fix auto-correct: commas and spaces
[redakcja.git] / apps / django_cas / middleware.py
1 """CAS authentication middleware"""
2
3 from urllib import urlencode
4
5 from django.http import HttpResponseRedirect, HttpResponseForbidden
6 from django.conf import settings
7 from django.contrib.auth import REDIRECT_FIELD_NAME
8 from django.contrib.auth.views import login, logout
9 from django.core.urlresolvers import reverse
10
11 from django_cas.views import login as cas_login, logout as cas_logout
12
13 __all__ = ['CASMiddleware']
14
15
16 class CASMiddleware(object):
17     """Middleware that allows CAS authentication on admin pages"""
18
19     def process_request(self, request):
20         """Checks that the authentication middleware is installed"""
21
22         error = ("The Django CAS middleware requires authentication "
23                  "middleware to be installed. Edit your MIDDLEWARE_CLASSES "
24                  "setting to insert 'django.contrib.auth.middleware."
25                  "AuthenticationMiddleware'.")
26         # assert hasattr(request, 'user'), error
27
28     def process_view(self, request, view_func, view_args, view_kwargs):
29         """Forwards unauthenticated requests to the admin page to the CAS
30         login URL, as well as calls to django.contrib.auth.views.login and
31         logout.
32         """
33
34         if view_func == login:
35             return cas_login(request, *view_args, **view_kwargs)
36         elif view_func == logout:
37             return cas_logout(request, *view_args, **view_kwargs)
38
39         if settings.CAS_ADMIN_PREFIX:
40             if not request.path.startswith(settings.CAS_ADMIN_PREFIX):
41                 return None
42         elif not view_func.__module__.startswith('django.contrib.admin.'):
43             return None
44
45         if request.user.is_authenticated():
46             if request.user.is_staff:
47                 return None
48             else:
49                 error = ('<h1>Forbidden</h1><p>You do not have staff '
50                          'privileges.</p>')
51                 return HttpResponseForbidden(error)
52         params = urlencode({REDIRECT_FIELD_NAME: request.get_full_path()})
53         return HttpResponseRedirect(reverse(cas_login) + '?' + params)