basic oauth2 authentication workflow management

Author: essediweb

elastic_framework/contrib/auth/serializers.py

@@ -7,6 +7,7 @@ class ECUserSignupSerializer(serializers.ModelSerializer):
 
     class Meta:
         model = get_user_model()
+        exclude = ('password',)
 
     def to_native(self, obj):
         return super(ECUserSignupSerializer, self).to_native(obj)
@@ -30,6 +31,12 @@ def to_python(self):
         pass
 
 
+class ECUserSerializer(serializers.ModelSerializer):
+
+    class Meta:
+        model = get_user_model()
+        exclude = ('password',)
+
 class ECUserResponseSerializerClass(serializers.ModelSerializer):
 
     class Meta:

elastic_framework/contrib/auth/views.py

@@ -7,15 +7,16 @@
 from rest_framework.generics import (GenericAPIView, ListCreateAPIView,
                                      RetrieveUpdateAPIView)
 from rest_framework.response import Response
-from rest_framework.exceptions import ParseError
+from rest_framework.exceptions import ParseError, PermissionDenied
 from rest_framework import permissions
 from rest_framework import status
 
 from provider.oauth2.models import AccessToken, Client
 
 from elastic_framework.core.exceptions import APIError
 
-from .serializers import ECUserSignupSerializer, ECUserResponseSerializerClass
+from .serializers import (ECUserSignupSerializer, ECUserResponseSerializerClass,
+                          ECUserSerializer)
 from .utils import create_token, get_token_from_request
 
 logger = logging.getLogger(__name__)
@@ -30,6 +31,9 @@ class Oauth2ECUserListView(GenericAPIView):
     authentication_classes = ()
     token = {}
 
+    def get_queryset(self):
+        return get_user_model().objects.all()
+
     def get_serializer_context(self):
         ctx = super(Oauth2ECUserListView, self).get_serializer_context()
         ctx['token'] = self.token
@@ -91,9 +95,26 @@ def post(self, request, *args, **kwargs):
         return Response(response_data,
                         status=status.HTTP_201_CREATED)
 
+class Oauth2ECUserView(GenericAPIView):
+
+    serializer_class = ECUserSerializer
+    permission_classes = (permissions.IsAuthenticated,)
+
+    def get_queryset(self):
+        return get_user_model().objects.all()
+
+    def get(self, request, *args, **kwargs):
+        user = self.get_object()
+        if not request.user == user:
+            raise PermissionDenied()
+        user_serializer = self.get_serializer(instance=user)
+        return Response(user_serializer.data,
+                        status=200)
+
+
 class Oauth2ECUserLoginView(GenericAPIView):
 
-    serializer_class = ECUserResponseSerializerClass
+    serializer_class = ECUserSignupSerializer
     permission_classes = (permissions.AllowAny,)
 
     def get_serializer_context(self):