Exemplo n.º 1
0
 def test_unused(self):
     unused = "*****@*****.**"
     self.assertTrue(User.email_is_unused(unused))
     user = create_user(email=unused)
     self.assertFalse(User.email_is_unused(unused))
     user.is_active = False
     user.save()
     self.assertTrue(User.email_is_unused(unused))
Exemplo n.º 2
0
 def test_unused(self):
     unused="*****@*****.**"
     self.assertTrue(User.email_is_unused(unused))
     user = create_user(email=unused)
     self.assertFalse(User.email_is_unused(unused))
     user.is_active = False
     user.save()
     self.assertTrue(User.email_is_unused(unused))
Exemplo n.º 3
0
 def test_used(self):
     email = '*****@*****.**'
     self.signup(email=email)
     dupe = create_user(email=email)
     self.assertFalse(User.email_is_unused(email))
Exemplo n.º 4
0
def get_signup_context(request, skip_invite_code=None, template="user/signup.django.html",
                       cookies_to_set={}, cookies_to_delete=[]):
    """
    Returns an error context (or dict) if the signup is not successful.

    Returns `None` for successful signups.

    `cookies_to_set` and `cookies_to_delete` should be passed empty so that this functin may append to them.
    `cookies_to_set` is for session cookies, to tie into after_signup.py / after_signup.js.
    """
    skip_invite_code = skip_invite_code or request.GET.get('skip_invite_code', '').lower()
    bypass_copy = settings.SHORT_CODE_COPY.get(skip_invite_code)
    skippable_codes = (['dicksoup', 'angelgate', 'friends_and_family', 'herpderp', 'fffffat', 'buzzfeedbrews']
                       + settings.SHORT_CODES)

    login_url = '/login'
    if request.REQUEST.get('next'):
        next = request.REQUEST['next']
        params = [urllib.urlencode({'next': next})]
        if request.method == 'POST':
            next_params = request.POST.get('next_params', '')
        else:
            next_params = request.GET.copy()
            del next_params['next']
            next_params = urllib.urlencode(next_params)
        if next_params:
            params.append(next_params)
        login_url = login_url + '?' + u'&'.join(params)

    try:
        fb_user, fb_api = util.get_fb_api(request)
    except NotLoggedIntoFacebookError:
        fb_user, fb_api = None, None

    fb_uid = fb_user.get('uid') if fb_user else None
    fb_invite = None
    if request.COOKIES.get('fb_message_id'):
        fb_invite = FacebookInvite.objects.get_or_none(fb_message_id=request.COOKIES.get('fb_message_id'))
        cookies_to_delete.append('fb_message_id')

    if not fb_invite and fb_uid:
        fb_invite = FacebookInvite.get_invite(fb_user.get('uid'))

    if request.method == 'GET':
        return locals()

    username = request.POST.get('username', '')
    password = request.POST.get('password', '')
    email = request.POST.get('email', '')
    if not fb_uid:
        fb_uid = request.POST.get('facebook_id', None)

    def error(message, context=locals()):
        context['message'] = message
        Metrics.signup_form_invalid.record(request)
        return context

    if check_rate_limit(request, username):
        return error("Too many failed signup attempts. Wait a minute and try again.")

    if not password:
        return error("Password required.")
    if not User.validate_password(password):
        return error("Sorry, your password is too short. Please use 5 or more characters.")

    error_msg = User.validate_username(username)
    if error_msg:
        return error(error_msg)

    if not User.validate_email(email):
        return error("Please enter a valid email address.")

    if not User.email_is_unused(email):
        return error("This email address is already in use. Try <a href='/login'>signing in</a> "
                    "or <a href='/password_reset'>resetting</a> your password if you've forgotten it.")

    if fb_uid and not UserInfo.facebook_is_unused(fb_uid):
        return error("This Facebook account is already in use. Try <a href='/login'>signing in</a> "
                    "or <a href='/password_reset'>resetting</a> your password if you've forgotten it.")

    try:
        user = User.objects.create_user(username, email, password)
    except IntegrityError:
        return error("Username taken.")

    if not fb_uid:
        fb_uid = None

    UserInfo(user=user, invite_bypass=skip_invite_code,
             facebook_id=fb_uid, enable_timeline=True).save()

    if fb_invite:
        fb_invite.invitee = user
        fb_invite.save()

    user = auth.authenticate(username=username, password=password)

    # Handle following featured groups and optionally one defined by their short code.
    if skip_invite_code:
        autofollow = settings.SHORT_CODE_AUTOFOLLOW.get(skip_invite_code)
        if autofollow:
            to_follow.append(autofollow)

    economy.grant_daily_free_stickers(request.user, force=True, count=knobs.SIGNUP_FREE_STICKERS)

    # Follow the Canvas account.
    try:
        user.redis.following.sadd(User.objects.get(username=settings.CANVAS_ACCOUNT_USERNAME).id)
    except User.DoesNotExist:
        pass

    # Logged-out remix?
    cookie_key, post_data = after_signup.get_posted_comment(request)
    if post_data:
        post_comment(request, user, post_data)
        cookies_to_delete.append(cookie_key)

    inviter_id = request.session.get('inviter')
    if inviter_id:
        user.kv.inviter = inviter_id
        del request.session['inviter']

        inviter = User.objects.get(pk=inviter_id)
        user.follow(inviter)
        inviter.follow(user)

    # DEPRECATED. Use after_signup.py / after_signup.js now instead.
    extra_info = request.POST.get("info")
    if extra_info:
        extra_info = util.loads(extra_info)

        if extra_info.get('in_flow') == 'yes':
            fact.record('flow_signup', request, {})

        # A user may have come to signup by remixing/replying, and we've got their post data to submit and send them
        # to.
        if not post_data:
            post_data = extra_info.get('post')
            if post_data:
                post_comment(request, user, post_data)

    old_session_key = request.session.session_key

    def _after_signup():
        if fb_api:
            app_requests = fb_api.get_object('/me/apprequests/').get('data', [])
            for app_request in app_requests:
                if id in app_request:
                    fb.delete_object(app_request['id'])

        Metrics.signup.record(request, old_session_key=old_session_key, username=username, email=email)

        if 'failed_signup' in request.session:
            del request.session['failed_signup']
            Metrics.signup_second_try.record(request)

        if template == 'signup/_signup_prompt.html':
            Metrics.signup_prompt.record(request)
        else:
            Metrics.signup_main.record(request)

    bgwork.defer(_after_signup)

    # auth.login starts a new session and copies the session data from the old one to the new one
    auth.login(request, user)

    experiments.migrate_from_request_to_user(request, user)
Exemplo n.º 5
0
 def test_used(self):
     email = '*****@*****.**'
     self.signup(email=email)
     dupe = create_user(email=email)
     self.assertFalse(User.email_is_unused(email))
Exemplo n.º 6
0
def get_signup_context(request,
                       skip_invite_code=None,
                       template="user/signup.django.html",
                       cookies_to_set={},
                       cookies_to_delete=[]):
    """
    Returns an error context (or dict) if the signup is not successful.

    Returns `None` for successful signups.

    `cookies_to_set` and `cookies_to_delete` should be passed empty so that this functin may append to them.
    `cookies_to_set` is for session cookies, to tie into after_signup.py / after_signup.js.
    """
    skip_invite_code = skip_invite_code or request.GET.get(
        'skip_invite_code', '').lower()
    bypass_copy = settings.SHORT_CODE_COPY.get(skip_invite_code)
    skippable_codes = ([
        'dicksoup', 'angelgate', 'friends_and_family', 'herpderp', 'fffffat',
        'buzzfeedbrews'
    ] + settings.SHORT_CODES)

    login_url = '/login'
    if request.REQUEST.get('next'):
        next = request.REQUEST['next']
        params = [urllib.urlencode({'next': next})]
        if request.method == 'POST':
            next_params = request.POST.get('next_params', '')
        else:
            next_params = request.GET.copy()
            del next_params['next']
            next_params = urllib.urlencode(next_params)
        if next_params:
            params.append(next_params)
        login_url = login_url + '?' + u'&'.join(params)

    try:
        fb_user, fb_api = util.get_fb_api(request)
    except NotLoggedIntoFacebookError:
        fb_user, fb_api = None, None

    fb_uid = fb_user.get('uid') if fb_user else None
    fb_invite = None
    if request.COOKIES.get('fb_message_id'):
        fb_invite = FacebookInvite.objects.get_or_none(
            fb_message_id=request.COOKIES.get('fb_message_id'))
        cookies_to_delete.append('fb_message_id')

    if not fb_invite and fb_uid:
        fb_invite = FacebookInvite.get_invite(fb_user.get('uid'))

    if request.method == 'GET':
        return locals()

    username = request.POST.get('username', '')
    password = request.POST.get('password', '')
    email = request.POST.get('email', '')
    if not fb_uid:
        fb_uid = request.POST.get('facebook_id', None)

    code = InviteCode.objects.get_or_none(code=request.POST.get('code'))

    def error(message, context=locals()):
        context['message'] = message
        Metrics.signup_form_invalid.record(request)
        return context

    if check_rate_limit(request, username):
        return error(
            "Too many failed signup attempts. Wait a minute and try again.")

    if not password:
        return error("Password required.")
    if not User.validate_password(password):
        return error(
            "Sorry, your password is too short. Please use 5 or more characters."
        )

    error_msg = User.validate_username(username)
    if error_msg:
        return error(error_msg)

    if not User.validate_email(email):
        return error("Please enter a valid email address.")

    if not User.email_is_unused(email):
        return error(
            "This email address is already in use. Try <a href='/login'>signing in</a> "
            "or <a href='/password_reset'>resetting</a> your password if you've forgotten it."
        )

    if fb_uid and not UserInfo.facebook_is_unused(fb_uid):
        return error(
            "This Facebook account is already in use. Try <a href='/login'>signing in</a> "
            "or <a href='/password_reset'>resetting</a> your password if you've forgotten it."
        )

    try:
        user = User.objects.create_user(username, email, password)
    except IntegrityError:
        return error("Username taken.")

    if not fb_uid:
        fb_uid = None

    UserInfo(user=user,
             invite_bypass=skip_invite_code,
             facebook_id=fb_uid,
             enable_timeline=True).save()

    if code:
        code.invitee = user
        code.save()

    if fb_invite:
        fb_invite.invitee = user
        fb_invite.save()

    user = auth.authenticate(username=username, password=password)

    # Handle following featured groups and optionally one defined by their short code.
    if skip_invite_code:
        autofollow = settings.SHORT_CODE_AUTOFOLLOW.get(skip_invite_code)
        if autofollow:
            to_follow.append(autofollow)

    economy.grant_daily_free_stickers(request.user,
                                      force=True,
                                      count=knobs.SIGNUP_FREE_STICKERS)

    # Follow the Canvas account.
    try:
        user.redis.following.sadd(
            User.objects.get(username=settings.CANVAS_ACCOUNT_USERNAME).id)
    except User.DoesNotExist:
        pass

    # Logged-out remix?
    cookie_key, post_data = after_signup.get_posted_comment(request)
    if post_data:
        post_comment(request, user, post_data)
        cookies_to_delete.append(cookie_key)

    inviter_id = request.session.get('inviter')
    if inviter_id:
        user.kv.inviter = inviter_id
        del request.session['inviter']

        inviter = User.objects.get(pk=inviter_id)
        user.follow(inviter)
        inviter.follow(user)

    # DEPRECATED. Use after_signup.py / after_signup.js now instead.
    extra_info = request.POST.get("info")
    if extra_info:
        extra_info = util.loads(extra_info)

        if extra_info.get('in_flow') == 'yes':
            fact.record('flow_signup', request, {})

        # A user may have come to signup by remixing/replying, and we've got their post data to submit and send them
        # to.
        if not post_data:
            post_data = extra_info.get('post')
            if post_data:
                post_comment(request, user, post_data)

    old_session_key = request.session.session_key

    def _after_signup():
        if fb_api:
            app_requests = fb_api.get_object('/me/apprequests/').get(
                'data', [])
            for app_request in app_requests:
                if id in app_request:
                    fb.delete_object(app_request['id'])

        Metrics.signup.record(request,
                              old_session_key=old_session_key,
                              username=username,
                              email=email)

        if 'failed_signup' in request.session:
            del request.session['failed_signup']
            Metrics.signup_second_try.record(request)

        if template == 'signup/_signup_prompt.html':
            Metrics.signup_prompt.record(request)
        else:
            Metrics.signup_main.record(request)

    bgwork.defer(_after_signup)

    # auth.login starts a new session and copies the session data from the old one to the new one
    auth.login(request, user)

    experiments.migrate_from_request_to_user(request, user)