import hashlib from string import lower import simplejson as json import urllib import urllib2 from django.contrib.auth.models import User, check_password from settings import * class DredditAuthBackend: """ Django authentication backend for authenticating against Dreddit's Auth System. """ def authenticate(self, username=None, password=None): valid = False if username and password: # Call the webservice api_url = 'https://auth.dredd.it/api/user/' auth_handler = urllib2.HTTPBasicAuthHandler() auth_handler.add_password(realm='dredditauth', uri=api_url, user=DREDDIT_API_USERNAME, passwd=DREDDIT_API_PASSWORD) opener = urllib2.build_opener(auth_handler) urllib2.install_opener(opener) params = { 'user': username } try: raw = urllib2.urlopen('%s?%s' % (api_url, urllib.urlencode(params))) except urllib2.HTTPError: pass else: obj = json.loads(raw.read()) if 'password' in obj and check_password(password, obj['password']): email = obj['email'] valid = True if valid: user, created = User.objects.get_or_create(username=username.lower()) if created: user.set_unusable_password() # disable login through Model backend user.save() if email: user.email = email return user return None def get_user(self, user_id): try: return User.objects.get(pk=user_id) except User.DoesNotExist: return None