From 1daa0c1a3054ae71d9197faebca1f443b0395e32 Mon Sep 17 00:00:00 2001
From: Subhranath Chunder <subhranath@gmail.com>
Date: Sun, 18 Sep 2011 22:55:14 +0530
Subject: [PATCH] Added support for Google+

---
 README                       |  11 ++++
 django_custom_auths.db       | Bin 39936 -> 49152 bytes
 facebook/views.py            |   3 +-
 googleplus/__init__.py       |   0
 googleplus/backends.py       |  16 +++++
 googleplus/models.py         |  15 +++++
 googleplus/tests.py          |  16 +++++
 googleplus/urls.py           |   5 ++
 googleplus/utils.py          |  22 +++++++
 googleplus/views.py          | 119 +++++++++++++++++++++++++++++++++++
 settings.py                  |   9 ++-
 templates/account/index.html |   1 +
 urls.py                      |   1 +
 13 files changed, 215 insertions(+), 3 deletions(-)
 create mode 100644 googleplus/__init__.py
 create mode 100644 googleplus/backends.py
 create mode 100644 googleplus/models.py
 create mode 100644 googleplus/tests.py
 create mode 100644 googleplus/urls.py
 create mode 100644 googleplus/utils.py
 create mode 100644 googleplus/views.py

diff --git a/README b/README
index 3bc7c13..80c0aed 100644
--- a/README
+++ b/README
@@ -14,8 +14,19 @@ Currently supported, simultaneous auth backends:
 -------------------------------------------------
 - Usual Django login
 - Login with Facebook (using Facebook Graph API)
+- Login with Google+
 
 Installing (Tryout)
 -------------------
 Just clone this repo and hit 'runserver', to try this out.
 
+For Facebook app:
+i) Create a facebook app from the facebook developers site (with redirect_uri as '/facebook/login/')
+ii) Update settings.py with 'FACEBOOK_APP_ID' and 'FACEBOOK_APP_SECRET'.
+
+For Google+ app:
+i) Create a new application from the Google APIs Console (https://code.google.com/apis/console/),
+with redirect uri specified to '/googleplus/login/' of your server.
+ii) Use the 'client_id' and 'client_secret' obtained from step i, and make
+appropriate changes in settings.py to update 'GOOGLEPLUS_CLIENT_ID' and
+'GOOGLEPLUS_CLIENT_SECRET'.
diff --git a/django_custom_auths.db b/django_custom_auths.db
index 6f9d00120d60a4e84b52f36bf19a8f19e9cff989..c8bc2282da9226702f16529ac267c39d6feff138 100644
GIT binary patch
delta 2389
zcmbtWU2GIp6ux)PZg;!g0+qJgQhuf@l`gQ$+?k!9UC^?WQVR5Ep)IvWH{1Pb8#de8
z?m`hsJAxR4K-Y;O5`8kp7kyYpj3h=AO^^ozulPfZJk-P(k(lscgLtP~wo8AgiIdEk
znS0LnopbLw=iZt4oSB$_$(pjW2qA9v#`IZ{*($6%i`;i=%=D`W?of%g!Zh56d+<B_
z3U{*VAh<TJr^7YXR8*8xv1$bsB{nK-W&?*|no8t>X}!#T7i`GwFqBpJp=PmeDPm-%
z20zTI-{N463Cq|TjU{5KSg3z!s6P=KPNYZEqp^{yoGvmDPWI2&IjT&UU~4!Uod>Ga
zJ8Yl2Y`|PZkcLv`Vpe^V@ua|xT5D@cOEJcQz?_>9;bc)172Ye#icgX_pTbLm=9bsA
z`P@WddEU<xzsP$8ufoeB&k^G09%+c=_sSkckR(x#Gj>Gs4&r^3m|jHic?snfi9zYf
z14Tc_c{tI_%lte_ub-DZoaCdFT3UXwd<H^fzbN_%je^F=iQ1IB-Ue_5!4Gf+?$H(g
z2)1v8R=nK2pb`jP7@Pj*_Ht9X6)XsTf$!idT!0aH2_&#&)w|3#x7Cc?wXPgFYb1v?
zvNPvw?#&q2q{bVRtQ)~?S}!-@GNhmz-iPy9^*LC-&Q$9vi1Tr%RZBHrV&J}BHt`!6
z1%{p}GRnrnJV5XxI3WYg@EIhS2aw3B-!OPzMy;(gX5JU!l?W$uibS&{aT1C9ymHtp
zdWDGMi*TY{bGGlBu?+K3KIV)1xUe9`IU(YW$K%m3Q6wLUlekwd(KGF%R;Yqu&C;`_
z2wsJwFq~Btc*+bITdQWIV@6i$uf6cv+HwnQG8XOwI1MrQ8uq{@ux8c27_H?*osV#C
zjyK9k5dA#o;YF_`3-<L8z%z-@tBKdBB~g$CA75gqwT~~Y(NCSY4{LWFA9Hti4s=9?
zX5rv|k08<7Ap(&ENl~<$T7{T6GC0!wN~nqN*q`d^?mcuMHMl<=?U9p0S7CJteu49I
zyhkC5Oho<X@y+&PmN~`TfNF?l)fHI(;@oaVW6!;Jc~W2A?dB)A#icZBfQu0>W*XsS
zMxEA+-<f9YCUj<Y2%X8ON9$E&H@B)Q1IwjP`|#qPiu_s?E~S3$k{|1Dz3a!6tYn64
zxeOa*8}ej@3vWb?VGO|-?WrV;t7dFPScQO0;CPt#c>;Tz4oSVi!-u_+yEn;8iFh>F
zOm@ATPPZvN2YZGh9o?~5OQ^rAv$cJoW6$$#?d`|*9(z0qx&4F)BJq+%cb`M)zJZZ&
zGMs_|wo(6k++?x?HrfEg6oM%l+D}kj4KiL7tv`I@52(v?P>O+cG8!A1Nr@TVLijXT
zpcg(tw=(Lran<#-#Sv`4YWpCy8k_6KdE07;`1%yO+lotCY->E&6zFVXTiSLv^{~z*
z?ea`cw!Llq35HI#-WiTWVxyy>)X<Sw(&;*dHdq`D4fyqysc>H+wxo+C74@?*b_RAG
zXfj-{estaxOjo<TL(y8#pDZn)8H{QZbq;On{EF2DqtU_9;Y9d&NZZy>vy$y<YYBEW
z*<3-k$PsJMhA&iYFR-0^H8#l*nfoqqZKzzq+W&y(m&9)lIv?S8ENK)HmQ-yqy1;>Y
zHH&F0yp4J@>c(-&VMdKuZVV^c+-c0_;B%*eb<tCrt2Co$F)?tob{2vb9^a(GKnMmR
z_fNpa!x8;^(<ZRxy7M}M>$C;Fgq>1VKB!sK1wk$PTajy}uaLH?{-5mRRVJ|0qyqjQ
N{f%incOf%b_Ahl4xw8NO

delta 660
zcmah{%}*0S9G%&>O=(LBUp3Jp6apB9HapvPx2#^Uw!|0$!NzEacmNV5)ikyoln7lk
zoKU)%c(Bov{{YJ<(S(CBgp-j!z!*Oca^V0MFI=28;i{9FcX%(qy!U&VY8BOYN-f%w
zBZQoh@A$MigUM))#D7M8lJa5C6MAuk-#ElR_C$+X!s+Nq$wt~GG&e~I1tkQ1VUHx+
z+`m5PEIVR*{Q~@+5>dvvzhS_&I~6e=d~>!zK^MV1x?H;rO$DWqguA2RFr{>On8(di
ziA-Ei$8=_CDN8pKnyxc5rE84EwT!$mO|z02OVbmKX_}$)dGlub-w|e7sic)kCx%Sj
zWGVj3?37;nL<T>U!M{UQ5vJnce7oA}he7ZIpYR@QxQ{6qt{nq6vY(|?A^0kXcCmp9
zUg4Q*Pk~oP>Vj?^;6%Sah@$MKhu{l(;9vxs*mUhCsJ$4a{7OB>^JD$0T)oe+yM;4W
zZa@Uf+<$#QwB8O=x0Y3SX;Kv{lZzeAKFoSaUgHU7@ez5~PJ@RQ`oz73klHakTE3f~
zyHS2vn8;7xNhA$TORywM=|jxmyF8MfX2p?WDQ#ZOm2$<LK67#6R=$uen%Bygk2~|)
z)UBlEb!M7ICd0(HrE`seEp%ZHZ)r?sr+jAZrHDPfq-@j#{%bq<4_oSe1keDX0VRt^
lWW})`(8rFwBm&Qml%PUaiLygi=?B+dq#|3ls0h5U=pQb1sbc^D

diff --git a/facebook/views.py b/facebook/views.py
index a19837d..c50c052 100644
--- a/facebook/views.py
+++ b/facebook/views.py
@@ -91,7 +91,8 @@ def _create_or_update_facebook_user(profile, access_token, expires):
     except FacebookUser.DoesNotExist:
         user = User.objects.create( \
             first_name=profile['first_name'],
-            last_name=profile['last_name']
+            last_name=profile['last_name'],
+            username='fb_' + profile['id']
         )
         user_is_created = True
         
diff --git a/googleplus/__init__.py b/googleplus/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/googleplus/backends.py b/googleplus/backends.py
new file mode 100644
index 0000000..3696fc2
--- /dev/null
+++ b/googleplus/backends.py
@@ -0,0 +1,16 @@
+from django.contrib.auth.models import User
+
+class GooglePlusBackend:
+    supports_inactive_user = False
+    
+    def authenticate(self, googleplus_user=None):
+        if googleplus_user is not None:
+            return googleplus_user.user
+        else:
+            return None
+    
+    def get_user(self, user_id):
+        try:
+            return User.objects.get(id=user_id)
+        except User.DoesNotExist:
+            return None
diff --git a/googleplus/models.py b/googleplus/models.py
new file mode 100644
index 0000000..a888cfd
--- /dev/null
+++ b/googleplus/models.py
@@ -0,0 +1,15 @@
+from django.contrib.auth.models import User
+from django.db import models
+
+class GooglePlusUser(models.Model):
+    """Stores Google+ user specific details. 
+    """
+    user = models.OneToOneField(User)
+    access_token = models.TextField(db_index=True)
+    expiry_at = models.DateTimeField(null=True)
+    googleplus_id = models.CharField(max_length=100, unique=True, db_index=True)
+    googleplus_display_name = models.CharField(max_length=100, unique=True, db_index=True)
+    
+    def __unicode__(self):
+        return unicode(self.id) + u' | ' + unicode(self.googleplus_id)
+    
\ No newline at end of file
diff --git a/googleplus/tests.py b/googleplus/tests.py
new file mode 100644
index 0000000..501deb7
--- /dev/null
+++ b/googleplus/tests.py
@@ -0,0 +1,16 @@
+"""
+This file demonstrates writing tests using the unittest module. These will pass
+when you run "manage.py test".
+
+Replace this with more appropriate tests for your application.
+"""
+
+from django.test import TestCase
+
+
+class SimpleTest(TestCase):
+    def test_basic_addition(self):
+        """
+        Tests that 1 + 1 always equals 2.
+        """
+        self.assertEqual(1 + 1, 2)
diff --git a/googleplus/urls.py b/googleplus/urls.py
new file mode 100644
index 0000000..29975a4
--- /dev/null
+++ b/googleplus/urls.py
@@ -0,0 +1,5 @@
+from django.conf.urls.defaults import patterns, include, url
+
+urlpatterns = patterns('',
+    url(r'login/$', 'googleplus.views.login_handler'),
+)
diff --git a/googleplus/utils.py b/googleplus/utils.py
new file mode 100644
index 0000000..8cee5ab
--- /dev/null
+++ b/googleplus/utils.py
@@ -0,0 +1,22 @@
+import json
+import urllib
+import urlparse
+
+def graph_api(path, params, method="GET"):
+    """Invokes the Google+ API.
+    Returns the response as python dictionary.
+    """
+    # Construct the API url.
+    base_url = 'https://www.googleapis.com/plus/v1/'
+    url = urlparse.urljoin(base_url, path)
+    
+    # Invoke the Google+ API with the specified method. 
+    if method.upper() == "GET":
+        req = urllib.urlopen(url + '?' + urllib.urlencode(params))
+    elif method.upper() == "POST":
+        req = urllib.urlopen(url, urllib.urlencode(params))
+    
+    response = req.read()
+    response_dict = json.loads(response)
+    
+    return response_dict
diff --git a/googleplus/views.py b/googleplus/views.py
new file mode 100644
index 0000000..a2d0545
--- /dev/null
+++ b/googleplus/views.py
@@ -0,0 +1,119 @@
+from django.conf import settings
+from django.contrib import messages
+from django.contrib.auth import authenticate, login
+from django.contrib.auth.models import User
+from django.contrib.sites.models import Site
+from django.http import HttpResponseRedirect
+from django.shortcuts import render_to_response
+from django.template.context import RequestContext
+import datetime
+import json
+import urllib
+import urlparse
+
+from googleplus import utils
+from googleplus.models import GooglePlusUser
+
+GOOGLEPLUS_LOGIN_URL = '/googleplus/login/'
+REDIRECT_URI = urlparse.urljoin( \
+    'http://' + Site.objects.get_current().domain, GOOGLEPLUS_LOGIN_URL
+)
+
+def login_handler(request):
+    """Google+ OAuth2 login handler.
+    """
+    if request.user.is_authenticated():
+        return HttpResponseRedirect(settings.LOGIN_REDIRECT_URL)
+    
+    if 'error' in request.GET:
+        messages.add_message(request, messages.ERROR, 
+                             request.GET['error'])
+        return HttpResponseRedirect(settings.LOGIN_REDIRECT_URL)
+    elif 'code' in request.GET:
+        params = { \
+            'client_id': settings.GOOGLEPLUS_CLIENT_ID, \
+            'redirect_uri': REDIRECT_URI, \
+            'client_secret': settings.GOOGLEPLUS_CLIENT_SECRET, \
+            'code': request.GET['code'], \
+            'grant_type': 'authorization_code', \
+        }
+        req = urllib.urlopen('https://accounts.google.com/o/oauth2/token',
+            urllib.urlencode(params)
+        )
+        if req.getcode() != 200:
+            response = render_to_response('500.html', {}, \
+                               context_instance=RequestContext(request))
+            response.status_code = 500
+            return response
+        
+        response = req.read()
+        response_query_dict = json.loads(response)
+        access_token = response_query_dict['access_token']
+        expires_in = response_query_dict['expires_in']
+        
+        profile = utils.graph_api('people/me', {'access_token': access_token})
+        
+        googleplus_user = _create_or_update_googleplus_user(profile, access_token, expires_in)
+        
+        user = authenticate(googleplus_user=googleplus_user)
+        if user is not None:
+            if user.is_active:
+                login(request, user)
+                request.session.set_expiry(googleplus_user.expiry_at)
+                if 'next' in request.GET:
+                    return HttpResponseRedirect(request.GET['next'])
+                return HttpResponseRedirect(settings.LOGIN_REDIRECT_URL)
+            else:
+                messages.add_message(request, messages.ERROR, "Account disabled.")
+        else:
+            messages.add_message(request, messages.ERROR, "Login failed.")
+    else:
+        params = { \
+            'client_id': settings.GOOGLEPLUS_CLIENT_ID, \
+            'redirect_uri': REDIRECT_URI, \
+            'scope': 'https://www.googleapis.com/auth/plus.me', \
+            'response_type': 'code', \
+        }    
+        return HttpResponseRedirect('https://accounts.google.com/o/oauth2/auth?' +
+            urllib.urlencode(params)
+        )
+
+def _create_or_update_googleplus_user(profile, access_token, expires_in):
+    """Creates or updates a Google+ user profile in local database.
+    """
+    user_is_created = False
+    try:
+        googleplus_user = GooglePlusUser.objects.get(googleplus_id=profile['id'])
+    except GooglePlusUser.DoesNotExist:
+        first_name, last_name = _get_first_and_last_name(profile['displayName'])
+        user = User.objects.create( \
+            first_name=first_name,
+            last_name=last_name,
+            username='googleplus_' + profile['id']
+        )
+        user_is_created = True
+        
+    if user_is_created:
+        googleplus_user = GooglePlusUser()
+        googleplus_user.googleplus_id = profile['id']
+        googleplus_user.user = user
+    else:
+        first_name, last_name = _get_first_and_last_name(profile['displayName'])
+        googleplus_user.user.first_name = first_name
+        googleplus_user.last_name = last_name
+        
+    googleplus_user.googleplus_display_name = profile['displayName']
+    googleplus_user.access_token = access_token
+    googleplus_user.expiry_at = datetime.datetime.now() + \
+        datetime.timedelta(seconds=int(expires_in))    
+    googleplus_user.save()
+    
+    return googleplus_user
+
+def _get_first_and_last_name(display_name):
+    try:
+        first_name, last_name = display_name.strip().rsplit(' ', 1)
+    except ValueError:
+        first_name = display_name
+        last_name = ''
+    return first_name, last_name
diff --git a/settings.py b/settings.py
index 899bec0..67be327 100644
--- a/settings.py
+++ b/settings.py
@@ -123,6 +123,7 @@
     # 'django.contrib.admindocs',
     'account',
     'facebook',
+    'googleplus',
 )
 
 # A sample logging configuration. The only tangible logging
@@ -158,11 +159,15 @@
 AUTHENTICATION_BACKENDS = (
     'django.contrib.auth.backends.ModelBackend',
     'facebook.backends.FacebookBackend',
+    'googleplus.backends.GooglePlusBackend',
 )
 
 LOGIN_URL = '/login/'
 LOGIN_REDIRECT_URL = '/'
 
-FACEBOOK_APP_ID = '222026897833284'
-FACEBOOK_APP_SECRET = '175712afcb64656ca488844202394e0b'
+FACEBOOK_APP_ID = ''
+FACEBOOK_APP_SECRET = ''
 FACEBOOK_APP_PERMISSIONS = ''
+
+GOOGLEPLUS_CLIENT_ID = ''
+GOOGLEPLUS_CLIENT_SECRET = ''
diff --git a/templates/account/index.html b/templates/account/index.html
index 5b9f5ee..14633a0 100644
--- a/templates/account/index.html
+++ b/templates/account/index.html
@@ -20,6 +20,7 @@ <h3>You are not authenticated. Login to proceed.</h3>
 	<div class="login">
 		<div class="login-option"><a href="{% url 'account.views.login_handler' %}">Usual Login</div>
 		<div class="login-option"><a href="{% url 'facebook.views.login_handler' %}">Login using Facebook</div>
+		<div class="login-option"><a href="{% url 'googleplus.views.login_handler' %}">Login with Google+</div>
 	</div>
 {% endif %}
 {% endblock content %}
\ No newline at end of file
diff --git a/urls.py b/urls.py
index 70602bd..5b40535 100644
--- a/urls.py
+++ b/urls.py
@@ -18,4 +18,5 @@
     url(r'^login/$', 'account.views.login_handler'),
     url(r'^logout/$', 'account.views.logout_handler'),
     url(r'^facebook/', include('facebook.urls')),
+    url(r'^googleplus/', include('googleplus.urls')),
 )