auth.py

#-*- coding: utf-8 -*-
import re
from django.contrib.auth.models import User
from django.http import HttpResponseForbidden
from openid.consumer.consumer import SUCCESS
from website import settings

class GoogleBackend:
    def authenticate(self, openid_response):
        if openid_response is None:
            return None
        if openid_response.status != SUCCESS:
            return None

        google_email = openid_response.getSigned('http://openid.net/srv/ax/1.0', 'value.email')
        google_firstname = openid_response.getSigned('http://openid.net/srv/ax/1.0', 'value.firstname')
        google_lastname = openid_response.getSigned('http://openid.net/srv/ax/1.0', 'value.lastname')
        try:
            user = User.objects.get(username=google_email)
        except User.DoesNotExist:
            if  settings.EMAIL_VALIDATE:
                if re.search('@' + settings.EMAIL_DOMAIN, google_email):
                    User.objects.create(username=google_email, email=google_email, password='test',
                        first_name=google_firstname
                        , last_name=google_lastname).save()
                    user = User.objects.get(username=google_email)
                else:
                    raise HttpResponseForbidden
            else:
                User.objects.create(username=google_email, email=google_email, password='test',
                    first_name=google_firstname
                    , last_name=google_lastname).save()
                user = User.objects.get(username=google_email)
        return user

    def get_user(self, user_id):
            try:
                return User.objects.get(pk=user_id)
            except User.DoesNotExist:
                return None