Skip to content

json_views

django_spire.auth.sms.views.json_views

session_code_view

Source code in django_spire/auth/sms/views/json_views.py 
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
@login_required()
@valid_ajax_request_required
def session_code_view(request: WSGIRequest) -> JsonResponse:
    body = json.loads(request.body.decode('utf-8'))
    phone_number_raw = body.get('phone_number', '')
    phone_number_normalized = phone_number_normalize(phone_number_raw)

    if phone_number_normalized is None:
        return error_json_response('That phone number is not valid. Please check it and try again.')

    auth_sms = (
        AuthSms.objects
        .is_verified()
        .by_phone_number(phone_number_normalized)
        .by_user(request.user)
        .first()
    )

    if auth_sms is None:
        return error_json_response('We could not find a verified phone number for your account.')

    return JsonResponse(
        {
            'code': auth_sms.services.processor.issue_code(AuthSmsCodePurposeChoices.SESSION),
            'expiry_minutes': settings.DJANGO_SPIRE_AUTH_SMS_CODE_EXPIRY_MINUTES,
        }
    )

verification_confirm_view

Source code in django_spire/auth/sms/views/json_views.py 
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
@login_required()
@valid_ajax_request_required
def verification_confirm_view(request: WSGIRequest) -> JsonResponse:
    body = json.loads(request.body.decode('utf-8'))
    phone_number_raw = body.get('phone_number', '')
    code = body.get('code', '')

    phone_number_normalized = phone_number_normalize(phone_number_raw)

    if phone_number_normalized is None:
        return error_json_response('That phone number is not valid. Please check it and try again.')

    auth_sms = (
        AuthSms.objects
        .by_phone_number(phone_number=phone_number_normalized)
        .by_user(user=request.user)
        .first()
    )

    if auth_sms is None:
        return error_json_response(
            'We could not find a verification request for that phone number.'
        )

    code_valid = auth_sms.services.processor.confirm_code(
        code,
        AuthSmsCodePurposeChoices.VERIFICATION
    )

    if not code_valid:
        return error_json_response('That code is not valid or has expired. Please try again.')

    auth_sms.services.processor.mark_verified()

    return success_json_response('Your phone number has been verified.')

verification_start_view

Source code in django_spire/auth/sms/views/json_views.py 
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
@login_required()
@valid_ajax_request_required
def verification_start_view(request: WSGIRequest) -> JsonResponse:
    account_sid = settings.TWILIO_ACCOUNT_SID
    auth_token = settings.TWILIO_AUTH_TOKEN
    from_phone_number = settings.TWILIO_PHONE_NUMBER

    if not account_sid or not auth_token or not from_phone_number:
        return error_json_response(
            'Text message sending is not configured. Please try again later.'
        )

    body = json.loads(request.body.decode('utf-8'))
    phone_number_raw = body.get('phone_number', '')
    phone_number_normalized = phone_number_normalize(phone_number_raw)

    if phone_number_normalized is None:
        return error_json_response('That phone number is not valid. Please check it and try again.')

    auth_sms = AuthSms.objects.by_phone_number(phone_number=phone_number_normalized).first()

    if auth_sms is not None and auth_sms.user_id != request.user.id:
        return error_json_response('That phone number is already in use by another account.')

    if auth_sms is None:
        auth_sms = AuthSms.objects.create(user=request.user, phone_number=phone_number_normalized)

    auth_sms.record_attempt()

    if auth_sms.is_throttled():
        return error_json_response(
            'You have requested too many codes. Please wait a moment and try again.'
        )

    code = auth_sms.services.processor.issue_code(AuthSmsCodePurposeChoices.VERIFICATION)
    expiry_minutes = settings.DJANGO_SPIRE_AUTH_SMS_CODE_EXPIRY_MINUTES

    twilio_client = Client(account_sid, auth_token)

    twilio_client.messages.create(
        to=phone_number_normalized,
        from_=from_phone_number,
        body=f'Your verification code is {code}. It expires in {expiry_minutes} minutes.',
    )

    return success_json_response('Your verification code has been sent.')