46 lines
1.4 KiB
Python
46 lines
1.4 KiB
Python
from rules.permissions import ObjectPermissionBackend
|
|
from rowers.models import User
|
|
|
|
from django.contrib.auth import get_user_model # gets the user_model django default or your own custom
|
|
from django.contrib.auth.backends import ModelBackend
|
|
from django.db.models import Q
|
|
|
|
class MyObjectPermissionBackend(ObjectPermissionBackend):
|
|
def user_can_authenticate(self, user):
|
|
return getattr(user, "is_active", True)
|
|
|
|
def get_user(self, user_id):
|
|
try:
|
|
user = User.objects.get(pk=user_id)
|
|
except User.DoesNotExist:
|
|
return None
|
|
return user if self.user_can_authenticate(user) else None
|
|
|
|
class EmailLoginBackend(ModelBackend):
|
|
def user_can_authenticate(self, user):
|
|
return getattr(user, "is_active", True)
|
|
|
|
def authenticate(self, request, username=None, password=None, **kwargs):
|
|
try:
|
|
user = User.objects.filter(
|
|
Q(username__iexact=username) |
|
|
Q(email__iexact=username)
|
|
).distinct()
|
|
except User.DoesNotExist:
|
|
return None
|
|
|
|
if user.exists():
|
|
user_obj = user.first()
|
|
if user_obj.check_password(password) and user_obj.is_active:
|
|
return user_obj
|
|
return None
|
|
else:
|
|
return None
|
|
|
|
def get_user(self, user_id):
|
|
try:
|
|
return User.objects.get(pk=user_id)
|
|
except User.DoesNotExist:
|
|
return None
|
|
|