kpsul/kfet/auth/middleware.py

from django.contrib.auth import get_user_model

from .backends import AccountBackend

User = get_user_model()


class TemporaryAuthMiddleware:
    """Authenticate another user for this request if AccountBackend succeeds.

    By the way, if a user is authenticated, we refresh its from db to add
    values from CofProfile and Account of this user.

    """

    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        if request.user.is_authenticated:
            # avoid multiple db accesses in views and templates
            request.user = User.objects.select_related("profile__account_kfet").get(
                pk=request.user.pk
            )

        temp_request_user = AccountBackend().authenticate(
            request, kfet_password=self.get_kfet_password(request)
        )

        if temp_request_user:
            request.real_user = request.user
            request.user = temp_request_user

        return self.get_response(request)

    def get_kfet_password(self, request):
        return request.META.get("HTTP_KFETPASSWORD") or request.POST.get("KFETPASSWORD")