Misago/misago/users/middleware.py

from django.conf import settings
from django.contrib.auth import logout
from django.core.urlresolvers import resolve
from django.utils import timezone

from misago.users.bans import get_request_ip_ban, get_user_ban
from misago.users.models import AnonymousUser, Online
from misago.users.views import avatarserver


class RealIPMiddleware(object):
    def process_request(self, request):
        x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
        if x_forwarded_for:
            request._misago_real_ip = x_forwarded_for.split(',')[0]
        else:
            request._misago_real_ip = request.META.get('REMOTE_ADDR')


class AvatarServerMiddleware(object):
    def process_request(self, request):
        if request.path.startswith(settings.MISAGO_AVATAR_SERVER_PATH):
            resolved_path = resolve(request.path)
            return resolved_path.func(request, **resolved_path.kwargs)


class UserMiddleware(object):
    def process_request(self, request):
        if request.user.is_anonymous():
            request.user = AnonymousUser()
        elif not request.user.is_superuser:
            if get_request_ip_ban(request) or get_user_ban(request.user):
                logout(request)


class OnlineTrackerMiddleware(object):
    def process_request(self, request):
        if request.user.is_authenticated():
            try:
                request._misago_online_tracker = request.user.online_tracker
            except Online.DoesNotExist:
                online_tracker = Online.objects.create(
                    user=request.user, current_ip=request._misago_real_ip)
                request.user.online_tracker = online_tracker
                request._misago_online_tracker = online_tracker
        else:
            request._misago_online_tracker = None

    def process_response(self, request, response):
        if hasattr(request, '_misago_online_tracker'):
            tracker = request._misago_online_tracker

            if tracker:
                if request.user.is_anonymous():
                    # User logged off, update his last visit and blam tracker
                    user = tracker.user
                    user.last_login = tracker.last_click
                    user.last_ip = tracker.current_ip
                    user.save(update_fields=['last_login', 'last_ip'])
                    tracker.delete()
                else:
                    # Bump user's tracker time
                    tracker.current_ip = request._misago_real_ip
                    tracker.last_click = timezone.now()
                    tracker.save(update_fields=['last_click', 'current_ip'])

        return response