Split the AUTHENTICATE_PAYLOAD function away

Author: lnagel

rest_framework_sso/authentication.py

@@ -2,7 +2,6 @@
 from __future__ import absolute_import, unicode_literals
 
 import jwt
-from django.contrib.auth import get_user_model
 from django.utils.encoding import smart_text
 from django.utils.translation import ugettext as _
 from rest_framework import exceptions
@@ -13,6 +12,7 @@
 from rest_framework_sso.settings import api_settings
 
 decode_jwt_token = api_settings.DECODE_JWT_TOKEN
+authenticate_payload = api_settings.AUTHENTICATE_PAYLOAD
 
 
 class JWTAuthentication(BaseAuthentication):
@@ -59,28 +59,7 @@ def authenticate(self, request):
         return self.authenticate_credentials(payload=payload)
 
     def authenticate_credentials(self, payload):
-        from rest_framework_sso.models import SessionToken
-
-        user_model = get_user_model()
-
-        if api_settings.VERIFY_SESSION_TOKEN:
-            try:
-                session_token = SessionToken.objects.\
-                    active().\
-                    select_related('user').\
-                    get(pk=payload.get('sid'), user_id=payload.get('uid'))
-                user = session_token.user
-            except SessionToken.DoesNotExist:
-                raise exceptions.AuthenticationFailed(_('Invalid token.'))
-        else:
-            try:
-                user = user_model.objects.get(pk=payload.get('uid'))
-            except user_model.DoesNotExist:
-                raise exceptions.AuthenticationFailed(_('Invalid token.'))
-
-        if not user.is_active:
-            raise exceptions.AuthenticationFailed(_('User inactive or deleted.'))
-
+        user = authenticate_payload(payload=payload)
         return user, payload
 
     def authenticate_header(self, request):

rest_framework_sso/settings.py

@@ -14,6 +14,7 @@
     'CREATE_AUTHORIZATION_PAYLOAD': 'rest_framework_sso.utils.create_authorization_payload',
     'ENCODE_JWT_TOKEN': 'rest_framework_sso.utils.encode_jwt_token',
     'DECODE_JWT_TOKEN': 'rest_framework_sso.utils.decode_jwt_token',
+    'AUTHENTICATE_PAYLOAD': 'rest_framework_sso.utils.authenticate_payload',
 
     'ENCODE_ALGORITHM': 'RS256',
     'DECODE_ALGORITHMS': None,
@@ -40,6 +41,7 @@
     'CREATE_AUTHORIZATION_PAYLOAD',
     'ENCODE_JWT_TOKEN',
     'DECODE_JWT_TOKEN',
+    'AUTHENTICATE_PAYLOAD',
 )
 
 api_settings = APISettings(USER_SETTINGS, DEFAULTS, IMPORT_STRINGS)

rest_framework_sso/utils.py

@@ -4,9 +4,12 @@
 from datetime import datetime
 
 import jwt
+from django.contrib.auth import get_user_model
 from django.core.serializers.json import DjangoJSONEncoder
 from django.utils import six
+from django.utils.translation import gettext_lazy as _
 from jwt.exceptions import MissingRequiredClaimError, InvalidIssuerError
+from rest_framework import exceptions
 
 from rest_framework_sso.settings import api_settings
 
@@ -100,3 +103,29 @@ def decode_jwt_token(token):
         audience=api_settings.IDENTITY,
         issuer=unverified_issuer,
     )
+
+
+def authenticate_payload(payload):
+    from rest_framework_sso.models import SessionToken
+
+    user_model = get_user_model()
+
+    if api_settings.VERIFY_SESSION_TOKEN:
+        try:
+            session_token = SessionToken.objects.\
+                active().\
+                select_related('user').\
+                get(pk=payload.get('sid'), user_id=payload.get('uid'))
+            user = session_token.user
+        except SessionToken.DoesNotExist:
+            raise exceptions.AuthenticationFailed(_('Invalid token.'))
+    else:
+        try:
+            user = user_model.objects.get(pk=payload.get('uid'))
+        except user_model.DoesNotExist:
+            raise exceptions.AuthenticationFailed(_('Invalid token.'))
+
+    if not user.is_active:
+        raise exceptions.AuthenticationFailed(_('User inactive or deleted.'))
+
+    return user