encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2025-08-05 04:50:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

overridable user activeness checker for custom user model

Browse Source
This commit is contained in:
ludbek 2017-03-07 15:22:28 +05:45
parent 8a14b39e7d
commit 5d7aba72b5
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
rest_framework/authentication.py
View File

@ -85,6 +85,13 @@ class BasicAuthentication(BaseAuthentication):
userid, password = auth_parts[0], auth_parts[2] userid, password = auth_parts[0], auth_parts[2]
return self.authenticate_credentials(userid, password) return self.authenticate_credentials(userid, password)
def user_is_active(self, user):
"""
Returns True if user is active else returns False.
Override this if some other field in custom user model determines user's activeness.
"""
return user.is_active
def authenticate_credentials(self, userid, password): def authenticate_credentials(self, userid, password):
""" """
Authenticate the userid and password against username and password. Authenticate the userid and password against username and password.
@ -98,7 +105,7 @@ class BasicAuthentication(BaseAuthentication):
if user is None: if user is None:
raise exceptions.AuthenticationFailed(_('Invalid username/password.')) raise exceptions.AuthenticationFailed(_('Invalid username/password.'))
if not user.is_active: if not self.user_is_active(user):
raise exceptions.AuthenticationFailed(_('User inactive or deleted.')) raise exceptions.AuthenticationFailed(_('User inactive or deleted.'))
return (user, None) return (user, None)
@ -122,7 +129,7 @@ class SessionAuthentication(BaseAuthentication):
user = getattr(request._request, 'user', None) user = getattr(request._request, 'user', None)
# Unauthenticated, CSRF validation not required # Unauthenticated, CSRF validation not required
if not user or not user.is_active: if not user or not self.user_is_active(user):
return None return None
self.enforce_csrf(request) self.enforce_csrf(request)
@ -194,7 +201,7 @@ class TokenAuthentication(BaseAuthentication):
except model.DoesNotExist: except model.DoesNotExist:
raise exceptions.AuthenticationFailed(_('Invalid token.')) raise exceptions.AuthenticationFailed(_('Invalid token.'))
if not token.user.is_active: if not self.user_is_active(token.user):
raise exceptions.AuthenticationFailed(_('User inactive or deleted.')) raise exceptions.AuthenticationFailed(_('User inactive or deleted.'))
return (token.user, token) return (token.user, token)