from zope.interface import implementer

from pyramid.settings import asbool

from pyramid_multiauth import MultiAuthenticationPolicy

from pyramid.interfaces import IAuthenticationPolicy

@implementer(IAuthenticationPolicy)

class UpdateLoginTimeAuthenticationPolicy(object):

    The update is done in the 'remember' method, which is called by the login

    views login,

    def authenticated_userid(self, request):

        pass

    def effective_principals(self, request):

        return ()

        return ()

    def forget(self, request):

        return ()

    settings = config.registry.settings

    policies = []

    if asbool(settings.get('cubicweb.auth.update_login_time', True)):

        policies.append(UpdateLoginTimeAuthenticationPolicy())

    if asbool(settings.get('cubicweb.auth.authtkt', True)):

        secret = config.registry['cubicweb.config']['pyramid-auth-secret']

        if not secret:

            secret = 'notsosecret'

            warnings.warn('''

                !! WARNING !! !! WARNING !!

                The authentication cookies are signed with a static secret key.

                To put your own secret key, edit your all-in-one.conf file

                and set the 'pyramid-auth-secret' key.

                YOU SHOULD STOP THIS INSTANCE unless your really know what you

                are doing !!

            ''')

        policies.append(

            AuthTktAuthenticationPolicy(

                secret, hashalg='sha512', reissue_time=3600))

    kw = {}

    if asbool(settings.get('cubicweb.auth.groups_principals', True)):

        kw['callback'] = get_principals

    authpolicy = MultiAuthenticationPolicy(policies, **kw)

    config.registry['cubicweb.authpolicy'] = authpolicy

    config.set_authentication_policy(authpolicy)