add federation

ephios/api/access/auth.py

@@ -14,7 +14,7 @@ def authenticate(self, request):
         if oauth_result is None:
             return None
         user, token = oauth_result
-        if not user.is_active:
+        if user is not None and not user.is_active:
             return None
         return user, token
 

ephios/api/templates/api/access_token_list.html

@@ -25,6 +25,10 @@ <h5 class="card-title">
                                 {{ token.application.name }}
                             </h5>
                             <p class="text-body-secondary">
+                                {# this belongs to the federation plugin, but we display the information here for better understanding #}
+                                {% if token.application.federatedhost %}
+                                    {% translate "ephios instance" %}
+                                {% endif %}
                             </p>
                         </div>
                         <div class="col-12 col-lg">

ephios/api/templates/oauth2_provider/application_list.html

@@ -33,21 +33,29 @@ <h4>{% translate "OAuth2 applications" %}</h4>
                             <td>{{ application.created }}</td>
                             <td class="d-flex">
                                 <div>
-                                    <a class="btn btn-secondary"
-                                       href="{{ application.get_absolute_url }}">
-                                        <span class="fa fa-eye"></span>
-                                        <span class="d-none d-lg-inline">{% translate "View" %}</span>
-                                    </a>
-                                    <a class="btn btn-secondary ms-1"
-                                       href="{% url "api:settings-oauth-app-update" application.id %}">
-                                        <span class="fa fa-edit"></span>
-                                        <span class="d-none d-lg-inline">{% translate "Edit" %}</span>
-                                    </a>
-                                    <a class="btn btn-secondary ms-1"
-                                       href="{% url "api:settings-oauth-app-delete" application.id %}">
-                                        <span class="fa fa-trash-alt"></span>
-                                        <span class="d-none d-lg-inline">{% translate "Delete" %}</span>
-                                    </a>
+                                    {% if application.federatedhost %}
+                                        <a class="btn btn-secondary"
+                                           href="{% url "federation:settings" %}">
+                                            <span class="fa fa-cog"></span>
+                                            <span class="d-none d-lg-inline">{% translate "Manage federation" %}</span>
+                                        </a>
+                                    {% else %}
+                                        <a class="btn btn-secondary"
+                                           href="{{ application.get_absolute_url }}">
+                                            <span class="fa fa-eye"></span>
+                                            <span class="d-none d-lg-inline">{% translate "View" %}</span>
+                                        </a>
+                                        <a class="btn btn-secondary ms-1"
+                                           href="{% url "api:settings-oauth-app-update" application.id %}">
+                                            <span class="fa fa-edit"></span>
+                                            <span class="d-none d-lg-inline">{% translate "Edit" %}</span>
+                                        </a>
+                                        <a class="btn btn-secondary ms-1"
+                                           href="{% url "api:settings-oauth-app-delete" application.id %}">
+                                            <span class="fa fa-trash-alt"></span>
+                                            <span class="d-none d-lg-inline">{% translate "Delete" %}</span>
+                                        </a>
+                                    {% endif %}
                                 </div>
                             </td>
                         </tr>

ephios/api/templates/oauth2_provider/authorize.html

@@ -4,7 +4,11 @@
 {% block content %}
     {% if not error %}
         <form id="authorizationForm" method="post">
-            <h3 class="block-center-heading">{% translate "Authorize" %} {{ application.name }}?</h3>
+            <h3 class="block-center-heading">
+                {% blocktranslate trimmed with app_name=application.name %}
+                    Authorize {{ app_name }}?
+                {% endblocktranslate %}
+            </h3>
             {% csrf_token %}
 
                 {# pass query params through the submit process for saving #}

ephios/api/urls.py

@@ -13,13 +13,15 @@
     ApplicationDelete,
 )
 from ephios.api.views.events import EventViewSet
+from ephios.api.views.users import UserProfileMeView
 from ephios.extra.permissions import staff_required
 
 router = routers.DefaultRouter()
 router.register(r"events", EventViewSet)
 
 app_name = "api"
 urlpatterns = [
+    path("users/me/", UserProfileMeView.as_view(), name="user-profile-me"),
     path(
         "settings/",
         include(

ephios/api/views/users.py

@@ -0,0 +1,64 @@
+from django.db.models import Q
+from django.utils import timezone
+from oauth2_provider.contrib.rest_framework import IsAuthenticatedOrTokenHasScope
+from rest_framework.exceptions import PermissionDenied
+from rest_framework.fields import SerializerMethodField
+from rest_framework.generics import RetrieveAPIView
+from rest_framework.relations import SlugRelatedField
+from rest_framework.serializers import ModelSerializer
+
+from ephios.core.models import Qualification, UserProfile
+
+
+class QualificationSerializer(ModelSerializer):
+    category = SlugRelatedField(slug_field="uuid", read_only=True)
+    includes = SerializerMethodField()
+
+    class Meta:
+        model = Qualification
+        fields = [
+            "uuid",
+            "title",
+            "abbreviation",
+            "category",
+            "includes",
+        ]
+
+    def get_includes(self, obj):
+        qualifications = Qualification.collect_all_included_qualifications(obj.includes.all())
+        return [q.uuid for q in qualifications]
+
+
+class UserProfileSerializer(ModelSerializer):
+    qualifications = SerializerMethodField()
+
+    class Meta:
+        model = UserProfile
+        fields = [
+            "first_name",
+            "last_name",
+            "date_of_birth",
+            "email",
+            "qualifications",
+        ]
+
+    def get_qualifications(self, obj):
+        return QualificationSerializer(
+            Qualification.objects.filter(
+                Q(grants__user=obj)
+                & (Q(grants__expires__gte=timezone.now()) | Q(grants__expires__isnull=True))
+            ),
+            many=True,
+        ).data
+
+
+class UserProfileMeView(RetrieveAPIView):
+    serializer_class = UserProfileSerializer
+    queryset = UserProfile.objects.all()
+    permission_classes = [IsAuthenticatedOrTokenHasScope]
+    required_scopes = ["ME_READ"]
+
+    def get_object(self):
+        if self.request.user is None:
+            raise PermissionDenied()
+        return self.request.user

ephios/core/context.py

@@ -1,5 +1,6 @@
 from django.conf import settings
 from django.utils.translation import get_language
+from dynamic_preferences.registries import global_preferences_registry
 
 from ephios.core.models import AbstractParticipation
 from ephios.core.signals import footer_link, nav_link
@@ -22,4 +23,5 @@ def ephios_base_context(request):
         "LANGUAGE_CODE": get_language(),
         "ephios_version": settings.EPHIOS_VERSION,
         "PWA_APP_ICONS": settings.PWA_APP_ICONS,
+        "organization_name": global_preferences_registry.manager()["general__organization_name"],
     }