mirror of
https://github.com/QingdaoU/OnlineJudge.git
synced 2024-09-21 16:33:22 +00:00
108 lines
4.1 KiB
Python
108 lines
4.1 KiB
Python
# coding=utf-8
|
|
from __future__ import unicode_literals
|
|
|
|
from django.contrib import auth
|
|
from django.core.exceptions import MultipleObjectsReturned
|
|
from django.utils.translation import ugettext as _
|
|
from rest_framework.views import APIView
|
|
|
|
from utils.captcha import Captcha
|
|
from utils.otp_auth import OtpAuth
|
|
from utils.shortcuts import (serializer_invalid_response, error_response,
|
|
success_response)
|
|
from ..decorators import login_required
|
|
from ..models import User, UserProfile
|
|
from ..serializers import (UserLoginSerializer, UserRegisterSerializer,
|
|
UserChangePasswordSerializer)
|
|
|
|
|
|
class UserLoginAPIView(APIView):
|
|
def post(self, request):
|
|
"""
|
|
User login api
|
|
"""
|
|
serializer = UserLoginSerializer(data=request.data)
|
|
if serializer.is_valid():
|
|
data = serializer.data
|
|
user = auth.authenticate(username=data["username"], password=data["password"])
|
|
# None is returned if username or password is wrong
|
|
if user:
|
|
if not user.two_factor_auth:
|
|
auth.login(request, user)
|
|
return success_response(_("Succeeded"))
|
|
|
|
# `tfa_code` not in post data
|
|
if user.two_factor_auth and "tfa_code" not in data:
|
|
return success_response("tfa_required")
|
|
|
|
if OtpAuth(user.tfa_token).valid_totp(data["tfa_code"]):
|
|
auth.login(request, user)
|
|
return success_response(_("Succeeded"))
|
|
else:
|
|
return error_response(_("Invalid two factor verification code"))
|
|
else:
|
|
return error_response(_("Invalid username or password"))
|
|
else:
|
|
return serializer_invalid_response(serializer)
|
|
|
|
# todo remove this, only for debug use
|
|
def get(self, request):
|
|
auth.login(request, auth.authenticate(username=request.GET["username"], password=request.GET["password"]))
|
|
return success_response({})
|
|
|
|
|
|
class UserRegisterAPIView(APIView):
|
|
def post(self, request):
|
|
"""
|
|
User register api
|
|
"""
|
|
serializer = UserRegisterSerializer(data=request.data)
|
|
if serializer.is_valid():
|
|
data = serializer.data
|
|
captcha = Captcha(request)
|
|
if not captcha.check(data["captcha"]):
|
|
return error_response(_("Invalid captcha"))
|
|
try:
|
|
User.objects.get(username=data["username"])
|
|
return error_response(_("Username already exists"))
|
|
except User.DoesNotExist:
|
|
pass
|
|
try:
|
|
User.objects.get(email=data["email"])
|
|
return error_response(_("Email already exists"))
|
|
# Some old data has duplicate email
|
|
except MultipleObjectsReturned:
|
|
return error_response(_("Email already exists"))
|
|
except User.DoesNotExist:
|
|
user = User.objects.create(username=data["username"], email=data["email"])
|
|
user.set_password(data["password"])
|
|
user.save()
|
|
UserProfile.objects.create(user=user)
|
|
return success_response(_("Succeeded"))
|
|
else:
|
|
return serializer_invalid_response(serializer)
|
|
|
|
|
|
class UserChangePasswordAPIView(APIView):
|
|
@login_required
|
|
def post(self, request):
|
|
"""
|
|
User change password api
|
|
"""
|
|
serializer = UserChangePasswordSerializer(data=request.data)
|
|
if serializer.is_valid():
|
|
data = serializer.data
|
|
captcha = Captcha(request)
|
|
if not captcha.check(data["captcha"]):
|
|
return error_response(_("Invalid captcha"))
|
|
username = request.user.username
|
|
user = auth.authenticate(username=username, password=data["old_password"])
|
|
if user:
|
|
user.set_password(data["new_password"])
|
|
user.save()
|
|
return success_response(_("Succeeded"))
|
|
else:
|
|
return error_response(_("Invalid old password"))
|
|
else:
|
|
return serializer_invalid_response(serializer)
|