mirror of
https://github.com/inventree/InvenTree.git
synced 2025-05-01 21:16:46 +00:00
113 lines
2.9 KiB
Python
113 lines
2.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
from __future__ import unicode_literals
|
|
|
|
from rest_framework import generics, permissions
|
|
from django.contrib.auth.models import User
|
|
from django.core.exceptions import ObjectDoesNotExist
|
|
from .serializers import UserSerializer
|
|
|
|
from rest_framework.views import APIView
|
|
from rest_framework.authtoken.models import Token
|
|
from rest_framework.response import Response
|
|
from rest_framework import status
|
|
|
|
from .models import RuleSet, check_user_role
|
|
|
|
|
|
class RoleDetails(APIView):
|
|
"""
|
|
API endpoint which lists the available role permissions
|
|
for the current user
|
|
|
|
(Requires authentication)
|
|
"""
|
|
|
|
permission_classes = [
|
|
permissions.IsAuthenticated
|
|
]
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
|
|
user = request.user
|
|
|
|
roles = {}
|
|
|
|
for ruleset in RuleSet.RULESET_CHOICES:
|
|
|
|
role, text = ruleset
|
|
|
|
permissions = []
|
|
|
|
for permission in RuleSet.RULESET_PERMISSIONS:
|
|
if check_user_role(user, role, permission):
|
|
|
|
permissions.append(permission)
|
|
|
|
if len(permissions) > 0:
|
|
roles[role] = permissions
|
|
else:
|
|
roles[role] = None
|
|
|
|
data = {
|
|
'user': user.pk,
|
|
'username': user.username,
|
|
'roles': roles,
|
|
'is_staff': user.is_staff,
|
|
'is_superuser': user.is_superuser,
|
|
}
|
|
|
|
return Response(data)
|
|
|
|
|
|
class UserDetail(generics.RetrieveAPIView):
|
|
""" Detail endpoint for a single user """
|
|
|
|
queryset = User.objects.all()
|
|
serializer_class = UserSerializer
|
|
permission_classes = (permissions.IsAuthenticated,)
|
|
|
|
|
|
class UserList(generics.ListAPIView):
|
|
""" List endpoint for detail on all users """
|
|
|
|
queryset = User.objects.all()
|
|
serializer_class = UserSerializer
|
|
permission_classes = (permissions.IsAuthenticated,)
|
|
|
|
|
|
class GetAuthToken(APIView):
|
|
""" Return authentication token for an authenticated user. """
|
|
|
|
permission_classes = [
|
|
permissions.IsAuthenticated,
|
|
]
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
return self.login(request)
|
|
|
|
def delete(self, request):
|
|
return self.logout(request)
|
|
|
|
def login(self, request):
|
|
|
|
if request.user.is_authenticated:
|
|
# Get the user token (or create one if it does not exist)
|
|
token, created = Token.objects.get_or_create(user=request.user)
|
|
return Response({
|
|
'token': token.key,
|
|
})
|
|
|
|
else:
|
|
return Response({
|
|
'error': 'User not authenticated',
|
|
})
|
|
|
|
def logout(self, request):
|
|
try:
|
|
request.user.auth_token.delete()
|
|
return Response({"success": "Successfully logged out."},
|
|
status=status.HTTP_202_ACCEPTED)
|
|
except (AttributeError, ObjectDoesNotExist):
|
|
return Response({"error": "Bad request"},
|
|
status=status.HTTP_400_BAD_REQUEST)
|