uktrade/directory-sso

import urllib

from allauth.account import views as allauth_views
from allauth.account.views import INTERNAL_RESET_SESSION_KEY
from directory_constants import urls
from django.conf import settings
from django.contrib.sessions.backends.db import SessionStore
from django.shortcuts import redirect
from django.urls import reverse, reverse_lazy
from django.views.generic import RedirectView

import core.mixins
from sso.constants import RESEND_VERIFICATION_URL
from sso.user import utils


class RedirectToNextMixin:

    redirect_field_name = settings.REDIRECT_FIELD_NAME

    def get_redirect_url(self):
        return utils.get_redirect_url(request=self.request, redirect_field_name=self.redirect_field_name)

    get_success_url = get_redirect_url


class DisableRegistrationMixin:
    def dispatch(self, request, *args, **kwargs):
        if settings.FEATURE_FLAGS['DISABLE_REGISTRATION_ON']:
            return redirect('https://sorry.great.gov.uk/')
        return super().dispatch(request, *args, **kwargs)


class RedirectToProfileSignUp(RedirectView):
    def get_redirect_url(self):
        return urls.domestic.SINGLE_SIGN_ON_PROFILE / 'enrol/'


class LoginView(RedirectToNextMixin, allauth_views.LoginView):
    def form_valid(self, form):
        response = super().form_valid(form)
        if response.status_code == 302 and response.url == reverse("account_email_verification_sent"):
            return response
        elif response.url == RESEND_VERIFICATION_URL:
            response.status_code = 401
            return response
        else:
            self.request.session.save()
            has_profile = utils.user_has_profile(form.user)
            if not has_profile:
                url = urls.domestic.SINGLE_SIGN_ON_PROFILE / 'enrol/'
                response = redirect(f'{url}?backfill-details-intent=true')
        return response


class LogoutView(RedirectToNextMixin, allauth_views.LogoutView):
    def post(self, request, *args, **kwargs):
        # Flushing the session if the POST request comes from outside the service
        session_key = request.COOKIES.get('session_key')
        if session_key:
            session_store = SessionStore(session_key=session_key)
            session_store.flush()

        return super().post(request, *args, **kwargs)


class ConfirmEmailView(
    DisableRegistrationMixin, RedirectToNextMixin, core.mixins.NoIndexMixin, allauth_views.ConfirmEmailView
):
    def get_context_data(self, **kwargs):
        if self.object:
            kwargs['form_url'] = utils.get_url_with_redirect(
                url=reverse('account_confirm_email', args=(self.object.key,)),
                redirect_url=self.get_redirect_url(),
            )

        return super().get_context_data(**kwargs)


class PasswordResetFromKeyView(RedirectToNextMixin, core.mixins.NoIndexMixin, allauth_views.PasswordResetFromKeyView):
    def dispatch(self, request, uidb36, key, **kwargs):
        if settings.FEATURE_FLAGS['DISABLE_REGISTRATION_ON']:
            return redirect('https://sorry.great.gov.uk/')

        internal_session = self.request.session.get(INTERNAL_RESET_SESSION_KEY)
        # This prevents a 500 in a situation when user opened a valid internal
        # session key link without the cookie set (e.g. incognito - edge case)
        if key == self.reset_url_key and not internal_session:
            return self.render_to_response({'token_fail': True})

        response = super().dispatch(request, uidb36, key, **kwargs)

        if key != self.reset_url_key and response.status_code == 302:
            return redirect(
                urllib.parse.unquote(
                    utils.get_url_with_redirect(url=response.url, redirect_url=self.get_redirect_url())
                )
            )
        return response


class PasswordResetView(DisableRegistrationMixin, allauth_views.PasswordResetView):
    pass


class PasswordChangeView(DisableRegistrationMixin, allauth_views.PasswordChangeView):
    pass


class SSOLandingPage(RedirectView):
    url = reverse_lazy('account_login')


class LoginViaLinkedinView(RedirectView):
    def get_redirect_url(self):
        return utils.get_login_provider_url(request=self.request, provider_id='linkedin_oauth2')


class LoginViaGoogleView(RedirectView):
    def get_redirect_url(self):
        return utils.get_login_provider_url(request=self.request, provider_id='google')