recaptcha for conventional registration\n\

simpler email subscription form at registration\n\
fixed urls in rss feed\n\
added experimental remote password login api (cleartext password for remote site entered locally)\n\
included example for Mediawiki Authentication plugin\n\
very simple message to everyone management command

1 files changed, 59 insertions, 0 deletions

diff --git a/mediawiki/auth.py b/mediawiki/auth.py
new file mode 100644
index 00000000..ee367dc1
--- /dev/null
+++ b/mediawiki/auth.py
@@ -0,0 +1,59 @@
+from mediawiki.models import User as MWUser
+from django.contrib.auth.models import User
+from django_authopenid.models import ExternalLoginData
+from django.conf import settings
+import logging
+from PHPUnserialize import PHPUnserialize
+import os
+
+class php(object):
+    @staticmethod
+    def get_session_data(session):
+        prefix = settings.MEDIAWIKI_PHP_SESSION_PREFIX
+        path = settings.MEDIAWIKI_PHP_SESSION_PATH
+        file = os.path.join(path,prefix + session)
+        #file may not exist
+        data = open(file).read() 
+        u = PHPUnserialize()
+        return u.session_decode(data)
+
+class IncludeVirtualAuthenticationBackend(object):
+    def authenticate(self,token=None):
+        logging.debug('authenticating session %s' % token)
+        try:
+            php_session = php.get_session_data(token)
+        #todo: report technical errors to root
+        except:
+            #Fail condition 1. Session data cannot be retrieved
+            logging.debug('session %s cannot be retrieved' % str(token))
+            return None
+        try:
+            name = php_session['wsUserName']
+            id = php_session['wsUserID']
+        except:
+            #Fail condition 2. Data misses keys
+            logging.debug('missing data in session table')
+            return None
+        try:
+            logging.debug('trying to find user %s id=%s in the MW database' % (name,id))
+            wu = MWUser.objects.get(user_name=name,user_id=id)
+        except MWUser.DoesNotExist:
+            #Fail condition 3. User does not match session data
+            logging.debug('could not find wiki user who owns session')
+            return None
+        try:
+            logging.debug('trying to get external login data for mw user %s' % name)
+            eld = ExternalLoginData.objects.get(external_username=name)
+            #update session data and save?
+            return eld.user #may be none!
+        except ExternalLoginData.DoesNotExist:
+            #Fail condition 4. no external login data - user never logged in through django
+            #using the wiki login and password
+            logging.debug('no association found for MW user %s with django user' % name)
+            return None
+                
+    def get_user(self, user_id):    
+        try:
+            return User.objects.get(pk=user_id)
+        except User.DoesNotExist:
+            return None