mirror of
https://github.com/nikdoof/test-auth.git
synced 2025-12-17 03:39:25 +00:00
Filter extra data out of the API access logs
This commit is contained in:
@@ -1,3 +1,4 @@
|
|||||||
|
from urllib import urlencode
|
||||||
from datetime import datetime
|
from datetime import datetime
|
||||||
from django.http import HttpResponseForbidden
|
from django.http import HttpResponseForbidden
|
||||||
from django.contrib.auth.models import AnonymousUser
|
from django.contrib.auth.models import AnonymousUser
|
||||||
@@ -14,7 +15,13 @@ class APIKeyAuthentication(object):
|
|||||||
pass
|
pass
|
||||||
else:
|
else:
|
||||||
if keyobj and keyobj.active:
|
if keyobj and keyobj.active:
|
||||||
AuthAPILog(key=keyobj, access_datetime=datetime.utcnow(), url=request.get_full_path()).save()
|
params = request.GET.copy()
|
||||||
|
if params.get('apikey', None): del params['apikey']
|
||||||
|
if len(params):
|
||||||
|
url = "%s?%s" % (request.path, urlencode(params))
|
||||||
|
else:
|
||||||
|
url = request.path
|
||||||
|
AuthAPILog(key=keyobj, access_datetime=datetime.utcnow(), url=url).save()
|
||||||
request.user = AnonymousUser()
|
request.user = AnonymousUser()
|
||||||
return True
|
return True
|
||||||
return False
|
return False
|
||||||
|
|||||||
Reference in New Issue
Block a user