AccountChange_views.py

from django.conf import settings
from django.contrib import messages
from django.contrib.auth import get_user_model, logout, signals
from django.contrib.auth.views import (
    PasswordChangeView, PasswordChangeDoneView,
    PasswordResetView, PasswordResetDoneView, PasswordResetConfirmView,
)
from django.contrib.auth.mixins import LoginRequiredMixin
from django.http import Http404
from django.http.response import HttpResponseRedirect
from django.shortcuts import redirect
from django.urls import reverse, reverse_lazy
from django.utils.decorators import method_decorator
from django.views.decorators.csrf import csrf_protect
from django.views.generic import TemplateView, FormView
from common.lib.axes.utils import reset
from common.lib.axes.handlers.database import AxesDatabaseHandler
from common.scripts.DjangoUtils import (
    generate_uuid_hex, grecaptcha_request, RequestUtil,
)
from ..forms import (
    OverlapPasswordChangeForm, OverlapSocialloginUserPasswordChangeForm, OverlapSetPasswordForm,
    OverlapPasswordResetForm, EmailChangeForm, UserDeleteForm,
)
from ..models import ActivateToken
from ..views.send_mail.send_mail import send_token_for_change_email


User = get_user_model()


# パスワードの変更
class OverlapPasswordChangeView(LoginRequiredMixin, PasswordChangeView):
    
    template_name = 'accounts/PasswordChange/password_change.html'
    form_class    = OverlapPasswordChangeForm
    success_url   = reverse_lazy("accounts:password_change_done")

    # ソーシャルログインユーザかつパスワード未設定のユーザには表示しない
    def get(self, request, *args, **kwargs):
        if not (request.user.is_social_login and request.user.date_password_change is None):
            return super().get(request, *args, **kwargs)
        else:
            raise Http404('Page not found')

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'IS_USE_SIDENAV': True,
        })
        return context

    @method_decorator(csrf_protect)
    def post(self, request, *args, **kwargs):
        
        user         = self.request.user
        old_password = self.request.POST['old_password']

        # Axes
        # 元のパスワードを規定回数間違えたらアカウントロックする
        if user:
            if not user.check_password(old_password):
                signals.user_login_failed.send(
                    sender      = User,
                    request     = request,
                    credentials = {
                        'username': user.email,
                    },
                )
                if AxesDatabaseHandler.get_failures(
                                            self,
                                            request     = request,
                                            credentials = {
                                                'username': user.email,
                                            },
                                       ) >= settings.AXES_FAILURE_LIMIT:
                    logout(request)
            else:
                reset(username=user.email) # django-axes リセット

        return super().post(request, *args, **kwargs)

# パスワード未設定の場合には、元のパスワードの入力を求めない
class OverlapPasswordChangeOneStepView(LoginRequiredMixin, PasswordChangeView):
    
    template_name = 'accounts/PasswordChange/password_change.html'
    form_class    = OverlapSocialloginUserPasswordChangeForm
    success_url   = reverse_lazy("accounts:password_change_done")

    # パスワード未設定のユーザのみに表示
    def get(self, request, *args, **kwargs):
        if request.user.date_password_change is None:
            return super().get(request, *args, **kwargs)
        else:
            raise Http404('Page not found')

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'IS_USE_SIDENAV': True,
        })
        return context

class OverlapPasswordChangeDoneView(LoginRequiredMixin, PasswordChangeDoneView):
    
    template_name = 'accounts/PasswordChange/password_change_done.html'
    success_url   = reverse_lazy('accounts:password_reset_done')

    # 想定ルート(crrect_ref)から以外のアクセスを遮断
    def get(self, request, *args, **kwargs):
        siteurl    = request._current_scheme_host
        crrect_ref_01 = reverse('accounts:password_change')
        crrect_ref_02 = reverse('accounts:password_change_one_step')
        referer    = RequestUtil.get_request_host_url(self)
        if not (siteurl+crrect_ref_01 == referer or siteurl+crrect_ref_02 == referer):
            reverse_url = reverse_lazy('home')
            return HttpResponseRedirect(reverse_url)
        return super().get(request, *args, **kwargs)

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'IS_USE_SIDENAV': True,
        })
        return context

# パスワードの再設定
# Referrer
# https://stackoverflow.com/questions/56015855/how-to-perform-additional-actions-on-passwordreset-in-django
# https://www.reddit.com/r/django/comments/q1ao3l/here_is_how_you_add_google_recaptcha_to_password/
class OverlapPasswordResetView(PasswordResetView):
    
    form_class               = OverlapPasswordResetForm
    from_email               = settings.DEFAULT_REPLY_EMAIL
    subject_template_name    = 'accounts/PasswordReset/mail_template/subject.html'
    email_template_name      = 'accounts/PasswordReset/mail_template/text_message.html'
    html_email_template_name = 'accounts/PasswordReset/mail_template/html_message.html'
    extra_email_context      = {'TOKEN_EXPIRED' : int(settings.PASSWORD_RESET_TIMEOUT / 60)}
    success_url              = reverse_lazy("accounts:password_reset_done")
    
    # メール認証を使用しない場合にはパスワードリセットは管理者にて行う
    if settings.IS_USE_EMAIL_CERTIFICATION:
        template_name = 'accounts/PasswordReset/password_reset.html'
    else:
        template_name = 'accounts/PasswordReset/password_reset_.html'

    def get(self, request, *args, **kwargs):
        logout(request)
        return super().get(request, *args, **kwargs)

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'RECAPTCHA_PUBLIC_KEY': settings.RECAPTCHA_PUBLIC_KEY if settings.IS_USE_RECAPTCHA else None,
            'IS_USE_RECAPTCHA':     settings.IS_USE_RECAPTCHA,
        })
        return context

    @method_decorator(csrf_protect)
    def post(self, request, *args, **kwargs):
        form         = self.get_form()
        email        = form['email'].value()
        user_or_none = User.objects.filter(email=email).first()

        # reCaptcha_token の検証▽
        if settings.IS_USE_RECAPTCHA:
            recaptcha_token = self.request.POST.get('g-recaptcha-response')
            if recaptcha_token is None or recaptcha_token == '':
                messages.add_message(self.request, messages.WARNING,
                                     f'不正なPOSTです - reCaptcha ERROR',)
                reverse_url = reverse_lazy('accounts:password_reset')
                return HttpResponseRedirect(reverse_url)
            else:
                res = grecaptcha_request(recaptcha_token)
                if res:  # reCaptcha SUCCESS
                    pass
                else:    # reCaptcha FALSE
                    messages.add_message(self.request, messages.WARNING,
                                         f'不正なPOSTです - reCaptcha ERROR',)
                    reverse_url = reverse_lazy('accounts:password_reset')
                    return HttpResponseRedirect(reverse_url)
        # reCaptcha_token の検証△

        # ソーシャルログイン の検証▽
        try:
            is_social_login = user_or_none.is_social_login
        except:
            # user が null の場合には入力されたメールアドレスのユーザがいないことを
            # 他者に伝えないために判定をスルーする(見かけ上は通常処理されたように見えるが、メールは送信されない)
            is_social_login = False
        if is_social_login and user_or_none.date_password_change is None:
            # ソーシャルログインユーザかつパスワード未設定の場合には、ソーシャル側の認証に遷移させる
            reverse_url = reverse_lazy('social:begin', kwargs={'backend': 'google-oauth2'})
            return HttpResponseRedirect(reverse_url)
        # ソーシャルログイン の検証△
        
        return super().post(request, *args, **kwargs)

    def get_success_url(self):
        return self.success_url

class OverlapPasswordResetDoneView(PasswordResetDoneView):
    
    template_name = 'accounts/PasswordReset/password_reset_done.html'

    # 想定ルート(crrect_ref)から以外のアクセスを遮断
    def get(self, request, *args, **kwargs):
        siteurl    = request._current_scheme_host
        crrect_ref = reverse('accounts:password_reset')
        referer    = RequestUtil.get_request_host_url(self)
        if not siteurl+crrect_ref == referer:
            reverse_url = reverse_lazy('home')
            return HttpResponseRedirect(reverse_url)
        return super().get(request, *args, **kwargs)

class OverlapPasswordResetConfirmView(PasswordResetConfirmView):
    
    template_name = 'accounts/PasswordReset/password_reset_confilm.html'
    form_class    = OverlapSetPasswordForm
    success_url   = reverse_lazy('accounts:login')

    def form_valid(self, form):
        user = form.save()
        reset(username=user.email) # パスワードリセットで django-axes もリセット
        messages.add_message(self.request, messages.INFO,
                                f'パスワードを変更しました。\n\
                                  新しいパスワードで再度ログインしてください。')
        return super().form_valid(form)

# メールアドレスの変更
class EmailChangeView(LoginRequiredMixin, FormView):

    model         = User
    template_name = 'accounts/EmailChange/email_change.html'
    form_class    = EmailChangeForm

    def get_object(self):
        return self.request.user

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'RECAPTCHA_PUBLIC_KEY': settings.RECAPTCHA_PUBLIC_KEY if settings.IS_USE_RECAPTCHA else None,
            'IS_USE_RECAPTCHA':     settings.IS_USE_RECAPTCHA,
            'IS_USE_SIDENAV':       True,
        })
        return context

    @method_decorator(csrf_protect)
    def post(self, request, *args, **kwargs):
        
        # reCaptcha_token の検証▽
        if settings.IS_USE_RECAPTCHA:
            recaptcha_token = self.request.POST.get('g-recaptcha-response')
            if recaptcha_token is None or recaptcha_token == '':
                messages.add_message(self.request, messages.WARNING,
                                     f'不正なPOSTです - reCaptcha ERROR',)
                reverse_url = reverse_lazy('accounts:email_change')
                return HttpResponseRedirect(reverse_url)
            else:
                res = grecaptcha_request(recaptcha_token)
                if res:  # reCaptcha SUCCESS
                    pass
                else:    # reCaptcha FALSE
                    messages.add_message(self.request, messages.WARNING,
                                         f'不正なPOSTです - reCaptcha ERROR',)
                    reverse_url = reverse_lazy('accounts:email_change')
                    return HttpResponseRedirect(reverse_url)
        # reCaptcha_token の検証△
        
        # ソーシャルログイン の検証▽
        user         = self.request.user
        change_email = self.request.POST['change_email']
        if user.is_social_login and user.date_password_change is None:
            messages.add_message(self.request, messages.WARNING,
                                 f'ソーシャルIDで作成されたユーザーのメールアドレスをするには、先にパスワードを設定してください。',)
            reverse_url = reverse_lazy('accounts:password_change_OneStep')
            return HttpResponseRedirect(reverse_url)
        # ソーシャルログイン の検証△

        if User.objects.filter(email=change_email).exists():
            # 既に登録済みのアドレスのため、処理を行わずに完了画面へ遷移(登録されているメールアドレスを隠す)
            reverse_url = reverse_lazy('accounts:email_change_tmp_recept')
            return HttpResponseRedirect(reverse_url)
        else: # SUCCESS
            return super().post(request, *args, **kwargs)

    def form_valid(self, form):
        user         = self.request.user
        change_email = self.request.POST['change_email']
        # メール認証を行う場合と行わない場合
        if settings.IS_USE_EMAIL_CERTIFICATION:
            user.is_change_email_request = True
            user.change_email            = change_email
            user.save()
            send_token_for_change_email(user) # 変更要求されたメールアドレスにメールを送信して認証
        else:
            user.is_change_email_request = False
            user.email                   = change_email     # emailを変更
            user.change_email            = 'dummy@mail.com' # ダミーデータの設定
            user.save()
        return super().form_valid(form)
    
    def get_success_url(self):
        # メール認証する場合としない場合のサインアップ後のページ遷移の分岐
        if settings.IS_USE_EMAIL_CERTIFICATION:
            success_url = reverse_lazy('accounts:email_change_tmp_recept')
        else:
            messages.add_message(self.request, messages.INFO,
                                 f'メールアドレスの変更が完了しました',)
            success_url = reverse_lazy('accounts:email_change')
        return success_url

class EmailChangeTmpReceptView(LoginRequiredMixin, TemplateView):
    
    template_name='accounts/EmailChange/email_change_tmp_recept.html'

    # メールアドレスの変更をしていないユーザからのアクセスを遮断
    def get(self, request, *args, **kwargs):
        user = self.request.user
        if not user.is_change_email_request:
            reverse_url = reverse_lazy('accounts:email_change')
            return HttpResponseRedirect(reverse_url)
        return super().get(request, *args, **kwargs)

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'IS_USE_SIDENAV': True,
        })
        return context

def ActivateEmailView(request, token):
    res, msg = ActivateToken.objects.activate_change_email_by_token(token)
    if res:
        logout(request)
        messages.add_message(request, messages.INFO, msg)
        reverse_url = reverse_lazy('accounts:login')
    else:
        messages.add_message(request, messages.WARNING, msg)
        reverse_url = reverse_lazy('home')
    return HttpResponseRedirect(reverse_url)

# アカウント削除
class UserDeleteView(LoginRequiredMixin, FormView):
    
    model         = User
    template_name = 'accounts/AccountDelete/delete.html'
    form_class    = UserDeleteForm
    success_url   = reverse_lazy('accounts:login')

    def get_object(self):
        return self.request.user

    def get_context_data(self, **kwargs):
        context = super().get_context_data()
        context.update({
            'IS_USE_SIDENAV': True,
        })
        return context
    
    @method_decorator(csrf_protect)
    def post(self, request, *args, **kwargs):

        check_text = self.request.POST['check_text']

        if check_text != 'delete':
            messages.add_message(self.request, messages.WARNING,
                                 f'チェックテキストエラー',)
            reverse_url = reverse_lazy('accounts:delete')
            return HttpResponseRedirect(reverse_url)

        return super().post(request, *args, **kwargs)

    def form_valid(self, form):
        # データは残してログイン不可とする
        # 削除後に再度その人が登録する場合に備えてメールをダミーに変更
        user           = self.request.user
        user.is_active = False
        user.email     = generate_uuid_hex()+'@'+generate_uuid_hex()+'.com'
        user.save()
        
        messages.add_message(self.request, messages.INFO,
                             f'アカウントを削除しました。\n\
                               ご利用いただきましてありがとうございました。',)
        return redirect(self.get_success_url())
    
    def get_success_url(self):
        return self.success_url