[Rietveld] Allow whitelisted email accounts to access Rietveld.

appengine/chromium_rietveld/codereview/views.py

 # Copyright 2008 Google Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 #     http://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
@@ skipping 529 matching lines @@
   client_id = forms.CharField(
     help_text='Enter a single service account Client ID.',
     widget=forms.TextInput(attrs={'size': '100'}))
   client_secret = forms.CharField(
     required=False,
     widget=forms.TextInput(attrs={'size': '100'}))
   additional_client_ids = StringListField(
     required=False,
     help_text='Enter a comma-separated list of Client IDs.',
     widget=forms.TextInput(attrs={'size': '100'}))
+  whitelisted_emails = StringListField(
+    required=False,
+    help_text='Enter a comma-separated list of email addresses to whitelist.',
+    widget=forms.TextInput(attrs={'size': '100'}))
 
 class UpdateStatsForm(forms.Form):
   tasks_to_trigger = forms.CharField(
       required=True, max_length=2000,
       help_text='Coma separated items.',
       widget=forms.TextInput(attrs={'size': '100'}))
 
 
 ### Exceptions ###
 
@@ skipping 3865 matching lines @@
   from other modules.
 
   Args:
     django_request: Django HttpRequest object, The request.
 
   Returns:
     oauth2client.client.OAuth2WebServerFlow object.
   """
   redirect_path = reverse(oauth2callback)
   redirect_uri = django_request.build_absolute_uri(redirect_path)
-  client_id, client_secret, _ = auth_utils.SecretKey.get_config()
+  client_id, client_secret, _, _ = auth_utils.SecretKey.get_config()
   return OAuth2WebServerFlow(client_id, client_secret, auth_utils.EMAIL_SCOPE,
                              redirect_uri=redirect_uri,
                              approval_prompt='force')
 
 
 def _validate_port(port_value):
   """Makes sure the port value is valid and can be used by a non-root user.
 
   Args:
     port_value: Integer or string version of integer.
@@ skipping 88 matching lines @@
 
   These values, from the Google APIs console, are required to validate
   OAuth 2.0 tokens within auth_utils.py.
   """
   if request.method == 'POST':
     form = ClientIDAndSecretForm(request.POST)
     if form.is_valid():
       client_id = form.cleaned_data['client_id']
       client_secret = form.cleaned_data['client_secret']
       additional_client_ids = form.cleaned_data['additional_client_ids']
+      whitelisted_emails = form.cleaned_data['whitelisted_emails']
       logging.info('Adding client_id: %s' % client_id)
       auth_utils.SecretKey.set_config(client_id, client_secret,
-                                      additional_client_ids)
+                                      additional_client_ids,
+                                      whitelisted_emails)
     else:
       logging.info('Form is invalid')
     return HttpResponseRedirect(reverse(set_client_id_and_secret))
   else:
-    client_id, client_secret, additional_client_ids = \
+    client_id, client_secret, additional_client_ids, whitelisted_emails = \
       auth_utils.SecretKey.get_config()
     form = ClientIDAndSecretForm(initial={
       'client_id': client_id,
       'client_secret': client_secret,
-      'additional_client_ids': additional_client_ids})
+      'additional_client_ids': additional_client_ids,
+      'whitelisted_emails': whitelisted_emails})
     return respond(request, 'set_client_id_and_secret.html', {'form': form})
 
 
 ### Statistics.
 
 
 DATE_FORMAT = '%Y-%m-%d'
 
 
 def update_stats(request):
@@ skipping 993 matching lines @@
     return HttpResponseNotFound()
   tops = []
   shame = []
   for i in data:
     if i.score == models.AccountStatsBase.NULL_SCORE:
       shame.append(i)
     else:
       tops.append(i)
   return respond(
       request, 'leaderboard.html', {'tops': tops, 'shame': shame, 'when': when})