Merge Pakfire Hub into the main webapp

[pbs.git] / src / web / auth.py

#!/usr/bin/python3

import logging
import tornado.web

from . import base

# Setup logging
log = logging.getLogger("pakfire.buildservice.web.auth")

class LoginHandler(base.KerberosAuthMixin, base.BaseHandler):
	def get(self):
		username = self.get_authenticated_user()
		if not username:
			# Ask to authenticate
			self.authenticate_redirect()
			return

		# Strip the realm
		username, delim, realm = username.partition("@")

		with self.db.transaction():
			# Otherwise fetch the authenticated user
			user = self.backend.users.get_by_name(username)
			if not user:
				raise tornado.web.HTTPError(500, "Could not find user %s" % username)

			# Create a new session
			session = self.backend.sessions.create(user,
				self.current_address, user_agent=self.user_agent)

		# Send the session cookie to the browser
		self.set_cookie("session_id", session.session_id, expires=session.valid_until)

		# If there is "next" given, we redirect the user accordingly
		next = self.get_argument("next", None)

		# Redirect the user
		self.redirect(next or "/")


class LogoutHandler(base.BaseHandler):
	@tornado.web.authenticated
	def get(self):
		# Destroy the user's session.
		with self.db.transaction():
			# Destroy the session
			self.session.destroy()

		# Remove the session cookie
		self.clear_cookie("session_id")

		# Redirect the user to the front page.
		self.redirect("/")