generated from westfarn/web_django_template
westfarn
03950fc9ba
CI / test (pull_request) Successful in 39s
Buyers can recover locked accounts, and seed_demo now walks the shopper path without live Stripe or EasyPost calls.
28 lines
905 B
Python
28 lines
905 B
Python
from django.shortcuts import redirect
|
|
|
|
|
|
class PortalStaffMiddleware:
|
|
"""Keep customer accounts out of the staff portal. Webhooks stay public."""
|
|
|
|
PORTAL_PREFIX = "/portal/"
|
|
WEBHOOK_INFIX = "/webhooks/"
|
|
|
|
def __init__(self, get_response):
|
|
self.get_response = get_response
|
|
|
|
def __call__(self, request):
|
|
path = request.path
|
|
if path.startswith(self.PORTAL_PREFIX) and self.WEBHOOK_INFIX not in path:
|
|
user = getattr(request, "user", None)
|
|
if (
|
|
user is not None
|
|
and getattr(user, "is_authenticated", False)
|
|
and not getattr(user, "is_staff", False)
|
|
):
|
|
from django.apps import apps
|
|
|
|
if apps.is_installed("shop"):
|
|
return redirect("account:home")
|
|
return redirect("public:home")
|
|
return self.get_response(request)
|