mirror of
https://github.com/pretix/pretix.git
synced 2025-12-19 16:22:26 +00:00
70 lines
3.3 KiB
Python
70 lines
3.3 KiB
Python
#
|
|
# This file is part of pretix (Community Edition).
|
|
#
|
|
# Copyright (C) 2014-2020 Raphael Michel and contributors
|
|
# Copyright (C) 2020-today pretix GmbH and contributors
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
# Public License as published by the Free Software Foundation in version 3 of the License.
|
|
#
|
|
# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
|
|
# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
|
|
# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
|
|
# this file, see <https://pretix.eu/about/en/license>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
|
|
# <https://www.gnu.org/licenses/>.
|
|
#
|
|
from datetime import timedelta
|
|
|
|
from django.utils import timezone
|
|
from oauth2_provider.exceptions import FatalClientError
|
|
from oauth2_provider.oauth2_validators import Grant, OAuth2Validator
|
|
from oauth2_provider.settings import oauth2_settings
|
|
|
|
|
|
class Validator(OAuth2Validator):
|
|
|
|
def save_authorization_code(self, client_id, code, request, *args, **kwargs):
|
|
if not getattr(request, 'organizers', None) and request.scopes != ['profile']:
|
|
raise FatalClientError('No organizers selected.')
|
|
|
|
expires = timezone.now() + timedelta(
|
|
seconds=oauth2_settings.AUTHORIZATION_CODE_EXPIRE_SECONDS)
|
|
g = Grant(application=request.client, user=request.user, code=code["code"],
|
|
expires=expires, redirect_uri=request.redirect_uri,
|
|
scope=" ".join(request.scopes))
|
|
g.save()
|
|
if request.scopes != ['profile']:
|
|
g.organizers.add(*request.organizers.all())
|
|
|
|
def validate_code(self, client_id, code, client, request, *args, **kwargs):
|
|
try:
|
|
grant = Grant.objects.get(code=code, application=client)
|
|
if not grant.is_expired():
|
|
request.scopes = grant.scope.split(" ")
|
|
request.user = grant.user
|
|
request.organizers = grant.organizers.all()
|
|
return True
|
|
return False
|
|
|
|
except Grant.DoesNotExist:
|
|
return False
|
|
|
|
def _create_access_token(self, expires, request, token, source_refresh_token=None):
|
|
if not getattr(request, 'organizers', None) and not getattr(source_refresh_token, 'access_token', None) and token["scope"] != 'profile':
|
|
raise FatalClientError('No organizers selected.')
|
|
if token['scope'] != 'profile':
|
|
if hasattr(request, 'organizers'):
|
|
orgs = list(request.organizers.all())
|
|
else:
|
|
orgs = list(source_refresh_token.access_token.organizers.all())
|
|
access_token = super()._create_access_token(expires, request, token, source_refresh_token=None)
|
|
if token['scope'] != 'profile':
|
|
access_token.organizers.add(*orgs)
|
|
return access_token
|