Merge branch 'passwordless-spike'

.gitignore

@@ -5,4 +5,5 @@ __pycache__
 env/
 
 .env
-.vscode/
\ No newline at end of file
+.vscode
+chromedriver

.gitlab-ci.yml

@@ -15,6 +15,7 @@ FunctionalTest:
     - apt-get install -y xvfb
     - wget https://chromedriver.storage.googleapis.com/2.41/chromedriver_linux64.zip
     - unzip chromedriver_linux64.zip
+    - mv chromedriver /usr/local/bin
 
   when: on_success
   script:

accounts/authentication.py

+import sys
+from accounts.models import ListUser, Token
+
+
+class PasswordlessAuthenticationBackend(object):
+
+    def authenticate(self, uid):
+        print('uid', uid, file=sys.stderr)
+        if not Token.objects.filter(uid=uid).exists():
+            print('no token found', file=sys.stderr)
+            return None
+        token = Token.objects.get(uid=uid)
+        print('got token', file=sys.stderr)
+        try:
+            user = ListUser.objects.get(email=token.email)
+            print('got user', file=sys.stderr)
+            return user
+        except ListUser.DoesNotExist:
+            print('new user', file=sys.stderr)
+            return ListUser.objects.create(email=token.email)
+
+    def get_user(self, email):
+        return ListUser.objects.get(email=email)

accounts/migrations/0001_initial.py

-# Generated by Django 2.1.7 on 2019-11-12 13:47
+# Generated by Django 2.1.7 on 2019-11-11 10:15
 
 from django.db import migrations, models
 
@@ -8,13 +8,30 @@ class Migration(migrations.Migration):
     initial = True
 
     dependencies = [
+        ('auth', '0009_alter_user_last_name_max_length'),
     ]
 
     operations = [
         migrations.CreateModel(
-            name='User',
+            name='ListUser',
             fields=[
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
                 ('email', models.EmailField(max_length=254, primary_key=True, serialize=False)),
+                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.Group', verbose_name='groups')),
+                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.Permission', verbose_name='user permissions')),
+            ],
+            options={
+                'abstract': False,
+            },
+        ),
+        migrations.CreateModel(
+            name='Token',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('email', models.EmailField(max_length=254)),
+                ('uid', models.CharField(max_length=255)),
             ],
         ),
     ]

accounts/models.py

 from django.db import models
+from django.contrib.auth.models import (
+    AbstractBaseUser, BaseUserManager, PermissionsMixin
+)
 
-import uuid
 
+class Token(models.Model):
+    email = models.EmailField()
+    uid = models.CharField(max_length=255)
+
+
+class ListUserManager(BaseUserManager):
+
+    def create_user(self, email):
+        ListUser.objects.create(email=email)
 
-class User(models.Model):
+    def create_superuser(self, email, password):
+        self.create_user(email)
+
+
+class ListUser(AbstractBaseUser, PermissionsMixin):
     email = models.EmailField(primary_key=True)
-    REQUIRED_FIELDS = []
     USERNAME_FIELD = 'email'
-    is_anonymous = False
-    is_authenticated = True
+    #REQUIRED_FIELDS = ['email', 'height']
 
+    objects = ListUserManager()
 
-class Token(models.Model):
-    email = models.EmailField()
-    uid = models.CharField(default=uuid.uuid4, max_length=40)
+    @property
+    def is_staff(self):
+        return self.email == 'harry.percival@example.com'
+
+    @property
+    def is_active(self):
+        return True

accounts/templates/login_email_sent.html

+<html>
+  <h1>Email sent</h1>
+
+  <p>Check your email, you'll find a message with a link that will log you into
+  the site.</p>
+
+</html>
\ No newline at end of file

accounts/tests.py

+from django.test import TestCase
+
+# Create your tests here.

accounts/urls.py

+from django.conf.urls import url
+from accounts import views
+
+urlpatterns = [
+    url(r'^send_email$', views.send_login_email, name='send_login_email'),
+    url(r'^login$', views.login, name='login'),
+    url(r'^logout$', views.logout, name='logout'),
+]

accounts/views.py

-from django.shortcuts import render
+import uuid
+import sys
+from django.shortcuts import redirect, render
+from django.core.mail import send_mail
+from django.contrib.auth import authenticate
+from django.contrib.auth import login as auth_login, logout as auth_logout
 
-# Create your views here.
+
+from accounts.models import Token
+
+
+def send_login_email(request):
+    email = request.POST['email']
+    uid = str(uuid.uuid4())
+    Token.objects.create(email=email, uid=uid)
+    print('saving uid', uid, 'for email', email, file=sys.stderr)
+    url = request.build_absolute_uri(f'/accounts/login?uid={uid}')
+    send_mail(
+        'Your login link for Superlists',
+        f'Use this link to log in:\n\n{url}',
+        'noreply@superlists',
+        [email],
+    )
+    return render(request, 'login_email_sent.html')
+
+
+def login(request):
+    print('login view', file=sys.stderr)
+    uid = request.GET.get('uid')
+    user = authenticate(uid=uid)
+    if user is not None:
+        auth_login(request, user)
+    return redirect('/')
+
+
+def logout(request):
+    auth_logout(request)
+    return redirect('/')

functional_tests/base.py

@@ -3,6 +3,8 @@ from django.contrib.staticfiles.testing import StaticLiveServerTestCase
 from selenium import webdriver
 from selenium.webdriver.support.ui import WebDriverWait
 from selenium.common.exceptions import WebDriverException
+from selenium.webdriver.chrome.options import Options
+
 
 import time
 
@@ -11,7 +13,13 @@ MAX_WAIT = 10
 
 class FunctionalTest(StaticLiveServerTestCase):
     def setUp(self):
-        self.browser = webdriver.Firefox()
+        chrome_options = Options()
+        chrome_options.add_argument('--dns-prefetch-disable')
+        chrome_options.add_argument('--no-sandbox')
+        chrome_options.add_argument('--headless')
+        chrome_options.add_argument('disable-gpu')
+
+        self.browser = webdriver.Chrome(chrome_options=chrome_options)
         self.browser.implicitly_wait(3)
 
     def tearDown(self):

functional_tests/test_simple_list_creation.py

 from selenium import webdriver
 from selenium.webdriver.common.keys import Keys
+from selenium.webdriver.chrome.options import Options
 
 from contextlib import contextmanager
 
@@ -70,7 +71,13 @@ class NewVisitorTest(FunctionalTest):
         # We use a new browser session to make sure that no information
         # of Edith's is coming through from cookies etc
         self.browser.quit()
-        self.browser = webdriver.Firefox()
+        chrome_options = Options()
+        chrome_options.add_argument('--dns-prefetch-disable')
+        chrome_options.add_argument('--no-sandbox')
+        chrome_options.add_argument('--headless')
+        chrome_options.add_argument('disable-gpu')
+
+        self.browser = webdriver.Chrome(chrome_options=chrome_options)
 
         # Francis visits the home page.  There is no sign of Edith's
         # list

lists/templates/base.html

@@ -16,17 +16,18 @@
 
     <div class="container">
 
-      <nav class="navbar navbar-default" role="navigation">
-        <div class="container-fluid">
-          <a class="navbar-brand" href="/">Superlists</a>
-          <form class="navbar-form navbar-right" method="POST" action="#">
-            <span>Enter email to log in:</span>
-            <input class="form-control" name="email" type="text" />
+      <div class="navbar">
+        {% if user.is_authenticated %}
+          <p>Logged in as {{ user.email }}</p>
+          <p><a id="id_logout" href="{% url 'logout' %}">Log out</a></p>
+        {% else %}
+          <form method="POST" action ="{% url 'send_login_email' %}">
+            Enter email to log in: <input name="email" type="text" />
             {% csrf_token %}
           </form>
-        </div>
-      </nav>
-
+        {% endif %}
+      </div>
+      
       ​<div class="row">
         ​<div class="col-md-6 col-md-offset-3 jumbotron">
           ​<div class="text-center">

requirements.txt

@@ -3,4 +3,5 @@ Django==2.1.7
 selenium==3.141.0
 gunicorn==19.9.0
 psycopg2
-dj_database_url
\ No newline at end of file
+dj_database_url
+django_mutpy
\ No newline at end of file

superlists/settings.py

@@ -42,10 +42,15 @@ INSTALLED_APPS = [
     'django.contrib.messages',
     'django.contrib.staticfiles',
     'django_mutpy',
-    'lists'
+    'lists',
+    'accounts'
+]
+
+AUTH_USER_MODEL = "accounts.ListUser"
+AUTHENTICATION_BACKENDS = [
+    'accounts.authentication.PasswordlessAuthenticationBackend',
 ]
 
-# AUTH_USER_MODEL = 'accounts.User'
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
@@ -140,3 +145,26 @@ STATIC_URL = '/static/'
 # STATICFILES_DIRS = (
 #     os.path.join(BASE_DIR, 'static'),
 # )
+
+EMAIL_HOST = 'smtp.gmail.com'
+EMAIL_HOST_USER = 'empecempc@gmail.com'
+EMAIL_HOST_PASSWORD = os.environ.get('EMAIL_PASSWORD')
+EMAIL_PORT = 587
+EMAIL_USE_TLS = True
+
+LOGGING = {
+    'version': 1,
+    'disable_existing_loggers': False,
+    'handlers': {
+        'console': {
+            'level': 'DEBUG',
+            'class': 'logging.StreamHandler',
+        },
+    },
+    'loggers': {
+        'django': {
+            'handlers': ['console'],
+        },
+    },
+    'root': {'level': 'INFO'},
+}

superlists/urls.py

@@ -15,9 +15,12 @@ Including another URLconf
 """
 from django.conf.urls import url, include
 from lists import views, urls as list_urls
+from accounts import urls as accounts_urls
+
 
 urlpatterns = [
     # url(r'^admin/', admin.site.urls),
     url(r'^$', views.home_page, name='home'),
     url(r'^lists/', include(list_urls)),
+    url(r'^accounts/', include(accounts_urls)),
 ]