support backup token authentication

ocadotechnology · Sep 29, 2023 · a539aa4 · a539aa4
1 parent db1bbf4
commit a539aa4
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/backend/api/forms.py b/backend/api/forms.py
@@ -63,6 +63,13 @@ def get_invalid_login_error_message(self):
         )
 
 
+class TokenAuthForm(BaseAuthForm):
+    token = forms.CharField(min_length=8, max_length=8)
+
+    def get_invalid_login_error_message(self):
+        return "Must be exactly 8 characters. A token can only be used once."
+
+
 class UsernameAuthForm(BaseAuthForm):
     username = UsernameField()
     password = forms.CharField(strip=False)

diff --git a/backend/api/urls.py b/backend/api/urls.py
@@ -8,7 +8,7 @@
         include(
             [
                 re_path(
-                    r"^login/(?P<form>email|username|user-id|otp)/$",
+                    r"^login/(?P<form>email|username|user-id|otp|token)/$",
                     LoginView.as_view(),
                     name="login",
                 ),

diff --git a/backend/api/views.py b/backend/api/views.py
@@ -16,6 +16,7 @@
     BaseAuthForm,
     EmailAuthForm,
     OtpAuthForm,
+    TokenAuthForm,
     UserIdAuthForm,
     UsernameAuthForm,
 )
@@ -35,6 +36,8 @@ def get_form_class(self):
             return UserIdAuthForm
         elif form == "otp":
             return OtpAuthForm
+        elif form == "token":
+            return TokenAuthForm
 
     def form_valid(self, form: BaseAuthForm):
         # Create session (without data).