Brunobrno
2213e115c6
Added Deutsche Post as a shipping carrier, including new models, admin, serializers, and API client integration. Updated Carrier and SiteConfiguration models to support Deutsche Post, including shipping price and API credentials. Added requirements for the Deutsche Post API client and dependencies.
46 lines
1.9 KiB
Python
46 lines
1.9 KiB
Python
from django.contrib.auth.tokens import PasswordResetTokenGenerator
|
|
|
|
# Subclass PasswordResetTokenGenerator to create a separate token generator
|
|
# for account activation. This allows future customization specific to activation tokens,
|
|
# even though it currently behaves exactly like the base class.
|
|
class AccountActivationTokenGenerator(PasswordResetTokenGenerator):
|
|
pass # No changes yet; inherits all behavior from PasswordResetTokenGenerator
|
|
|
|
# Create an instance of AccountActivationTokenGenerator to be used for generating
|
|
# and validating account activation tokens throughout the app.
|
|
account_activation_token = AccountActivationTokenGenerator()
|
|
|
|
# Create an instance of the base PasswordResetTokenGenerator to be used
|
|
# for password reset tokens.
|
|
password_reset_token = PasswordResetTokenGenerator()
|
|
|
|
|
|
|
|
|
|
from rest_framework_simplejwt.authentication import JWTAuthentication
|
|
from rest_framework_simplejwt.exceptions import InvalidToken, TokenError
|
|
|
|
#COOKIE + AUTHORIZATION HEADER JWT AUTHENTICATION FOR AXIOS COMPATIBILITY
|
|
class CookieJWTAuthentication(JWTAuthentication):
|
|
def authenticate(self, request):
|
|
# First try Authorization header (standard axios pattern)
|
|
header_token = self.get_header(request)
|
|
if header_token is not None:
|
|
validated_token = self.get_validated_token(header_token)
|
|
return self.get_user(validated_token), validated_token
|
|
|
|
# Fallback to cookie-based authentication
|
|
raw_token = request.COOKIES.get('access_token')
|
|
|
|
if not raw_token:
|
|
return None
|
|
|
|
try:
|
|
validated_token = self.get_validated_token(raw_token)
|
|
return self.get_user(validated_token), validated_token
|
|
except (InvalidToken, TokenError):
|
|
# Invalid/expired token - return None instead of raising exception
|
|
# This allows AllowAny endpoints to work even with bad cookies!!
|
|
return None
|
|
|