blob: 114c92b599814198dab8744ff0cd79a0d9cc9e6f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
from django.contrib.auth.models import User
from django.contrib.sessions.models import Session
from yaksh.models import ConcurrentUser
class OneSessionPerUserMiddleware(object):
"""
Middleware to handle multiple logins with same credentials
- Creates a Database entry to record the current user and active
session key
- Checks if the current user has already been logged in. If True, the
new session key is stored with respect to the user and the old
session key is deleted,
effectively terminating the older session for the same user.
- The concurrentuser attribute of the User model refers to the
ConcurrentUser
model object and not the concurrent_user field due to behaviour
described in the Documentation
Link: https://docs.djangoproject.com/en/1.5/topics/auth/customizing/
#extending-the-existing-user-model
"""
def __init__(self, get_response):
self.get_response = get_response
def __call__(self, request):
# Code to be executed for each request before
# the view (and later middleware) are called.
if isinstance(request.user, User):
current_key = request.session.session_key
if hasattr(request.user, 'concurrentuser'):
active_key = request.user.concurrentuser.session_key
if active_key != current_key:
Session.objects.filter(session_key=active_key).delete()
request.user.concurrentuser.session_key = current_key
request.user.concurrentuser.save()
else:
ConcurrentUser.objects.create(
concurrent_user=request.user,
session_key=current_key,
)
response = self.get_response(request)
# Code to be executed for each request/response after
# the view is called.
return response
|
