Source Code for Module django.contrib.auth.handlers.modpython

 1  from mod_python import apache 
 2  import os 
 3   
 4 -def authenhandler(req, **kwargs): 
 5      """ 
 6      Authentication handler that checks against Django's auth database. 
 7      """ 
 8   
 9      # mod_python fakes the environ, and thus doesn't process SetEnv.  This fixes 
10      # that so that the following import works 
11      os.environ.update(req.subprocess_env) 
12   
13      # apache 2.2 requires a call to req.get_basic_auth_pw() before  
14      # req.user and friends are available. 
15      req.get_basic_auth_pw() 
16   
17      # check for PythonOptions 
18      _str_to_bool = lambda s: s.lower() in ('1', 'true', 'on', 'yes') 
19   
20      options = req.get_options() 
21      permission_name = options.get('DjangoPermissionName', None) 
22      staff_only = _str_to_bool(options.get('DjangoRequireStaffStatus', "on")) 
23      superuser_only = _str_to_bool(options.get('DjangoRequireSuperuserStatus', "off")) 
24      settings_module = options.get('DJANGO_SETTINGS_MODULE', None) 
25      if settings_module: 
26          os.environ['DJANGO_SETTINGS_MODULE'] = settings_module 
27   
28      from django.contrib.auth.models import User 
29      from django import db 
30      db.reset_queries() 
31   
32      # check that the username is valid 
33      kwargs = {'username': req.user, 'is_active': True} 
34      if staff_only: 
35          kwargs['is_staff'] = True 
36      if superuser_only: 
37          kwargs['is_superuser'] = True 
38      try: 
39          try: 
40              user = User.objects.get(**kwargs) 
41          except User.DoesNotExist: 
42              return apache.HTTP_UNAUTHORIZED 
43       
44          # check the password and any permission given 
45          if user.check_password(req.get_basic_auth_pw()): 
46              if permission_name: 
47                  if user.has_perm(permission_name): 
48                      return apache.OK 
49                  else: 
50                      return apache.HTTP_UNAUTHORIZED 
51              else: 
52                  return apache.OK 
53          else: 
54              return apache.HTTP_UNAUTHORIZED 
55      finally: 
56          db.connection.close() 
57