#!/usr/bin/env python
# -*- coding: utf-8 -*-
import re
from bottle import request, HTTPError, redirect
from webinterface import PYLOAD, SETUP
def set_session(request, user):
s = request.environ.get('beaker.session')
s["uid"] = user.uid
s.save()
return s
def get_user_api(s):
if s:
uid = s.get("uid", None)
if (uid is not None) and (PYLOAD is not None):
return PYLOAD.withUserContext(uid)
return None
def is_mobile():
if request.get_cookie("mobile"):
if request.get_cookie("mobile") == "True":
return True
else:
return False
mobile_ua = request.headers.get('User-Agent', '').lower()
if mobile_ua.find('opera mini') > 0:
return True
if mobile_ua.find('windows') > 0:
return False
if request.headers.get('Accept', '').lower().find('application/vnd.wap.xhtml+xml') > 0:
return True
if re.search('(up.browser|up.link|mmp|symbian|smartphone|midp|wap|phone|android)', mobile_ua) is not None:
return True
mobile_ua = mobile_ua[:4]
mobile_agents = ['w3c ', 'acs-', 'alav', 'alca', 'amoi', 'audi', 'avan', 'benq', 'bird', 'blac', 'blaz', 'brew',
'cell', 'cldc', 'cmd-',
'dang', 'doco', 'eric', 'hipt', 'inno', 'ipaq', 'java', 'jigs', 'kddi', 'keji', 'leno', 'lg-c',
'lg-d', 'lg-g', 'lge-',
'maui', 'maxo', 'midp', 'mits', 'mmef', 'mobi', 'mot-', 'moto', 'mwbp', 'nec-', 'newt', 'noki',
'palm', 'pana', 'pant',
'phil', 'play', 'port', 'prox', 'qwap', 'sage', 'sams', 'sany', 'sch-', 'sec-', 'send', 'seri',
'sgh-', 'shar', 'sie-',
'siem', 'smal', 'smar', 'sony', 'sph-', 'symb', 't-mo', 'teli', 'tim-', 'tosh', 'tsm-', 'upg1',
'upsi', 'vk-v', 'voda',
'wap-', 'wapa', 'wapi', 'wapp', 'wapr', 'webc', 'winw', 'winw', 'xda ', 'xda-']
if mobile_ua in mobile_agents:
return True
return False
def login_required(perm=None):
def _dec(func):
def _view(*args, **kwargs):
# In case of setup, no login methods can be accessed
if SETUP is not None:
redirect("/setup")
s = request.environ.get('beaker.session')
api = get_user_api(s)
if api is not None:
if perm:
if api.user.hasPermission(perm):
if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
return HTTPError(403, "Forbidden")
else:
return redirect("/nopermission")
kwargs["api"] = api
return func(*args, **kwargs)
else:
if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
return HTTPError(403, "Forbidden")
else:
return redirect("/login")
return _view
return _dec