#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
基于django的新浪微博oauth views
需要django的session支持
"""
from django.http import HttpResponseRedirect
from weibopy import OAuthHandler, oauth, WeibopError
consumer_key = '' # 設(shè)置你申請的appkey
consumer_secret = '' # 設(shè)置你申請的appkey對于的secret
class WebOAuthHandler(OAuthHandler):
  def get_authorization_url_with_callback(self, callback, signin_with_twitter=False):
    """Get the authorization URL to redirect the user"""
    try:
      # get the request token
      self.request_token = self._get_request_token()
      # build auth request and return as url
      if signin_with_twitter:
        url = self._get_oauth_url('authenticate')
      else:
        url = self._get_oauth_url('authorize')
      request = oauth.OAuthRequest.from_token_and_callback(
        token=self.request_token, callback=callback, http_url=url
      )
      return request.to_url()
    except Exception, e:
      raise WeibopError(e)
def _get_referer_url(request):
  referer_url = request.META.get('HTTP_REFERER', '/')
  host = request.META['HTTP_HOST']
  if referer_url.startswith('http') and host not in referer_url:
    referer_url = '/' # 避免外站直接跳到登錄頁而發(fā)生跳轉(zhuǎn)錯誤
  return referer_url
def _oauth():
  """獲取oauth認證類"""
  return WebOAuthHandler(consumer_key, consumer_secret)
def login(request):
  # 保存最初的登錄url，以便認證成功后跳轉(zhuǎn)回來
  back_to_url = _get_referer_url(request)
  request.session['login_back_to_url'] = back_to_url
  # 獲取oauth認證url
  login_backurl = request.build_absolute_uri('/login_check')
  auth_client = _oauth()
  auth_url = auth_client.get_authorization_url_with_callback(login_backurl)
  # 保存request_token，用戶登錄后需要使用它來獲取access_token
  request.session['oauth_request_token'] = auth_client.request_token
  # 跳轉(zhuǎn)到登錄頁面
  return HttpResponseRedirect(auth_url)
def login_check(request):
  """用戶成功登錄授權(quán)后，會回調(diào)此方法，獲取access_token，完成授權(quán)"""
  # http://mk2.com/?oauth_token=c30fa6d693ae9c23dd0982dae6a1c5f9&oauth_verifier=603896
  verifier = request.GET.get('oauth_verifier', None)
  auth_client = _oauth()
  # 設(shè)置之前保存在session的request_token
  request_token = request.session['oauth_request_token']
  del request.session['oauth_request_token']
  auth_client.set_request_token(request_token.key, request_token.secret)
  access_token = auth_client.get_access_token(verifier)
  # 保存access_token，以后訪問只需使用access_token即可
  request.session['oauth_access_token'] = access_token
  # 跳轉(zhuǎn)回最初登錄前的頁面
  back_to_url = request.session.get('login_back_to_url', '/')
  return HttpResponseRedirect(back_to_url)
def logout(request):
  """用戶登出，直接刪除access_token"""
  del request.session['oauth_access_token']
  back_to_url = _get_referer_url(request)
  return HttpResponseRedirect(back_to_url)