1 files changed, 32 insertions, 0 deletions
diff --git a/apps/it/login_required_middleware.py b/apps/it/login_required_middleware.py
new file mode 100644
index 0000000..e63bc15
--- /dev/null
+++ b/apps/it/login_required_middleware.py
@@ -0,0 +1,32 @@
+# -*- coding: utf-8 -*-
+
+from django.conf import settings
+from django.http import HttpResponseRedirect
+
+from re import compile
+
+if hasattr(settings, 'LOGIN_EXEMPT_URLS'):
+    EXEMPT_URLS = [compile(expr) for expr in settings.LOGIN_EXEMPT_URLS]
+
+
+class LoginRequiredMiddleware:
+    """
+    Middleware that requires a user to be authenticated to view any page other
+    than LOGIN_URL. Exemptions to this requirement can optionally be specified
+    in settings via a list of regular expressions in LOGIN_EXEMPT_URLS (which
+    you can copy from your urls.py).
+
+    Requires authentication middleware and template context processors to be
+    loaded. You'll get an error if they aren't.
+    """
+    def process_request(self, request):
+        assert hasattr(request, 'user'), "The Login Required middleware\
+ requires authentication middleware to be installed. Edit your\
+ MIDDLEWARE_CLASSES setting to insert\
+ 'django.contrib.auth.middlware.AuthenticationMiddleware'. If that doesn't\
+ work, ensure your TEMPLATE_CONTEXT_PROCESSORS setting includes\
+ 'django.core.context_processors.auth'."
+        if not request.user.is_authenticated():
+            path = request.path_info.lstrip('/')
+            if not any(m.match(path) for m in EXEMPT_URLS):
+                return HttpResponseRedirect(settings.LOGIN_URL)