decorators.py
5619f3d27126master

decorators.py
View Options

			import re
			from functools import wraps

			from django.http import HttpResponseForbidden
			from django.views.decorators.csrf import csrf_exempt

			from mydata_benchmarks.models import ClientToken


			def client_token_required(view_func):
			"""Decorator which ensures the client has provided a correct token."""

			@csrf_exempt
			@wraps(view_func)
			def _wrapped_view(request, args, *kwargs):
			auth_header = request.META.get('HTTP_AUTHORIZATION')

			if not auth_header:
			return HttpResponseForbidden("Must include Bearer token authorization with request.")

			try:
			auth_string = re.search('Bearer (.*)', auth_header).group(1)
			except AttributeError:
			return HttpResponseForbidden("Must include Bearer token authorization with request.")

			try:
			token = ClientToken.objects.get(token=auth_string)
			except ClientToken.DoesNotExist:
			return HttpResponseForbidden("Token invalid or expired.")

			request.user = token.user
			return view_func(request, args, *kwargs)

			return _wrapped_view