Source code for nkdsu.apps.vote.twitter_auth

import re
from typing import TypedDict

from django.conf import settings
from django.contrib import messages
from django.contrib.auth.models import User
from django.core.files.base import ContentFile
from django.http import HttpRequest
import requests
from social_core.backends.twitter import TwitterOAuth
from social_core.pipeline import DEFAULT_AUTH_PIPELINE
from social_django.strategy import DjangoStrategy

from .models import TwitterUser, avatar_upload_path


TWITTER_NOT_POSSIBLE: str = (
    'it is no longer possible to authenticate on nkd.su with twitter, sorry. please'
    ' send a twitter direct message to @NekoDesuRadio if you did not already set a'
    ' password'
)




class DoNotAuthThroughTwitterPlease(BaseException):
    msg: str

    def __init__(self, msg: str) -> None:
        self.msg = msg





class UserDetailsDict(TypedDict):
    username: str
    fullname: str
    default_profile_image: bool
    profile_image_url_https: str





class NkdsuTwitterAuth(TwitterOAuth):
    def __init__(self, *args, **kwargs):
        redir = kwargs.get('redirect_uri') or '/'
        kwargs['redirect_uri'] = settings.SITE_URL + redir
        super().__init__(*args, **kwargs)



    def auth_url(self) -> str:
        raise DoNotAuthThroughTwitterPlease(TWITTER_NOT_POSSIBLE)




    def auth_allowed(self, response: dict, details: UserDetailsDict) -> bool:
        raise DoNotAuthThroughTwitterPlease(TWITTER_NOT_POSSIBLE)




    def get_user_details(self, response: dict) -> UserDetailsDict:
        """
        Like super().get_user_details(), but doesn't try to split names into
        first and last parts.
        """

        return {
            'username': response['screen_name'],
            'fullname': response['name'],
            'default_profile_image': response['default_profile_image'],
            'profile_image_url_https': response['profile_image_url_https'],
        }






class NkdsuStrategy(DjangoStrategy):
    """
    Django social auth respects the "PIPELINE" Django setting, which we're
    already using for django-pipeline, so we need to override that behaviour to
    ignore it.
    """



    def get_pipeline(self, backend=None):
        return (
            DEFAULT_AUTH_PIPELINE
            + ('nkdsu.apps.vote.twitter_auth.link_twitteruser',)
            + ('nkdsu.apps.vote.twitter_auth.adopt_twitter_metadata',)
        )






def link_twitteruser(uid: int, user: User, is_new: bool, *args, **kwargs) -> None:
    # this has been previously guaranteed to exist in our auth_allowed implementation
    twitter_user = TwitterUser.objects.get(user_id=str(uid))
    profile = user.profile

    # and also, we should check this just to be sure:
    if hasattr(twitter_user, 'profile') and (twitter_user.profile.user != user):
        raise AssertionError(
            f'auth_allowed() messed up, because {user!r} should not have been able to'
            f' log in as {twitter_user!r}; that user was already adopted by'
            f' {twitter_user.profile.user!r}'
        )

    if is_new:
        profile.is_abuser = twitter_user.is_abuser
        profile.is_patron = twitter_user.is_patron

    if user.profile.twitter_user is None:
        profile.twitter_user = twitter_user
        profile.save()





def adopt_twitter_metadata(
    request: HttpRequest, user: User, details: UserDetailsDict, *args, **kwargs
) -> None:
    profile = user.profile

    if (not details['default_profile_image']) and (not profile.avatar):
        try:
            url = details['profile_image_url_https']
            avatar = ContentFile(
                requests.get(re.sub(r'_normal(?=\.[^.]+$)', '', url)).content
            )
            profile.avatar.save(name=avatar_upload_path(profile, ''), content=avatar)
        except requests.RequestException as e:
            messages.error(
                request, f'sorry, we were unable to retrieve your twitter avatar: {e!r}'
            )

    if not profile.display_name:
        profile.display_name = details['fullname']

    profile.save()