tipfy.ext.auth.openid ¶

from tipfy import RequestHandler, Response, abort
from tipfy.ext.auth.openid import OpenIdMixin

class AuthenticationHandler(RequestHandler, OpenIdMixin):
    """This handler is executed to authenticate a user using OpenId."""
    def get(self, **kwargs):
        # The OpenId provider endpoint. We use Google's here.
        endpoint = 'https://www.google.com/accounts/o8/ud'

        if self.request.args.get('openid.mode', None):
            # If 'openid.mode' is in the URL, this may be a user redirected
            # after an authentication attempt. Try to get the user info and
            # set self._on_auth() as a callback. It will be called passing
            # a dictionary of user info or None if the auntentication is not
            # valid.
            return self.get_authenticated_user(self._on_auth,
                openid_endpoint=endpoint)

        # Redirect to the OpenId provider to authenticate the user.
        return self.authenticate_redirect(openid_endpoint=endpoint)

    def _on_auth(self, user):
        """This function was set as callback in get() to be executed after an
        authentication attempt. If the authentication is valid, user will be
        dictionary with user attributes, if the authentication is not valid
        it will be None.

        :param user:
            A dictionary with user attributes if the authentication is valid,
            or None.
        :return:
            A response object.
        """
        if not user:
            # Authentication failed.
            abort(403)

        # For this example, we just display the user atttributes. You should
        # use this information to set a user session to keep the user logged
        # in, then redirect to original page where the user was before
        # requesting authentication.
        return Response(str(user))