32 lines
983 B
Python
32 lines
983 B
Python
from bottle import redirect, request, abort, response
|
|
from db import db
|
|
from functools import wraps
|
|
from inspect import Signature
|
|
from user import User
|
|
|
|
|
|
class SessionPlugin(object):
|
|
name = 'SessionPlugin'
|
|
keyword = 'user'
|
|
api = 2
|
|
|
|
def __init__(self, loginpage):
|
|
self.loginpage = loginpage
|
|
|
|
def apply(self, callback, route):
|
|
if self.keyword in Signature.from_callable(route.callback).parameters:
|
|
@wraps(callback)
|
|
def wrapper(*args, **kwargs):
|
|
uid = request.get_cookie('uid', secret=db.get_secret())
|
|
if uid is None:
|
|
return redirect(self.loginpage)
|
|
kwargs[self.keyword] = User(uid)
|
|
if request.method == 'POST':
|
|
if request.forms['csrf'] != request.get_cookie('csrf'):
|
|
abort(400)
|
|
return callback(*args, **kwargs)
|
|
|
|
return wrapper
|
|
else:
|
|
return callback
|