source: mauRepo/dj_security/trunk/dj_security/views/dj_security_login.py @ 8686

'''
Created on 29 Oct 2012

@author: mnagni
'''
from django.contrib.auth import authenticate
from django.shortcuts import render_to_response
from dj_security.login_form import LoginForm
from django.core.context_processors import csrf
from django.conf import settings
import logging
from dj_security.encoder import SecurityEncoder

# Get an instance of a logger
LOGGER = logging.getLogger(__name__)

def error_handle(request, context):
    form = LoginForm()
    context['form'] = form
    context.update(csrf(request))
    return render_to_response('login.html', context)

def login(request):       
    context = {}
    if request.method == 'POST': # If the form has been submitted...
        form = LoginForm(request.POST) # A form bound to the POST data
        context['form'] = form
        if form.is_valid(): # All validation rules pass
            username = request.POST['username']
            password = request.POST['password']
            user = authenticate(username=username, password=password)             
            if user is not None:
                if user.is_active:                    
                    context['user'] = SecurityEncoder().encode(user)
                    request.auth_user = context['user']
                    return _encode_authenticated_response(request, context)         
                else:
                    # Return a 'disabled account' error message
                    context['error'] = u'account disabled'
                    return error_handle(request, context)
            else:
                # Return an 'invalid login' error message.
                context['error'] = u'invalid login'                
                return error_handle(request, context)
        else:
            context['error'] = u'form is invalid'
            return error_handle(request, context)
    else:
        if getattr(settings, "FAKE_AUTHENTICATION", False):
            context['user'] = '{"username": "mnagni", '
            '"first_name": "Maurizio", "last_name": "Nagni", '
            '"is_active": true, "email": "maurizio.nagni@stfc.ac.uk", '
            '"is_superuser": false, "is_staff": true, '
            '"last_login": "2012-10-18 11:05:28.700139+00:00", '
            '"date_joined": "2012-03-22 14:20:56+00:00", "id": 29, '
            '"permissions": "auth.add_user,proginfo.add_dataproduct, '
            'proginfo.change_programme, cedainfoapp.delete_vmrequest"}'
            return _encode_authenticated_response(request, context)  
        
        # An unbound form
        form = LoginForm() 
        context['form'] = form
        context.update(csrf(request))
        return render_to_response('login.html', context)
    
def _encode_authenticated_response(request, context):
    redirect_parameter = getattr(settings, 'REDIRECT_URL', 'r')
    context['redirect_url'] = request.GET.get(redirect_parameter, '')
    return render_to_response('logged_in.html', context)