from django.contrib import messages from django.contrib.auth.views import LoginView from django.contrib.auth import get_user_model from django.urls import reverse_lazy from django.views import generic from django.views.decorators.csrf import csrf_exempt # This view should be exempt from requiring CSRF token. # Then we can check for it and show a nice error # Don't worry, django.contrib.auth.views.login will # check for it before logging the user in class LoginEmbed(LoginView): template_name = "registration/login_embed.html" @csrf_exempt def dispatch(self, request, *args, **kwargs): if request.method == "POST": csrf_cookie = request.COOKIES.get("csrftoken", None) if csrf_cookie is None: messages.warning(request, "Cookies do not seem to be enabled. Try logging in using a new tab.") request.method = "GET" # Render the page without trying to login return super().dispatch(request, *args, **kwargs) class ProfileDetail(generic.DetailView): template_name = "profile_detail.html" model = get_user_model() def get_queryset(self): try: pk = self.kwargs["pk"] except KeyError: pk = self.request.user.id self.kwargs["pk"] = pk return self.model.objects.filter(pk=pk) def get_context_data(self, **kwargs): context = super(ProfileDetail, self).get_context_data(**kwargs) context["page_title"] = f"Profile: {self.object}" context["completed_levels"] = self.object.level_qualifications.all().select_related("level") return context class ProfileUpdateSelf(generic.UpdateView): template_name = "profile_form.html" model = get_user_model() fields = ["first_name", "last_name", "email", "initials", "phone", "dark_theme"] def get_queryset(self): pk = self.request.user.id self.kwargs["pk"] = pk return self.model.objects.filter(pk=pk) def get_success_url(self): url = reverse_lazy("profile_detail") return url class ResetApiKey(generic.RedirectView): def get_redirect_url(self, *args, **kwargs): self.request.user.api_key = self.request.user.make_api_key() self.request.user.save() return reverse_lazy("profile_detail")