aiohttp-security/demo/database_auth/handlers.py

from textwrap import dedent

from aiohttp import web

from aiohttp_security import (
    remember, forget, authorized_userid,
    check_permission, check_authorized,
)

from .db_auth import check_credentials


class Web(object):
    index_template = dedent("""
        <!doctype html>
            <head></head>
            <body>
                <p>{message}</p>
                <form action="/login" method="post">
                  Login:
                  <input type="text" name="login">
                  Password:
                  <input type="password" name="password">
                  <input type="submit" value="Login">
                </form>
                <a href="/logout">Logout</a>
            </body>
    """)

    async def index(self, request):
        username = await authorized_userid(request)
        if username:
            template = self.index_template.format(
                message='Hello, {username}!'.format(username=username))
        else:
            template = self.index_template.format(message='You need to login')
        response = web.Response(body=template.encode())
        return response

    async def login(self, request):
        response = web.HTTPFound('/')
        form = await request.post()
        login = form.get('login')
        password = form.get('password')
        db_engine = request.app.db_engine
        if await check_credentials(db_engine, login, password):
            await remember(request, response, login)
            raise response

        raise web.HTTPUnauthorized(
            body=b'Invalid username/password combination')

    async def logout(self, request):
        await check_authorized(request)
        response = web.Response(body=b'You have been logged out')
        await forget(request, response)
        return response

    async def internal_page(self, request):
        await check_permission(request, 'public')
        response = web.Response(
            body=b'This page is visible for all registered users')
        return response

    async def protected_page(self, request):
        await check_permission(request, 'protected')
        response = web.Response(body=b'You are on protected page')
        return response

    def configure(self, app):
        router = app.router
        router.add_route('GET', '/', self.index, name='index')
        router.add_route('POST', '/login', self.login, name='login')
        router.add_route('GET', '/logout', self.logout, name='logout')
        router.add_route('GET', '/public', self.internal_page, name='public')
        router.add_route('GET', '/protected', self.protected_page,
                         name='protected')
Update docs and demo with login required, has permission (#128) * Work on * Update docs with login_required and has_permission 2018-01-24 10:29:20 +00:00			`from textwrap import dedent`
Add handlers 2015-11-29 13:03:35 +00:00
			`from aiohttp import web`

Update docs and demo with login required, has permission (#128) * Work on * Update docs with login_required and has_permission 2018-01-24 10:29:20 +00:00			`from aiohttp_security import (`
			`remember, forget, authorized_userid,`
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`check_permission, check_authorized,`
Update docs and demo with login required, has permission (#128) * Work on * Update docs with login_required and has_permission 2018-01-24 10:29:20 +00:00			`)`
Add handlers 2015-11-29 13:03:35 +00:00
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`from .db_auth import check_credentials`

Add handlers 2015-11-29 13:03:35 +00:00
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`class Web(object):`
Update docs and demo with login required, has permission (#128) * Work on * Update docs with login_required and has_permission 2018-01-24 10:29:20 +00:00			`index_template = dedent("""`
			`<!doctype html>`
			`<head></head>`
			`<body>`
			`<p>{message}</p>`
			`<form action="/login" method="post">`
			`Login:`
			`<input type="text" name="login">`
			`Password:`
			`<input type="password" name="password">`
			`<input type="submit" value="Login">`
			`</form>`
			`<a href="/logout">Logout</a>`
			`</body>`
			`""")`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`async def index(self, request):`
			`username = await authorized_userid(request)`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`if username:`
			`template = self.index_template.format(`
			`message='Hello, {username}!'.format(username=username))`
			`else:`
			`template = self.index_template.format(message='You need to login')`
			`response = web.Response(body=template.encode())`
			`return response`
Add handlers 2015-11-29 13:03:35 +00:00
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`async def login(self, request):`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`response = web.HTTPFound('/')`
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`form = await request.post()`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`login = form.get('login')`
			`password = form.get('password')`
			`db_engine = request.app.db_engine`
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`if await check_credentials(db_engine, login, password):`
			`await remember(request, response, login)`
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`raise response`
Add handlers 2015-11-29 13:03:35 +00:00
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`raise web.HTTPUnauthorized(`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`body=b'Invalid username/password combination')`

Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`async def logout(self, request):`
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`await check_authorized(request)`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`response = web.Response(body=b'You have been logged out')`
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`await forget(request, response)`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`return response`
Add handlers 2015-11-29 13:03:35 +00:00
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`async def internal_page(self, request):`
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`await check_permission(request, 'public')`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`response = web.Response(`
			`body=b'This page is visible for all registered users')`
			`return response`
Add handlers 2015-11-29 13:03:35 +00:00
Switch to async/await syntax 2017-12-13 14:51:46 +00:00			`async def protected_page(self, request):`
Update to 0.3.0 2018-09-06 10:06:55 +00:00			`await check_permission(request, 'protected')`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`response = web.Response(body=b'You are on protected page')`
			`return response`
Add Web.configure 2015-11-30 12:58:49 +00:00
			`def configure(self, app):`
Create working demo (#5) * Add docs example and update demo source code * Fail with debug * Fix tests * Update sql scripts * Update docs * Add checking for the password * Update documentation with launch/usage example * Launch flake8 instead of pep8 and pyflakes 2016-08-30 17:38:59 +00:00			`router = app.router`
			`router.add_route('GET', '/', self.index, name='index')`
			`router.add_route('POST', '/login', self.login, name='login')`
			`router.add_route('GET', '/logout', self.logout, name='logout')`
			`router.add_route('GET', '/public', self.internal_page, name='public')`
			`router.add_route('GET', '/protected', self.protected_page,`
			`name='protected')`