# -*- coding: utf-8 -*- # from rest_framework.permissions import AllowAny from rest_framework.response import Response from rest_framework.generics import CreateAPIView from common.utils import get_logger from .. import serializers, errors from ..mixins import AuthMixin logger = get_logger(__name__) __all__ = ['TokenCreateApi'] class TokenCreateApi(AuthMixin, CreateAPIView): permission_classes = (AllowAny,) serializer_class = serializers.BearerTokenSerializer def create_session_if_need(self): if self.request.session.is_empty(): self.request.session.create() def create(self, request, *args, **kwargs): self.create_session_if_need() # 如果认证没有过,检查账号密码 try: user = self.check_user_auth() self.check_user_mfa_if_need(user) self.check_user_login_confirm_if_need(user) self.send_auth_signal(success=True, user=user) self.clear_auth_mark() resp = super().create(request, *args, **kwargs) return resp except errors.AuthFailedError as e: return Response(e.as_data(), status=401)