1 files changed, 51 insertions, 0 deletions
diff --git a/gitrefinery/middleware.py b/gitrefinery/middleware.py
new file mode 100644
index 0000000..43fefb5
--- /dev/null
+++ b/gitrefinery/middleware.py
@@ -0,0 +1,51 @@
+# gitrefinery-web - middleware definitions
+#
+# Copyright (C) 2019 Intel Corporation
+#
+# Licensed under the MIT license, see COPYING.MIT for details
+
+from django.utils.deprecation import MiddlewareMixin
+from django.http import HttpResponseRedirect
+from django.urls import reverse
+from django.contrib.auth import logout
+from django.contrib import messages
+import settings
+import re
+from datetime import datetime
+
+class SessionIdleTimeoutMiddleware(MiddlewareMixin):
+    """
+    Middleware which implements Session IDLE TIMEOUT every page.
+    This requirement can be specified in settings via
+    Variables in SESSION_IDLE_TIMEOUT.
+    """
+    def process_request(self, request):
+        if request.user.is_authenticated:
+            if getattr(settings, 'SESSION_IDLE_TIMEOUT', 0) > 0:
+                current_datetime = datetime.timestamp(datetime.now())
+                if ('last_access' in request.session):
+                    last = (current_datetime - request.session['last_access'])
+                    if last > settings.SESSION_IDLE_TIMEOUT:
+                        messages.add_message(request, messages.INFO,
+                            'Your session has timed out due to inactivity. Log in again to continue.')
+                        logout(request)
+                        return HttpResponseRedirect(reverse('login'))
+                request.session['last_access'] = current_datetime
+        return None
+
+
+class LoginRequiredMiddleware(MiddlewareMixin):
+    """
+    Middleware that requires a user to be authenticated to view any page.
+    Exemptions to this requirement can optionally be specified
+    in settings via a list of regular expressions in LOGIN_EXEMPT_URLS.
+
+    """
+    def process_request(self, request):
+        try:
+            if not request.user.is_authenticated:
+                path = request.path_info
+                if (not any(re.compile(m).match(path) for m in settings.LOGIN_EXEMPT_URLS)) and not reverse('login') == path:
+                    return HttpResponseRedirect(reverse('login'))
+        except AttributeError:
+            return HttpResponseRedirect(reverse('login'))