mirror of
https://github.com/pretix/pretix.git
synced 2026-05-04 15:04:03 +00:00
d85ddb5bda
* Install django-scopes * Fix tests.api * Update tasks and cronjobs * Fix remaining tests * Remove unused import * Fix tests after rebase * Disable scopes for get_Events_with_any_permission * Disable scopes for a management command
28 lines
924 B
Python
28 lines
924 B
Python
from django.contrib.auth.models import AnonymousUser
|
|
from django_scopes import scopes_disabled
|
|
from rest_framework import exceptions
|
|
from rest_framework.authentication import TokenAuthentication
|
|
|
|
from pretix.base.models import Device
|
|
|
|
|
|
class DeviceTokenAuthentication(TokenAuthentication):
|
|
model = Device
|
|
keyword = 'Device'
|
|
|
|
def authenticate_credentials(self, key):
|
|
model = self.get_model()
|
|
try:
|
|
with scopes_disabled():
|
|
device = model.objects.select_related('organizer').get(api_token=key)
|
|
except model.DoesNotExist:
|
|
raise exceptions.AuthenticationFailed('Invalid token.')
|
|
|
|
if not device.initialized:
|
|
raise exceptions.AuthenticationFailed('Device has not been initialized.')
|
|
|
|
if device.revoked:
|
|
raise exceptions.AuthenticationFailed('Device access has been revoked.')
|
|
|
|
return AnonymousUser(), device
|