mirror of
https://github.com/nikdoof/test-auth.git
synced 2025-12-14 06:42:16 +00:00
Reorganise the file structure into a project tree
This commit is contained in:
2
app/api/handlers/__init__.py
Normal file
2
app/api/handlers/__init__.py
Normal file
@@ -0,0 +1,2 @@
|
||||
from v1 import *
|
||||
from v2 import *
|
||||
250
app/api/handlers/v1.py
Normal file
250
app/api/handlers/v1.py
Normal file
@@ -0,0 +1,250 @@
|
||||
import re
|
||||
from datetime import datetime
|
||||
|
||||
from piston.handler import BaseHandler
|
||||
from piston.utils import rc, throttle
|
||||
|
||||
from django.contrib.auth import login, logout, authenticate
|
||||
from django.contrib.auth.models import User
|
||||
|
||||
from django.http import HttpResponse
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.shortcuts import get_object_or_404
|
||||
|
||||
from api.models import AuthAPIKey, AuthAPILog
|
||||
from eve_proxy.models import CachedDocument
|
||||
from eve_proxy.exceptions import *
|
||||
from eve_api.models import EVEAccount, EVEPlayerCharacter
|
||||
from sso.models import ServiceAccount, Service
|
||||
from hr.models import Blacklist
|
||||
|
||||
from settings import FULL_API_USER_ID
|
||||
from settings import FULL_API_CHARACTER_ID
|
||||
|
||||
from xml.dom import minidom
|
||||
|
||||
|
||||
class UserHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
if 'userid' in request.GET:
|
||||
try:
|
||||
u = User.objects.get(id=request.GET['userid'])
|
||||
except (User.DoesNotExist, ValueError):
|
||||
return {'auth': 'missing', 'missing': 'userid'}
|
||||
elif 'user' in request.GET:
|
||||
try:
|
||||
u = User.objects.get(username=request.GET['user'])
|
||||
except User.DoesNotExist:
|
||||
return {'auth': 'missing', 'missing': 'username'}
|
||||
elif 'serviceuid' in request.GET:
|
||||
try:
|
||||
u = ServiceAccount.objects.get(service_uid=request.GET['serviceuid']).user
|
||||
except ServiceAccount.DoesNotExist:
|
||||
return {'auth': 'missing', 'missing': 'ServiceAccount'}
|
||||
elif 'apiuserid' in request.GET:
|
||||
try:
|
||||
u = EVEAccount.objects.get(api_user_id=request.GET['apiuserid']).user
|
||||
except EVEAccount.DoesNotExist:
|
||||
return {'auth': 'missing', 'missing': 'apiuserid'}
|
||||
|
||||
chars = []
|
||||
for a in u.eveaccount_set.all():
|
||||
chars.extend(a.characters.all())
|
||||
|
||||
d = {'id': u.id, 'username': u.username, 'email': u.email,
|
||||
'serviceaccounts': u.serviceaccount_set.all(), 'characters': chars,
|
||||
'groups': u.groups.all(), 'staff': u.is_staff, 'superuser': u.is_superuser}
|
||||
|
||||
return d
|
||||
|
||||
|
||||
class LoginHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
|
||||
u = None
|
||||
if request.GET.get('user', None):
|
||||
try:
|
||||
u = User.objects.get(username=request.GET['user'])
|
||||
except User.DoesNotExist:
|
||||
return {'auth': 'missing', 'missing': 'Username'}
|
||||
|
||||
if u:
|
||||
if request.GET.get('pass', None) and request.GET['pass'] == u.get_profile().api_service_password:
|
||||
return {'auth': 'ok', 'id': u.id, 'username': u.username,
|
||||
'email': u.email, 'groups': u.groups.all(),
|
||||
'staff': u.is_staff, 'superuser': u.is_superuser}
|
||||
else:
|
||||
return {'auth': 'failed'}
|
||||
|
||||
return {'auth': 'missing', 'missing': 'all'}
|
||||
|
||||
|
||||
class EveAPIHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
exclude = ('api_key')
|
||||
|
||||
def read(self, request):
|
||||
if request.GET.get('id', None):
|
||||
s = get_object_or_404(EVEAccount, pk=id)
|
||||
elif request.GET.get('userid', None):
|
||||
s = EVEAccount.objects.filter(user=request.GET['userid'])
|
||||
elif request.GET.get('corpid', None):
|
||||
s = EVEAccount.objects.filter(characters__corporation__id=request.GET['corpid'])
|
||||
elif request.GET.get('allianceid', None):
|
||||
s = EVEAccount.objects.filter(characters__corporation__alliance__id=request.GET['allianceid'])
|
||||
|
||||
return {'keys': s.values('id', 'user_id', 'api_status', 'api_last_updated')}
|
||||
|
||||
|
||||
class EveAPIProxyHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
url_path = request.META['PATH_INFO'].replace(reverse('api-eveapiproxy'), "/")
|
||||
|
||||
params = {}
|
||||
for key, value in request.GET.items():
|
||||
params[key.lower()] = value
|
||||
|
||||
if 'userid' in params:
|
||||
obj = get_object_or_404(EVEAccount, pk=params['userid'])
|
||||
params['apikey'] = obj.api_key
|
||||
|
||||
try:
|
||||
cached_doc = CachedDocument.objects.api_query(url_path, params)
|
||||
except DocumentRetrievalError, exc:
|
||||
return HttpResponse(exc, status=500)
|
||||
else:
|
||||
return HttpResponse(cached_doc.body)
|
||||
|
||||
|
||||
class OpTimerHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request, id=None):
|
||||
obj = get_object_or_404(EVEAccount, id=FULL_API_USER_ID)
|
||||
|
||||
params = {'userID': obj.id, 'apiKey': obj.api_key, 'characterID': FULL_API_CHARACTER_ID}
|
||||
|
||||
error_doc = {'ops': [{'startsIn': -1, 'eventID': 0, 'ownerName': '', 'eventDate': '', 'eventTitle': '<div style="text-align:center">The EVE API calendar is unavailable</div>', 'duration': 0, 'isImportant': 0, 'eventText': 'Fuck CCP tbqh imho srsly', 'endsIn':-1, 'forumLink': ''}]}
|
||||
|
||||
try:
|
||||
cached_doc = CachedDocument.objects.api_query('/char/UpcomingCalendarEvents.xml.aspx', params)
|
||||
except DocumentRetrievalError:
|
||||
return error_doc
|
||||
dom = minidom.parseString(cached_doc.body.encode('utf-8'))
|
||||
if dom.getElementsByTagName('error'):
|
||||
error_doc['raw_xml'] = cached_doc.body
|
||||
return error_doc
|
||||
|
||||
events = []
|
||||
for node in dom.getElementsByTagName('rowset')[0].childNodes:
|
||||
if node.nodeType == 1:
|
||||
ownerID = node.getAttribute('ownerID')
|
||||
if ownerID != '1':
|
||||
date = node.getAttribute('eventDate')
|
||||
dt = datetime.strptime(date, '%Y-%m-%d %H:%M:%S')
|
||||
now = datetime.utcnow()
|
||||
startsIn = int(dt.strftime('%s')) - int(now.strftime('%s'))
|
||||
duration = int(node.getAttribute('duration'))
|
||||
|
||||
fid = re.search('topic=[\d]+', node.getAttribute('eventText'))
|
||||
if fid:
|
||||
forumlink = 'http://forum.pleaseignore.com/index.php?%s' % fid.group(0)
|
||||
else:
|
||||
forumlink = ''
|
||||
#In case people forget to set a duration, we'll give a default of 1 hour
|
||||
if duration == 0:
|
||||
duration = 60
|
||||
endsIn = startsIn + (duration * 60)
|
||||
if startsIn < 0:
|
||||
startsIn = 0
|
||||
if endsIn > 0:
|
||||
event = {
|
||||
'startsIn': startsIn,
|
||||
'eventID': node.getAttribute('eventID'),
|
||||
'ownerName': node.getAttribute('ownerName'),
|
||||
'eventDate': date,
|
||||
'eventTitle': node.getAttribute('eventTitle'),
|
||||
'duration': duration,
|
||||
'isImportant': node.getAttribute('importance'),
|
||||
'eventText': node.getAttribute('eventText'),
|
||||
'endsIn':endsIn,
|
||||
'forumLink': forumlink}
|
||||
events.append(event)
|
||||
if len(events) == 0:
|
||||
return {'ops':[{
|
||||
'startsIn': -1,
|
||||
'eventID': 0,
|
||||
'ownerName': '',
|
||||
'eventDate': '',
|
||||
'eventTitle': '<div style="text-align:center">No ops are currently scheduled</div>',
|
||||
'duration': 0,
|
||||
'isImportant': 0,
|
||||
'eventText': 'Add ops using EVE-Gate or the in-game calendar',
|
||||
'endsIn':-1,
|
||||
'forumLink': ''}]}
|
||||
else:
|
||||
return {'ops': events, 'doc_time': cached_doc.time_retrieved, 'cache_until': cached_doc.cached_until, 'current_time': datetime.utcnow() }
|
||||
|
||||
|
||||
class BlacklistHandler(BaseHandler):
|
||||
model = Blacklist
|
||||
allowed_methods = ('GET')
|
||||
fields = ('type', 'value', 'source', ('name', 'ticker'), 'created_date', 'expiry_date', 'reason')
|
||||
|
||||
def read(self, request):
|
||||
if request.GET.get('value'):
|
||||
obj = Blacklist.objects.select_related('blacklistsource').filter(value__icontains=request.GET.get('value'))
|
||||
if obj.count() and request.GET.get('type'):
|
||||
obj = obj.filter(type=request.GET.get('type'))
|
||||
else:
|
||||
obj = []
|
||||
|
||||
return obj
|
||||
|
||||
|
||||
class CharacterHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
fields = ('id', 'name', ('corporation', ('id', 'name', ('alliance', ('id', 'name')))), 'corporation_date', 'balance', 'total_sp', 'security_status', 'director', 'skillset')
|
||||
|
||||
@classmethod
|
||||
def skillset(cls, instance):
|
||||
return instance.eveplayercharacterskill_set.all().values('skill__id', 'skill__name', 'level', 'skillpoints')
|
||||
|
||||
def read(self, request):
|
||||
s = []
|
||||
|
||||
if request.GET.get('id', None):
|
||||
s = get_object_or_404(EVEPlayerCharacter, pk=id)
|
||||
elif request.GET.get('corpid', None):
|
||||
s = EVEPlayerCharacter.objects.filter(corporation__id=request.GET['corpid'])
|
||||
elif request.GET.get('allianceid', None):
|
||||
s = EVEPlayerCharacter.objects.filter(corporation__alliance__id=request.GET['allianceid'])
|
||||
return s
|
||||
|
||||
class AnnounceHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
|
||||
sid = request.GET.get('sid', None)
|
||||
to = request.GET.getlist('to')
|
||||
message = request.GET.get('message', None)
|
||||
subject = request.GET.get('subject', None)
|
||||
|
||||
if sid and to and message:
|
||||
srv = get_object_or_404(Service, pk=sid)
|
||||
|
||||
if not srv.api == 'sso.services.jabber':
|
||||
return {'result': 'invalid'}
|
||||
|
||||
api = srv.api_class
|
||||
return {'result': api.announce(api.settings['jabber_server'], message, subject, groups=to)}
|
||||
|
||||
return {'result': 'invalid'}
|
||||
113
app/api/handlers/v2.py
Normal file
113
app/api/handlers/v2.py
Normal file
@@ -0,0 +1,113 @@
|
||||
from django.contrib.auth.models import User
|
||||
|
||||
from piston.handler import BaseHandler
|
||||
from piston.utils import rc
|
||||
|
||||
from eve_api.models import EVEAccount, EVEPlayerCharacter
|
||||
from eve_proxy.models import CachedDocument
|
||||
|
||||
|
||||
class V2AuthenticationHandler(BaseHandler):
|
||||
"""
|
||||
Authenticate a user against the Auth user DB.
|
||||
Provides back a session allowing further access
|
||||
"""
|
||||
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
"""
|
||||
Validates login details for the provided user as
|
||||
long as 'username' and 'password' are provided.
|
||||
"""
|
||||
|
||||
username = request.GET.get('username', None)
|
||||
password = request.GET.get('password', None)
|
||||
|
||||
if not username or not password:
|
||||
return rc.BAD_REQUEST
|
||||
|
||||
try:
|
||||
user = User.object.get(username=username)
|
||||
except User.DoesNotExist:
|
||||
resp = rc.NOT_FOUND
|
||||
resp.write({'auth': 'notfound'})
|
||||
return resp
|
||||
|
||||
if password and password == user.get_profile().api_service_password:
|
||||
return {'userid': user.id,
|
||||
'username': user.username,
|
||||
'email': user.email,
|
||||
'groups': user.groups.all().values('id', 'name'),
|
||||
'staff': user.is_staff,
|
||||
'superuser': user.is_superuser}
|
||||
|
||||
resp = rc.FORBIDDEN
|
||||
resp.write({'auth': 'failed'})
|
||||
return resp
|
||||
|
||||
|
||||
class V2EveAPIProxyHandler(BaseHandler):
|
||||
"""
|
||||
Provides a proxy handler to the EVE API using 'eve_proxy'
|
||||
"""
|
||||
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request):
|
||||
"""
|
||||
Acts as a EVE API proxy, all params are passed to the
|
||||
API, for the exception of 'apikey' which is dervived from the
|
||||
stored information and 'userid'
|
||||
|
||||
'apikey' field should be populated with the Auth API key.
|
||||
"""
|
||||
url_path = request.META['PATH_INFO'].url_path.replace(reverse('v2-api-eveapiproxy'), "/")
|
||||
|
||||
params = {}
|
||||
for key, value in request.GET.items():
|
||||
params[key.lower()] = value
|
||||
|
||||
try:
|
||||
userid = request.GET.get('userid', None)
|
||||
obj = EVEAccount.objects.get(api_user_id=userid)
|
||||
params['apikey'] = obj.api_key
|
||||
except EVEAccount.DoesNotExist:
|
||||
pass
|
||||
|
||||
try:
|
||||
cached_doc = CachedDocument.objects.api_query(url_path, params)
|
||||
except DocumentRetrievalError:
|
||||
return HttpResponse(status=500)
|
||||
else:
|
||||
return HttpResponse(cached_doc.body)
|
||||
|
||||
|
||||
class V2UserHandler(BaseHandler):
|
||||
allowed_methods = ('GET')
|
||||
|
||||
def read(self, request, userid):
|
||||
try:
|
||||
u = User.objects.get(id=userid)
|
||||
except (User.DoesNotExist, ValueError):
|
||||
resp = rc.NOT_FOUND
|
||||
|
||||
charlist = []
|
||||
for acc in u.eveaccount_set.all():
|
||||
for char in acc.characters.all().select_related('characters').values('id', 'name', 'corporation', 'corporation_date', 'corporation__name'):
|
||||
d = dict(char)
|
||||
d['eveaccount'] = acc.id
|
||||
charlist.append(d)
|
||||
|
||||
d = {'id': u.id,
|
||||
'username': u.username,
|
||||
'email': u.email,
|
||||
'eveaccounts': u.eveaccount_set.all().values('api_user_id', 'description', 'api_status', 'api_keytype'),
|
||||
'serviceaccounts': u.serviceaccount_set.all().values('service', 'service__name', 'service__api', 'service_uid'),
|
||||
'characters': charlist,
|
||||
'groups': u.groups.all().values('id', 'name'),
|
||||
'staff': u.is_staff,
|
||||
'superuser': u.is_superuser}
|
||||
|
||||
return d
|
||||
|
||||
Reference in New Issue
Block a user