrib import auth from django.utils import timezone from django.utils.translation import ugettext as _ from utils.api import JSONResponse class SessionSecurityMiddleware(object): def process_request(self, request): if request.user.is_authenticated() and request.user.is_admin_role(): if "last_activity" in request.session: # 24 hours passed since last visit if time.time() - request.session["last_activity"] >= 24 * 60 * 60: auth.logout(request) return JSONResponse.response({"error": "login-required", "data": _("Please login in first")}) # update last active time request.session["last_activity"] = time.time() class AdminRoleRequiredMiddleware(object): def process_request(self, request): path = request.path_info if path.startswith("/admin/") or path.startswith("/api/admin/"): if not(request.user.is_authenticated() and request.user.is_admin_role()): return JSONResponse.response({"error": "login-required", "data": _("Please login in first")}) class TimezoneMiddleware(object): def process_request(self, request): if request.user.is_authenticated(): timezone.activate(pytz.timezone(request.user.userprofile.time_zone))