"""Common serializer for application authorization""" from django.conf import settings from django.contrib.auth import authenticate from django.contrib.auth import password_validation as password_validators from django.db.models import Q from rest_framework import serializers from rest_framework import validators as rest_validators from account import models as account_models from authorization import tasks from authorization.models import Application from utils import exceptions as utils_exceptions from utils import methods as utils_methods from utils import tokens # Mixins class BaseAuthSerializerMixin(serializers.Serializer): """Base authorization serializer mixin""" source = serializers.ChoiceField(choices=Application.SOURCES) class JWTBaseSerializerMixin(serializers.Serializer): """ Mixin for JWT authentication. Uses in serializers when need give in response access and refresh token """ # RESPONSE refresh_token = serializers.CharField(read_only=True) access_token = serializers.CharField(read_only=True) def get_tokens(self): """Create JWT token""" user = self.instance token = tokens.GMRefreshToken.for_user(user) token['user'] = user.get_user_info() return { 'access_token': str(token.access_token), 'refresh_token': str(token), } def to_representation(self, instance): """Override to_representation method""" tokens = self.get_tokens() setattr(instance, 'access_token', tokens.get('access_token')) setattr(instance, 'refresh_token', tokens.get('refresh_token')) return super().to_representation(instance) # Serializers class SignupSerializer(serializers.ModelSerializer): """Signup serializer serializer mixin""" # REQUEST username = serializers.CharField( validators=(rest_validators.UniqueValidator(queryset=account_models.User.objects.all()),), write_only=True ) password = serializers.CharField(write_only=True) email = serializers.EmailField( validators=(rest_validators.UniqueValidator(queryset=account_models.User.objects.all()),), write_only=True) newsletter = serializers.BooleanField(write_only=True) class Meta: model = account_models.User fields = ( 'username', 'password', 'email', 'newsletter' ) def validate_username(self, data): """Custom username validation""" valid = utils_methods.username_validator(username=data) if not valid: raise utils_exceptions.NotValidUsernameError() return data def validate_password(self, data): """Custom password validation""" try: password_validators.validate_password(password=data) except serializers.ValidationError as e: raise serializers.ValidationError(str(e)) else: return data def create(self, validated_data): """Override create method""" obj = account_models.User.objects.make( username=validated_data.get('username'), password=validated_data.get('password'), email=validated_data.get('email'), newsletter=validated_data.get('newsletter')) # Send verification link on user email if settings.USE_CELERY: tasks.send_confirm_email.delay(obj.id) else: tasks.send_confirm_email(obj.id) return obj class LoginByUsernameOrEmailSerializer(JWTBaseSerializerMixin, serializers.ModelSerializer): """Serializer for login user""" username_or_email = serializers.CharField(write_only=True) password = serializers.CharField(write_only=True) # for cookie properties (Max-Age) remember = serializers.BooleanField(write_only=True) class Meta: """Meta-class""" model = account_models.User fields = ( 'username_or_email', 'password', 'remember', 'refresh_token', 'access_token' ) def validate(self, attrs): """Override validate method""" username_or_email = attrs.pop('username_or_email') password = attrs.pop('password') user_qs = account_models.User.objects.filter(Q(username=username_or_email) | (Q(email=username_or_email) & Q(email_confirmed=True))) if not user_qs.exists(): raise utils_exceptions.UserNotFoundError() else: user = user_qs.first() authentication = authenticate(username=user.get_username(), password=password) if not authentication: raise utils_exceptions.WrongAuthCredentials() self.instance = user return attrs # OAuth class OAuth2Serialzier(BaseAuthSerializerMixin): """Serializer OAuth2 authorization""" token = serializers.CharField(max_length=255) class OAuth2LogoutSerializer(BaseAuthSerializerMixin): """Serializer for logout"""