Refactor views a bit to keep things cleaner and fix up tests

2026-09-10 12:01:01 +08:00 · 2012-05-10 12:31:37 -04:00
parent d6beaa43e3
commit 5e8b53ef46
3 changed files with 118 additions and 81 deletions
@@ -0,0 +1,54 @@
+
+from __future__ import absolute_import
+
+from flask import current_app, redirect, request, session
+from flask.ext.login import login_user, logout_user
+from flask.ext.principal import Identity, AnonymousIdentity, identity_changed
+from flask.ext import security
+
+
+def authenticate():
+    try:
+        form = current_app.security.form_class()
+        user = current_app.security.auth_provider.authenticate(form)
+
+        if login_user(user, remember=form.remember.data):
+            redirect_url = security._get_post_login_redirect()
+            identity_changed.send(current_app._get_current_object(),
+                                  identity=Identity(user.id))
+            current_app.logger.debug('User %s logged in. Redirecting to: '
+                                     '%s' % (user, redirect_url))
+            return redirect(redirect_url)
+
+        raise security.BadCredentialsError('Inactive user')
+
+    except security.BadCredentialsError, e:
+        message = '%s' % e
+        security._do_flash(message, 'error')
+        redirect_url = request.referrer or \
+                       current_app.security.login_manager.login_view
+        current_app.logger.error('Unsuccessful authentication attempt: %s. '
+                                 'Redirect to: %s' % (message, redirect_url))
+        return redirect(redirect_url)
+
+
+def logout():
+    for value in ('identity.name', 'identity.auth_type'):
+        session.pop(value, None)
+
+    identity_changed.send(current_app._get_current_object(),
+                          identity=AnonymousIdentity())
+    logout_user()
+
+    redirect_url = security._find_redirect('SECURITY_POST_LOGOUT_VIEW')
+    current_app.logger.debug('User logged out. Redirect to: %s' % redirect_url)
+    return redirect(redirect_url)
+
+
+def reset():
+    # user = something
+    # if reset_password_period_valid_for_user(user):
+    #     user.reset_password_sent_at = datetime.utcnow()
+    #     user.reset_password_token = token
+    #     current_app.security.datastore._save_model(user)
+    pass