57 lines
2 KiB
Python
57 lines
2 KiB
Python
|
from typing import Tuple
|
||
|
|
|
||
|
|
from django.db import models
|
||
|
|
from django.utils import timezone
|
||
|
|
|
||
|
|
from apps.auth_token import constants, crypto
|
||
|
|
from apps.auth_token.models import BaseAuthToken
|
||
|
|
from apps.user_management.models import Organization, User
|
||
|
|
from settings.base import AUTH_TOKEN_TIMEOUT_SECONDS
|
||
|
|
|
||
|
|
|
||
|
|
def get_expire_date():
|
||
|
|
return timezone.now() + timezone.timedelta(seconds=AUTH_TOKEN_TIMEOUT_SECONDS)
|
||
|
|
|
||
|
|
|
||
|
|
class GoogleOAuth2TokenQueryset(models.QuerySet):
|
||
|
|
def filter(self, *args, **kwargs):
|
||
|
|
now = timezone.now()
|
||
|
|
return super().filter(*args, **kwargs, revoked_at=None, expire_date__gte=now)
|
||
|
|
|
||
|
|
def delete(self):
|
||
|
|
self.update(revoked_at=timezone.now())
|
||
|
|
|
||
|
|
|
||
|
|
class GoogleOAuth2Token(BaseAuthToken):
|
||
|
|
"""
|
||
|
|
Not to be confused with `apps.google.models.GoogleOAuth2User` which is a model for storing user/token data that is
|
||
|
|
received from Google OAuth2 when the user completes the OAuth2 flow.
|
||
|
|
|
||
|
|
This model is primarly used for storing a token during the OAuth2 redirect flow to allow us to identify the user
|
||
|
|
after they've been redirected back to us.
|
||
|
|
"""
|
||
|
|
|
||
|
|
objects = GoogleOAuth2TokenQueryset.as_manager()
|
||
|
|
user = models.ForeignKey(
|
||
|
|
"user_management.User",
|
||
|
|
related_name="google_oauth2_auth_token_set",
|
||
|
|
on_delete=models.CASCADE,
|
||
|
|
)
|
||
|
|
organization = models.ForeignKey(
|
||
|
|
"user_management.Organization", related_name="google_oauth2_auth_token_set", on_delete=models.CASCADE
|
||
|
|
)
|
||
|
|
expire_date = models.DateTimeField(default=get_expire_date)
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def create_auth_token(cls, user: User, organization: Organization) -> Tuple["GoogleOAuth2Token", str]:
|
||
|
|
token_string = crypto.generate_token_string()
|
||
|
|
digest = crypto.hash_token_string(token_string)
|
||
|
|
|
||
|
|
instance = cls.objects.create(
|
||
|
|
token_key=token_string[: constants.TOKEN_KEY_LENGTH],
|
||
|
|
digest=digest,
|
||
|
|
user=user,
|
||
|
|
organization=organization,
|
||
|
|
)
|
||
|
|
return instance, token_string
|