summaryrefslogtreecommitdiff
path: root/yaksh/middleware/one_session_per_user.py
blob: 92e888d3c3c8f1f007ff868683310bb274c8e912 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
from django.contrib.auth.models import User
from django.contrib.sessions.models import Session

from yaksh.models import ConcurrentUser


class OneSessionPerUserMiddleware(object):
    """
    Middleware to handle multiple logins with same credentials
        - Creates a Database entry to record the current user and active session key
        - Checks if the current user has already been logged in. If True, the new session
          key is stored with respect to the user and the old session key is deleted,
          effectively terminating the older session for the same user.
        - The concurrentuser attribute of the User model refers to the ConcurrentUser
          model object and not the concurrent_user field due to behaviour described 
          in the Documentation
          Link: https://docs.djangoproject.com/en/1.5/topics/auth/customizing/#extending-the-existing-user-model)
    """
    def process_request(self, request):
        if isinstance(request.user, User):
            current_key = request.session.session_key
            # 
            # Documentation: 
            # https://docs.djangoproject.com/en/1.5/topics/auth/customizing/#extending-the-existing-user-model
            if hasattr(request.user, 'concurrentuser'):
                active_key = request.user.concurrentuser.session_key
                if active_key != current_key:
                    Session.objects.filter(session_key=active_key).delete()
                    request.user.concurrentuser.session_key = current_key
                    request.user.concurrentuser.save()
            else:
                ConcurrentUser.objects.create(
                    concurrent_user=request.user,
                    session_key=current_key,
                )