Tivix/django-rest-auth
1
1
Fork 0
mirror of https://github.com/Tivix/django-rest-auth.git synced 2025-07-10 16:02:19 +03:00
Code Issues Packages Projects Releases Wiki Activity

define permission classes inside views

Browse Source
This commit is contained in:
Mateusz Sikora 2014-10-24 15:52:07 +02:00
parent 87a8e5865a
commit 5825fae048
1 changed files with 12 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
rest_auth/views.py
View File

@ -16,16 +16,7 @@ from app_settings import (TokenSerializer, UserDetailsSerializer,
PasswordChangeSerializer) PasswordChangeSerializer)
class LoggedInRESTAPIView(APIView): class Login(GenericAPIView):
authentication_classes = ((SessionAuthentication, TokenAuthentication))
permission_classes = ((IsAuthenticated,))
class LoggedOutRESTAPIView(APIView):
permission_classes = ((AllowAny,))
class Login(LoggedOutRESTAPIView, GenericAPIView):
""" """
Check the credentials and return the REST Token Check the credentials and return the REST Token
@ -36,7 +27,7 @@ class Login(LoggedOutRESTAPIView, GenericAPIView):
Accept the following POST parameters: username, password Accept the following POST parameters: username, password
Return the REST Framework Token Object's key. Return the REST Framework Token Object's key.
""" """
permission_classes = (AllowAny,)
serializer_class = LoginSerializer serializer_class = LoginSerializer
token_model = Token token_model = Token
response_serializer = TokenSerializer response_serializer = TokenSerializer
@ -68,7 +59,7 @@ class Login(LoggedOutRESTAPIView, GenericAPIView):
return self.get_response() return self.get_response()
class Logout(LoggedInRESTAPIView): class Logout(APIView):
""" """
Calls Django logout method and delete the Token object Calls Django logout method and delete the Token object
@ -76,6 +67,7 @@ class Logout(LoggedInRESTAPIView):
Accepts/Returns nothing. Accepts/Returns nothing.
""" """
permissions_classes = (AllowAny,)
def post(self, request): def post(self, request):
try: try:
@ -89,7 +81,7 @@ class Logout(LoggedInRESTAPIView):
status=status.HTTP_200_OK) status=status.HTTP_200_OK)
class UserDetails(LoggedInRESTAPIView, RetrieveUpdateAPIView): class UserDetails(RetrieveUpdateAPIView):
""" """
Returns User's details in JSON format. Returns User's details in JSON format.
@ -101,12 +93,13 @@ class UserDetails(LoggedInRESTAPIView, RetrieveUpdateAPIView):
Returns the updated UserProfile and/or User object. Returns the updated UserProfile and/or User object.
""" """
serializer_class = UserDetailsSerializer serializer_class = UserDetailsSerializer
permission_classes = (IsAuthenticated,)
def get_object(self): def get_object(self):
return self.request.user return self.request.user
class PasswordReset(LoggedOutRESTAPIView, GenericAPIView): class PasswordReset(GenericAPIView):
""" """
Calls Django Auth PasswordResetForm save method. Calls Django Auth PasswordResetForm save method.
@ -116,6 +109,7 @@ class PasswordReset(LoggedOutRESTAPIView, GenericAPIView):
""" """
serializer_class = PasswordResetSerializer serializer_class = PasswordResetSerializer
permission_classes = (AllowAny,)
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
# Create a serializer with request.DATA # Create a serializer with request.DATA
@ -130,7 +124,7 @@ class PasswordReset(LoggedOutRESTAPIView, GenericAPIView):
status=status.HTTP_200_OK) status=status.HTTP_200_OK)
class PasswordResetConfirm(LoggedOutRESTAPIView, GenericAPIView): class PasswordResetConfirm(GenericAPIView):
""" """
Password reset e-mail link is confirmed, therefore this resets the user's password. Password reset e-mail link is confirmed, therefore this resets the user's password.
@ -141,6 +135,7 @@ class PasswordResetConfirm(LoggedOutRESTAPIView, GenericAPIView):
""" """
serializer_class = PasswordResetConfirmSerializer serializer_class = PasswordResetConfirmSerializer
permission_classes = (AllowAny,)
def post(self, request): def post(self, request):
serializer = self.get_serializer(data=request.DATA) serializer = self.get_serializer(data=request.DATA)
@ -151,7 +146,7 @@ class PasswordResetConfirm(LoggedOutRESTAPIView, GenericAPIView):
return Response({"success": "Password has been reset with the new password."}) return Response({"success": "Password has been reset with the new password."})
class PasswordChange(LoggedInRESTAPIView, GenericAPIView): class PasswordChange(GenericAPIView):
""" """
Calls Django Auth SetPasswordForm save method. Calls Django Auth SetPasswordForm save method.
@ -161,6 +156,7 @@ class PasswordChange(LoggedInRESTAPIView, GenericAPIView):
""" """
serializer_class = PasswordChangeSerializer serializer_class = PasswordChangeSerializer
permission_classes = (IsAuthenticated,)
def post(self, request): def post(self, request):
serializer = self.get_serializer(data=request.DATA) serializer = self.get_serializer(data=request.DATA)