音楽で楽しみましょう！-Let's have fun with music!-

Signed-off-by: Shin'ya Minazuki <shinyoukai@laidback.moe>

api/funquail_api/users/auth_backends.py

@@ -0,0 +1,54 @@
+from allauth.account import auth_backends
+from django.contrib.auth import backends, get_user_model
+
+from funkwhale_api.common import authentication
+
+
+# ugly but allauth doesn't offer an easy way to override the querysets
+# used to retrieve users, so we monkey patch
+def decorate_for_auth(func):
+    def inner(*args, **kwargs):
+        qs = func(*args, **kwargs)
+        try:
+            return qs.for_auth()
+        except AttributeError:
+            return (
+                get_user_model()
+                .objects.all()
+                .for_auth()
+                .filter(pk__in=[u.pk for u in qs])
+            )
+
+    return inner
+
+
+auth_backends.filter_users_by_email = decorate_for_auth(
+    auth_backends.filter_users_by_email
+)
+auth_backends.filter_users_by_username = decorate_for_auth(
+    auth_backends.filter_users_by_username
+)
+
+
+class ModelBackend(backends.ModelBackend):
+    def get_user(self, user_id):
+        """
+        Select related to avoid two additional queries
+        """
+        try:
+            user = get_user_model().objects.all().for_auth().get(pk=user_id)
+        except get_user_model().DoesNotExist:
+            return None
+
+        return user if self.user_can_authenticate(user) else None
+
+    def user_can_authenticate(self, user):
+        can_authenticate = super().user_can_authenticate(user)
+        if user.should_verify_email():
+            raise authentication.UnverifiedEmail(user)
+
+        return can_authenticate
+
+
+class AllAuthBackend(auth_backends.AuthenticationBackend, ModelBackend):
+    pass