Django RestFramework OAuth2 - Tirrilee/TechTalk GitHub Wiki

INSTALLED_APPS = (
    ...
    # OAuth
    'oauth2_provider',
    'social_django',
    'rest_framework_social_oauth2',
)

REST_FRAMEWORK = {
    ...
    'DEFAULT_AUTHENTICATION_CLASSES': (
        ...
        # OAuth
        # 'oauth2_provider.ext.rest_framework.OAuth2Authentication',  # django-oauth-toolkit < 1.0.0
        'oauth2_provider.contrib.rest_framework.OAuth2Authentication',  # django-oauth-toolkit >= 1.0.0
        'rest_framework_social_oauth2.authentication.SocialAuthentication',
    )
}

REST_FRAMEWORK = {
    ...
    'DEFAULT_AUTHENTICATION_CLASSES': (
        ...
        # OAuth
        'oauth2_provider.contrib.rest_framework.OAuth2Authentication',  # django-oauth-toolkit >= 1.0.0
        'rest_framework_social_oauth2.authentication.SocialAuthentication',
    )
}

AUTHENTICATION_BACKENDS = (

    # Facebook OAuth2
    'social_core.backends.facebook.FacebookAppOAuth2',
    'social_core.backends.facebook.FacebookOAuth2',

    # django-rest-framework-social-oauth2
    'rest_framework_social_oauth2.backends.DjangoOAuth2',

    # Django
    'django.contrib.auth.backends.ModelBackend',
)

# Facebook configuration
SOCIAL_AUTH_FACEBOOK_KEY = '<your app id goes here>'
SOCIAL_AUTH_FACEBOOK_SECRET = '<your app secret goes here>'

# Define SOCIAL_AUTH_FACEBOOK_SCOPE to get extra permissions from facebook. 
# Email is not sent by default, to get it, you must request the email permission:
SOCIAL_AUTH_FACEBOOK_SCOPE = ['email']
SOCIAL_AUTH_FACEBOOK_PROFILE_EXTRA_PARAMS = {
    'fields': 'id, name, email'
}

AUTHENTICATION_BACKENDS = (
    # KAKAO OAuth2
    'social_core.backends.kakao.KakaoOAuth2',
)

# Kakao configuration
SOCIAL_AUTH_KAKAO_KEY = '<your kakao key goes here>'
SOCIAL_AUTH_KAKAO_SCOPE = ['email']

SOCIAL_AUTH_PIPELINE = (
    # user에 대해서 얻을 수 있는 정보와, 이후에 user instance를 생성할 수 있는 간단한 format
    'social_core.pipeline.social_auth.social_details',

    # 우리가 권한을 준 어떤 서비스로부터 얻은 social uid
    'social_core.pipeline.social_auth.social_uid',

    # 현재 auth process의 validation을 확인
    # email이나 domain이 whitelists에 적용이 되는지 등 
    'social_core.pipeline.social_auth.auth_allowed',

    # social-account가 이미 site에 속해있는지 여부를 체크
    'social_core.pipeline.social_auth.social_user',

    # username을 만들고 마지막에 random string을 붙임 (충돌이 있을 때)
    'social_core.pipeline.user.get_username',

    # email address를 확인하기 위해 validation email을 보냄
    # 'social_core.pipeline.mail.mail_validation',

    # 현재 할당된 social detail에 비슷한 이메일을 가진 다른 사용자를 추가
    # 'social_core.pipeline.social_auth.associate_by_email',

    # 사용자를 찾지 못했다면 User 생성
    'social_core.pipeline.user.create_user',

    # 중간에 Profile을 등록해야하기 때문에 
    'profiles.pipeline.create_profile', # 새로 만들어서 등록한 pipeline

    # social account에 할당된 record 생성
    'social_core.pipeline.social_auth.associate_user',

    # social record 에서 할당된 값과 함께 extra_data field를 덧붙임
    'social_core.pipeline.social_auth.load_extra_data',

    # auth service에서 바뀐 데이터 정보를 업데이트
    'social_core.pipeline.user.user_details',
)

from urllib.request import urlopen
from django.core.files.base import ContentFile
from django.contrib.auth.models import User
from profiles.models import Profile

def create_profile(backend, user, response, *args, **kwargs):
    profile = Profile(user=user) if kwargs['is_new'] else Profile.objects.get(user__username=user.username)
    if backend.name == 'facebook':
        profile.email = response.get('email', '')
    elif backend.name == 'kakao':
        properties = response.get('properties', '')
        if properties != '':
            profile.nick_name = properties.nickname
    else:
        return 0
    profile.save()

urlpatterns = [
    path('auth/', include('rest_framework_social_oauth2.urls')),
]