Add login_required decorator

2017-02-06 01:11:32 +02:00
parent 6e4355ce3c
commit 19d7ee7b06
3 changed files with 42 additions and 22 deletions
--- a/demo/handlers.py
+++ b/demo/handlers.py
@@ -1,27 +1,17 @@
 import asyncio
-import functools

 from aiohttp import web

-from aiohttp_security import remember, forget, authorized_userid, permits
+from aiohttp_security import (
+    authorized_userid,
+    forget,
+    login_required,
+    remember,
+)

 from .db_auth import check_credentials


-def require(permission):
-    def wrapper(f):
-        @asyncio.coroutine
-        @functools.wraps(f)
-        def wrapped(self, request):
-            has_perm = yield from permits(request, permission)
-            if not has_perm:
-                message = 'User has no permission {}'.format(permission)
-                raise web.HTTPForbidden(body=message.encode())
-            return (yield from f(self, request))
-        return wrapped
-    return wrapper
-
-
 class Web(object):
    index_template = """
 <!doctype html>
@@ -65,21 +55,21 @@ class Web(object):
        return web.HTTPUnauthorized(
            body=b'Invalid username/password combination')

-    @require('public')
+    @login_required('public')
    @asyncio.coroutine
    def logout(self, request):
        response = web.Response(body=b'You have been logged out')
        yield from forget(request, response)
        return response

-    @require('public')
+    @login_required('public')
    @asyncio.coroutine
    def internal_page(self, request):
        response = web.Response(
            body=b'This page is visible for all registered users')
        return response

-    @require('protected')
+    @login_required('protected')
    @asyncio.coroutine
    def protected_page(self, request):
        response = web.Response(body=b'You are on protected page')