source: mauRepo/dj_security/trunk/dj_security/views/my_view.py @ 8673

'''
Created on 29 Oct 2012

@author: mnagni
'''
from django.contrib.auth import authenticate, login
from django.shortcuts import render_to_response
from dj_security.login_form import LoginForm
from django.core.context_processors import csrf
from django.http import HttpResponseRedirect
from paste.auth.auth_tkt import AuthTicket
from django.conf import settings
import logging

# Get an instance of a logger
logger = logging.getLogger(__name__)

def error_handle(request, context):
    form = LoginForm()
    context['form'] = form
    context.update(csrf(request))
    return render_to_response('login.html', context)

def my_login(request):       
    context = {}
    if request.method == 'POST': # If the form has been submitted...
        form = LoginForm(request.POST) # A form bound to the POST data
        context['form'] = form
        if form.is_valid(): # All validation rules pass
            username = request.POST['username']
            password = request.POST['password']
            user = authenticate(username=username, password=password)            
            if user is not None:
                if user.is_active:
                    remote_ip = _calculate_remote_ip(request)
                    # Redirect to a success page.
                    login(request, user)              
                    token = AuthTicket(
                        getattr(settings, 'SHARED_SECRET', 'sharedsecret'), 
                        username, 
                        remote_ip)
                    res = HttpResponseRedirect(request.GET.get('r', 'accounts/profile/'))
                    res.set_cookie('auth_tkt', token.cookie_value())
                    logger.info("Logging %s from %s" % (username, remote_ip))
                    return res
                else:
                    # Return a 'disabled account' error message
                    context['error'] = u'account disabled'
                    return error_handle(request, context)
            else:
                # Return an 'invalid login' error message.
                context['error'] = u'invalid login'                
                return error_handle(request, context)
        else:
            context['error'] = u'form is invalid'
            return error_handle(request, context)
    else:
        # An unbound form
        form = LoginForm() 
        context['form'] = form
        context.update(csrf(request))
        return render_to_response('login.html', context)

def _calculate_remote_ip(request):
    import urlparse
    import socket
    remote_url = urlparse.urlparse(request.GET.get('r', ''))
    if remote_url.netloc != '':
        return socket.gethostbyname_ex(remote_url.netloc).split(':')[0][2][1]
    return '127.0.0.1'