2017-09-19 08:54:37 +00:00
|
|
|
from textwrap import dedent
|
|
|
|
|
|
|
|
|
|
from aiohttp import web
|
|
|
|
|
|
2018-01-24 10:29:20 +00:00
|
|
|
from aiohttp_security import (
|
|
|
|
|
remember, forget, authorized_userid,
|
|
|
|
|
has_permission, login_required,
|
|
|
|
|
)
|
2017-09-19 08:54:37 +00:00
|
|
|
|
|
|
|
|
from .authz import check_credentials
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
index_template = dedent("""
|
|
|
|
|
<!doctype html>
|
2018-01-24 10:29:20 +00:00
|
|
|
<head></head>
|
|
|
|
|
<body>
|
|
|
|
|
<p>{message}</p>
|
|
|
|
|
<form action="/login" method="post">
|
|
|
|
|
Login:
|
|
|
|
|
<input type="text" name="username">
|
|
|
|
|
Password:
|
|
|
|
|
<input type="password" name="password">
|
|
|
|
|
<input type="submit" value="Login">
|
|
|
|
|
</form>
|
|
|
|
|
<a href="/logout">Logout</a>
|
|
|
|
|
</body>
|
|
|
|
|
""")
|
2017-09-19 08:54:37 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
async def index(request):
|
|
|
|
|
username = await authorized_userid(request)
|
|
|
|
|
if username:
|
|
|
|
|
template = index_template.format(
|
|
|
|
|
message='Hello, {username}!'.format(username=username))
|
|
|
|
|
else:
|
|
|
|
|
template = index_template.format(message='You need to login')
|
|
|
|
|
return web.Response(
|
|
|
|
|
text=template,
|
|
|
|
|
content_type='text/html',
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
async def login(request):
|
|
|
|
|
response = web.HTTPFound('/')
|
|
|
|
|
form = await request.post()
|
|
|
|
|
username = form.get('username')
|
|
|
|
|
password = form.get('password')
|
|
|
|
|
|
2018-01-24 10:29:20 +00:00
|
|
|
verified = await check_credentials(
|
|
|
|
|
request.app.user_map, username, password)
|
2017-09-19 08:54:37 +00:00
|
|
|
if verified:
|
|
|
|
|
await remember(request, response, username)
|
|
|
|
|
return response
|
|
|
|
|
|
|
|
|
|
return web.HTTPUnauthorized(body='Invalid username / password combination')
|
|
|
|
|
|
|
|
|
|
|
2018-01-24 10:29:20 +00:00
|
|
|
@login_required
|
2017-09-19 08:54:37 +00:00
|
|
|
async def logout(request):
|
|
|
|
|
response = web.Response(
|
|
|
|
|
text='You have been logged out',
|
|
|
|
|
content_type='text/html',
|
|
|
|
|
)
|
|
|
|
|
await forget(request, response)
|
|
|
|
|
return response
|
|
|
|
|
|
|
|
|
|
|
2018-01-24 10:29:20 +00:00
|
|
|
@has_permission('public')
|
2017-09-19 08:54:37 +00:00
|
|
|
async def internal_page(request):
|
|
|
|
|
# pylint: disable=unused-argument
|
|
|
|
|
response = web.Response(
|
|
|
|
|
text='This page is visible for all registered users',
|
|
|
|
|
content_type='text/html',
|
|
|
|
|
)
|
|
|
|
|
return response
|
|
|
|
|
|
|
|
|
|
|
2018-01-24 10:29:20 +00:00
|
|
|
@has_permission('protected')
|
2017-09-19 08:54:37 +00:00
|
|
|
async def protected_page(request):
|
|
|
|
|
# pylint: disable=unused-argument
|
|
|
|
|
response = web.Response(
|
|
|
|
|
text='You are on protected page',
|
|
|
|
|
content_type='text/html',
|
|
|
|
|
)
|
|
|
|
|
return response
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def configure_handlers(app):
|
|
|
|
|
router = app.router
|
|
|
|
|
router.add_get('/', index, name='index')
|
|
|
|
|
router.add_post('/login', login, name='login')
|
|
|
|
|
router.add_get('/logout', logout, name='logout')
|
|
|
|
|
router.add_get('/public', internal_page, name='public')
|
|
|
|
|
router.add_get('/protected', protected_page, name='protected')
|
