mirror of
https://github.com/Mistake35/Cedar-Django.git
synced 2026-07-17 16:11:14 +10:00
some weird guy
1b33a2aad1
- Merge with closedverse-video-support - user_tools moved to forms.py - community_tools moved to forms.py
51 lines
2.1 KiB
Python
51 lines
2.1 KiB
Python
from django.http import HttpResponseForbidden
|
|
from closedverse import settings
|
|
from django.shortcuts import redirect
|
|
from django.contrib.auth import logout
|
|
from re import compile
|
|
|
|
# Taken from https://python-programming.com/recipes/django-require-authentication-pages/
|
|
if settings.FORCE_LOGIN:
|
|
EXEMPT_URLS = [compile(settings.LOGIN_URL.lstrip('/'))]
|
|
if hasattr(settings, 'LOGIN_EXEMPT_URLS'):
|
|
EXEMPT_URLS += [compile(expr) for expr in settings.LOGIN_EXEMPT_URLS]
|
|
|
|
class ClosedMiddleware(object):
|
|
def __init__(self, get_response):
|
|
self.get_response = get_response
|
|
|
|
def __call__(self, request):
|
|
# Force logins if it's set
|
|
if settings.FORCE_LOGIN and not request.user.is_authenticated:
|
|
if not any(m.match(request.path_info.lstrip('/')) for m in EXEMPT_URLS):
|
|
if request.headers.get('x-requested-with') == 'XMLHttpRequest':
|
|
return HttpResponseForbidden("Login is required")
|
|
return redirect(settings.LOGIN_REDIRECT_URL)
|
|
# Fix this ; put something in settings signifying if the server supports HTTPS or not
|
|
#if not request.is_secure() and (not settings.DEBUG) and settings.CLOSEDVERSE_PROD:
|
|
# Let's try to redirect to HTTPS for non-Nintendo stuff.
|
|
"""
|
|
if not request.META.get('HTTP_USER_AGENT'):
|
|
return HttpResponseForbidden("You need a user agent.", content_type='text/plain')
|
|
if settings.CLOSEDVERSE_PROD not request.is_secure() and not 'Nintendo' in request.META['HTTP_USER_AGENT']:
|
|
return redirect('https://{0}{1}'.format(request.get_host(), request.get_full_path()))
|
|
"""
|
|
if request.user.is_authenticated:
|
|
"""
|
|
if not request.user.is_active():
|
|
if request.user.warned_reason:
|
|
ban_msg = request.user.warned_reason
|
|
else:
|
|
ban_msg = 'You are banned.'
|
|
return HttpResponseForbidden(ban_msg)
|
|
"""
|
|
# can just forbid post requests for the time being (but leav our funny logout message :3)
|
|
if not request.user.is_active() and request.method != 'GET' and request.get_full_path() != '/logout/':
|
|
return HttpResponseForbidden()
|
|
response = self.get_response(request)
|
|
if request.user.is_authenticated:
|
|
# for reverse proxy
|
|
response['X-Username'] = request.user.username
|
|
|
|
return response
|