Corrections pour sigma

[auf_roa_authentification_backend.git] / auf_roa_authentification_backend / backends.py

# -*- encoding: utf-8 -*-
import hashlib, sys

from django.conf import settings
from django.contrib.auth.backends import ModelBackend
from django.contrib.auth.models import User as DjangoUser, check_password

from models import AufUser as RemoteUser

class CascadeBackend(ModelBackend):
    def authenticate(self, username=None, password=None):
        user = None

        # Prep des données
        if username.endswith ("@auf.org"):
            username = username.replace ("@auf.org", "")

        email = "%s@auf.org" % username
        md5pass = hashlib.md5(password).hexdigest ()

        # Cherche les comptes roa+locaux
        remoteUser = localUser = None
        try:
            remoteUser = RemoteUser.objects.get (email=email, password=md5pass)
        except:
            pass
        try:
            localUser = DjangoUser.objects.get (username=username)
        except: pass

        # Si on a pas besoin du mdp, on doit copier qd meme,
        # il ne faut jamais retourner un "RemoteUser" ici
        if not settings.AUTH_PASSWORD_REQUIRED:
            if remoteUser and not localUser:
                localUser = DjangoUser (username = username,
                        email = email, 
                        first_name = remoteUser.first_name,
                        last_name = remoteUser.last_name,
                        is_staff = False,
                        is_active = True,
                        is_superuser = False)
                localUser.set_password (password)
                localUser.save ()
            user = localUser
        # Gestion des comptes roa vs. local
        else:
            # Local existe pas, on doit de tte facon le creer
            if not localUser:
                localUser = DjangoUser (username = username,
                        email = email, 
                        is_staff = False,
                        is_active = True,
                        is_superuser = False)
            # Cas du compte local seul, on verifie le mot de passe
            elif not remoteUser:
                if localUser.check_password (password):
                    user = localUser
            # Compte roa, on valide le mot de passe distant et on
            # met a jour la copie locale
            if remoteUser:
                localUser.first_name = remoteUser.first_name
                localUser.last_name = remoteUser.last_name
                # pass distant en md5
                localUser.set_password (password)
                localUser.save ()
                user = localUser

        return user