blob: 0f934157259ab4e60c359e831c45ee1f4d58f1d3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
# Copyright (c) 2016 Weitian LI <liweitianux@live.com>
# MIT license
"""
Base web request handler for other handlers
"""
import tornado.web
from tornado.options import options
class BaseRequestHandler(tornado.web.RequestHandler):
"""
Base web request handler with user authentication support.
"""
def get(self):
"""
Show the original HTTP request. DEBUG use.
Credit: https://stackoverflow.com/a/3111656/4856091
"""
self.write(repr(self.request))
def get_current_user(self):
"""
Override the ``get_current_user()`` method to implement user
authentication.
Determine the current user based on the value of a cookie.
References
----------
- Tornado: Authentication and security
http://www.tornadoweb.org/en/stable/guide/security.html
"""
if (options.password is None) or (options.password == ""):
# Password not set, then all accesses are allowed
return True
else:
return self.get_secure_cookie("user")
|
