]> git.openstreetmap.org Git - osqa.git/blobdiff - forum/views/auth.py
Further fixes for subfolder hosting
[osqa.git] / forum / views / auth.py
old mode 100755 (executable)
new mode 100644 (file)
index 2e95316..00b67dc
-from django.shortcuts import render_to_response\r
-from django.template import RequestContext\r
-from django.core.urlresolvers import reverse\r
-from django.contrib.auth.models import User\r
-from django.http import HttpResponseRedirect\r
-from django.utils.safestring import mark_safe\r
-from django.utils.translation import ugettext as _\r
-from django.contrib.auth.decorators import login_required\r
-from django.contrib.auth import login,  logout\r
-from django.http import get_host\r
-import types\r
-\r
-from forum.models import AuthKeyUserAssociation\r
-from forum.authentication.forms import SimpleRegistrationForm, SimpleEmailSubscribeForm\r
-\r
-from forum.authentication.base import InvalidAuthentication\r
-from forum.authentication import AUTH_PROVIDERS\r
-\r
-from forum.models import Question, Answer\r
-\r
-def signin_page(request, action=None):\r
-    if action is None:\r
-        request.session['on_signin_url'] = request.META.get('HTTP_REFERER', '/')\r
-    else:\r
-        request.session['on_signin_action'] = action\r
-\r
-    all_providers = [provider.context for provider in AUTH_PROVIDERS.values()]\r
-\r
-    sort = lambda c1, c2: c1.weight - c2.weight\r
-    can_show = lambda c: not request.user.is_authenticated() or c.show_to_logged_in_user\r
-\r
-    bigicon_providers = sorted([\r
-        context for context in all_providers if context.mode == 'BIGICON' and can_show(context)\r
-    ], sort)\r
-\r
-    smallicon_providers = sorted([\r
-        context for context in all_providers if context.mode == 'SMALLICON' and can_show(context)\r
-    ], sort)\r
-\r
-    stackitem_providers = sorted([\r
-        context for context in all_providers if context.mode == 'STACK_ITEM' and can_show(context)\r
-    ], sort)\r
-\r
-    try:\r
-        msg = request.session['auth_error']\r
-        del request.session['auth_error']\r
-    except:\r
-        msg = None\r
-\r
-    return render_to_response(\r
-            'auth/signin.html',\r
-            {\r
-                'msg': msg,\r
-                'all_providers': all_providers,\r
-                'bigicon_providers': bigicon_providers,\r
-                'stackitem_providers': stackitem_providers,\r
-                'smallicon_providers': smallicon_providers,\r
-            },\r
-            RequestContext(request))\r
-\r
-def prepare_provider_signin(request, provider):\r
-    force_email_request = request.REQUEST.get('validate_email', 'yes') == 'yes'\r
-    request.session['force_email_request'] = force_email_request\r
-    \r
-    if provider in AUTH_PROVIDERS:\r
-        provider_class = AUTH_PROVIDERS[provider].consumer\r
-\r
-        try:\r
-            request_url = provider_class.prepare_authentication_request(request,\r
-                    reverse('auth_provider_done', kwargs={'provider': provider}))\r
-\r
-            return HttpResponseRedirect(request_url)\r
-        except NotImplementedError, e:\r
-            return process_provider_signin(request, provider)\r
-        except InvalidAuthentication, e:\r
-            request.session['auth_error'] = e.message\r
-\r
-        return HttpResponseRedirect(reverse('auth_signin'))    \r
-\r
-\r
-def process_provider_signin(request, provider):\r
-    if provider in AUTH_PROVIDERS:\r
-        provider_class = AUTH_PROVIDERS[provider].consumer\r
-\r
-        try:\r
-            assoc_key = provider_class.process_authentication_request(request)\r
-        except InvalidAuthentication, e:\r
-            request.session['auth_error'] = e.message\r
-            return HttpResponseRedirect(reverse('auth_signin'))\r
-\r
-        if request.user.is_authenticated():\r
-            if isinstance(assoc_key, (type, User)):\r
-                if request.user != assoc_key:\r
-                    request.session['auth_error'] = _("Sorry, these login credentials belong to anoother user. Plese terminate your current session and try again.")\r
-                else:\r
-                    request.session['auth_error'] = _("You are already logged in with that user.")\r
-            else:\r
-                try:\r
-                    assoc = AuthKeyUserAssociation.objects.get(key=assoc_key)\r
-                    if assoc.user == request.user:\r
-                        request.session['auth_error'] = _("These login credentials are already associated with your account.")\r
-                    else:\r
-                        request.session['auth_error'] = _("Sorry, these login credentials belong to anoother user. Plese terminate your current session and try again.")\r
-                except:\r
-                    uassoc = AuthKeyUserAssociation(user=request.user, key=assoc_key, provider=provider)\r
-                    uassoc.save()\r
-                    request.session['auth_error'] = _("These new credentials are now associated with your account.")                    \r
-            return HttpResponseRedirect(reverse('auth_signin'))\r
-\r
-        try:\r
-            assoc = AuthKeyUserAssociation.objects.get(key=assoc_key)\r
-            user_ = assoc.user\r
-            return login_and_forward(request, user_)\r
-        except:\r
-            request.session['assoc_key'] = assoc_key\r
-            request.session['auth_provider'] = provider\r
-            return HttpResponseRedirect(reverse('auth_external_register'))\r
-\r
-    return HttpResponseRedirect(reverse('auth_signin'))\r
-\r
-def external_register(request):\r
-    if request.method == 'POST' and 'bnewaccount' in request.POST:\r
-        form1 = SimpleRegistrationForm(request.POST)\r
-        email_feeds_form = SimpleEmailSubscribeForm(request.POST)\r
-\r
-        if (form1.is_valid() and email_feeds_form.is_valid()):\r
-            tmp_pwd = User.objects.make_random_password()\r
-            user_ = User.objects.create_user(form1.cleaned_data['username'],\r
-                     form1.cleaned_data['email'], tmp_pwd)\r
-\r
-            user_.set_unusable_password()\r
-\r
-            uassoc = AuthKeyUserAssociation(user=user_, key=request.session['assoc_key'], provider=request.session['auth_provider'])\r
-            uassoc.save()\r
-\r
-            email_feeds_form.save(user_)\r
-\r
-            del request.session['assoc_key']\r
-            del request.session['auth_provider']\r
-            return login_and_forward(request, user_)\r
-    else:\r
-        provider_class = AUTH_PROVIDERS[request.session['auth_provider']].consumer\r
-        user_data = provider_class.get_user_data(request.session['assoc_key'])\r
-\r
-        username = user_data.get('username', '')\r
-        email = user_data.get('email', '')\r
-\r
-        if not email:\r
-            email = request.session.get('auth_email_request', '')\r
-\r
-        form1 = SimpleRegistrationForm(initial={\r
-            'next': '/',\r
-            'username': username,\r
-            'email': email,\r
-        })\r
-        email_feeds_form = SimpleEmailSubscribeForm()\r
-\r
-    provider_context = AUTH_PROVIDERS[request.session['auth_provider']].context\r
-\r
-    return render_to_response('auth/complete.html', {\r
-        'form1': form1,\r
-        'email_feeds_form': email_feeds_form,\r
-        'provider':mark_safe(provider_context.human_name),\r
-        'login_type':provider_context.id,\r
-        'gravatar_faq_url':reverse('faq') + '#gravatar',\r
-    }, context_instance=RequestContext(request))\r
-\r
-def newquestion_signin_action(user):\r
-    question = Question.objects.filter(author=user).order_by('-added_at')[0]\r
-    return question.get_absolute_url()\r
-\r
-def newanswer_signin_action(user):\r
-    answer = Answer.objects.filter(author=user).order_by('-added_at')[0]\r
-    return answer.get_absolute_url()\r
-\r
-POST_SIGNIN_ACTIONS = {\r
-    'newquestion': newquestion_signin_action,\r
-    'newanswer': newanswer_signin_action,\r
-}\r
-\r
-def login_and_forward(request,  user):\r
-    old_session = request.session.session_key\r
-    user.backend = "django.contrib.auth.backends.ModelBackend"\r
-    login(request,  user)\r
-\r
-    from forum.models import user_logged_in\r
-    user_logged_in.send(user=user,session_key=old_session,sender=None)\r
-\r
-    redirect = request.session.get('on_signin_url', None)\r
-\r
-    if not redirect:\r
-        signin_action = request.session.get('on_signin_action', None)\r
-        if not signin_action:\r
-            redirect = reverse('index')\r
-        else:\r
-            try:\r
-                redirect = POST_SIGNIN_ACTIONS[signin_action](user)\r
-            except:\r
-                redirect = reverse('index')\r
-\r
-    return HttpResponseRedirect(redirect)\r
-\r
-@login_required\r
-def signout(request):\r
-    """\r
-    signout from the website. Remove openid from session and kill it.\r
-\r
-    url : /signout/"\r
-    """\r
-\r
-    logout(request)\r
-    return HttpResponseRedirect(reverse('index'))
\ No newline at end of file
+# -*- coding: utf-8 -*-
+
+import datetime
+import logging
+import urllib
+from urlparse import urlparse
+
+from django.shortcuts import render_to_response, get_object_or_404
+from django.template import RequestContext
+from django.core.urlresolvers import reverse
+from django.http import HttpResponseRedirect, Http404
+from django.utils.safestring import mark_safe
+from django.utils.translation import ugettext as _
+from django.utils.encoding import smart_unicode
+from django.contrib.auth import login, logout
+
+from django.contrib import messages
+
+from writers import manage_pending_data
+
+from forum.actions import EmailValidationAction
+from forum.utils import html
+from forum.views.decorators import login_required
+from forum.modules import decorate
+from forum.forms import SimpleRegistrationForm, TemporaryLoginRequestForm, ChangePasswordForm, SetPasswordForm
+from forum.http_responses import HttpResponseUnauthorized
+from forum.utils.mail import send_template_email
+from forum.authentication.base import InvalidAuthentication
+from forum.authentication import AUTH_PROVIDERS
+from forum.models import User, AuthKeyUserAssociation, ValidationHash
+from forum.actions import UserJoinsAction, UserLoginAction
+from forum import settings
+
+from vars import ON_SIGNIN_SESSION_ATTR, PENDING_SUBMISSION_SESSION_ATTR
+
+def signin_page(request):
+    referer = request.META.get('HTTP_REFERER', '/')
+
+    # If the referer is equal to the sign up page, e. g. if the previous login attempt was not successful we do not
+    # change the sign in URL. The user should go to the same page.
+    if not referer.replace(settings.APP_URL, '') == reverse('auth_signin'):
+        request.session[ON_SIGNIN_SESSION_ATTR] = referer
+
+    all_providers = [provider.context for provider in AUTH_PROVIDERS.values() if provider.context]
+
+    sort = lambda c1, c2: c1.weight - c2.weight
+    can_show = lambda c: not request.user.is_authenticated() or c.show_to_logged_in_user
+
+    bigicon_providers = sorted([
+    context for context in all_providers if context.mode == 'BIGICON' and can_show(context)
+    ], sort)
+
+    smallicon_providers = sorted([
+    context for context in all_providers if context.mode == 'SMALLICON' and can_show(context)
+    ], sort)
+
+    top_stackitem_providers = sorted([
+    context for context in all_providers if context.mode == 'TOP_STACK_ITEM' and can_show(context)
+    ], sort)
+
+    stackitem_providers = sorted([
+    context for context in all_providers if context.mode == 'STACK_ITEM' and can_show(context)
+    ], sort)
+
+    try:
+        msg = request.session['auth_error']
+        del request.session['auth_error']
+    except:
+        msg = None
+
+    return render_to_response(
+            'auth/signin.html',
+            {
+            'msg': msg,
+            'all_providers': all_providers,
+            'bigicon_providers': bigicon_providers,
+            'top_stackitem_providers': top_stackitem_providers,
+            'stackitem_providers': stackitem_providers,
+            'smallicon_providers': smallicon_providers,
+            },
+            RequestContext(request))
+
+def prepare_provider_signin(request, provider):
+    force_email_request = request.REQUEST.get('validate_email', 'yes') == 'yes'
+    request.session['force_email_request'] = force_email_request
+
+    if provider in AUTH_PROVIDERS:
+        provider_class = AUTH_PROVIDERS[provider].consumer
+
+        try:
+            request_url = provider_class.prepare_authentication_request(request,
+                                                                        reverse('auth_provider_done', prefix='/',
+                                                                                kwargs={'provider': provider}))
+
+            return HttpResponseRedirect(request_url)
+        except NotImplementedError, e:
+            return process_provider_signin(request, provider)
+        except InvalidAuthentication, e:
+            request.session['auth_error'] = e.message
+
+        return HttpResponseRedirect(reverse('auth_signin'))
+    else:
+        raise Http404()
+
+
+def process_provider_signin(request, provider):
+    if provider in AUTH_PROVIDERS:
+        provider_class = AUTH_PROVIDERS[provider].consumer
+
+        try:
+            assoc_key = provider_class.process_authentication_request(request)
+        except InvalidAuthentication, e:
+            request.session['auth_error'] = e.message
+            return HttpResponseRedirect(reverse('auth_signin'))
+
+        if request.user.is_authenticated():
+            if isinstance(assoc_key, (type, User)):
+                if request.user != assoc_key:
+                    request.session['auth_error'] = _(
+                            "Sorry, these login credentials belong to anoother user. Plese terminate your current session and try again."
+                            )
+                else:
+                    request.session['auth_error'] = _("You are already logged in with that user.")
+            else:
+                try:
+                    assoc = AuthKeyUserAssociation.objects.get(key=assoc_key)
+                    if assoc.user == request.user:
+                        request.session['auth_error'] = _(
+                                "These login credentials are already associated with your account.")
+                    else:
+                        request.session['auth_error'] = _(
+                                "Sorry, these login credentials belong to anoother user. Plese terminate your current session and try again."
+                                )
+                except:
+                    uassoc = AuthKeyUserAssociation(user=request.user, key=assoc_key, provider=provider)
+                    uassoc.save()
+                    messages.info(request, _('The new credentials are now associated with your account'))
+                    return HttpResponseRedirect(reverse('user_authsettings', args=[request.user.id]))
+
+            return HttpResponseRedirect(reverse('auth_signin'))
+        else:
+            if isinstance(assoc_key, User):
+                return login_and_forward(request, assoc_key)
+
+        try:
+            assoc = AuthKeyUserAssociation.objects.get(key=assoc_key)
+            user_ = assoc.user
+            return login_and_forward(request, user_)
+        except AuthKeyUserAssociation.DoesNotExist:
+            request.session['assoc_key'] = assoc_key
+            request.session['auth_provider'] = provider
+            return HttpResponseRedirect(reverse('auth_external_register'))
+
+    return HttpResponseRedirect(reverse('auth_signin'))
+
+def external_register(request):
+    if request.method == 'POST' and 'bnewaccount' in request.POST:
+        form1 = SimpleRegistrationForm(request.POST)
+
+        if form1.is_valid():
+            user_ = User(username=form1.cleaned_data['username'], email=form1.cleaned_data['email'], real_name=form1.cleaned_data['real_name'])
+            user_.email_isvalid = request.session.get('auth_validated_email', '') == form1.cleaned_data['email']
+            user_.set_unusable_password()
+
+            if User.objects.all().count() == 0:
+                user_.is_superuser = True
+                user_.is_staff = True
+
+            user_.save()
+            UserJoinsAction(user=user_, ip=request.META['REMOTE_ADDR']).save()
+
+            try:
+                assoc_key = request.session['assoc_key']
+                auth_provider = request.session['auth_provider']
+            except:
+                request.session['auth_error'] = _(
+                        "Oops, something went wrong in the middle of this process. Please try again. Note that you need to have cookies enabled for the authentication to work."
+                        )
+                logging.error("Missing session data when trying to complete user registration: %s" % ", ".join(
+                        ["%s: %s" % (k, v) for k, v in request.META.items()]))
+                return HttpResponseRedirect(reverse('auth_signin'))
+
+            uassoc = AuthKeyUserAssociation(user=user_, key=assoc_key, provider=auth_provider)
+            uassoc.save()
+
+            del request.session['assoc_key']
+            del request.session['auth_provider']
+
+            return login_and_forward(request, user_, message=_("A welcome email has been sent to your email address. "))
+    else:
+        auth_provider = request.session.get('auth_provider', None)
+        if not auth_provider:
+            request.session['auth_error'] = _(
+                    "Oops, something went wrong in the middle of this process. Please try again.")
+            logging.error("Missing session data when trying to complete user registration: %s" % ", ".join(
+                    ["%s: %s" % (k, v) for k, v in request.META.items()]))
+            return HttpResponseRedirect(reverse('auth_signin'))
+
+        provider_class = AUTH_PROVIDERS[auth_provider].consumer
+
+        if provider_class.__class__.__name__ == 'FacebookAuthConsumer':
+            user_data = provider_class.get_user_data(request.session['access_token'])
+        else:
+            user_data = provider_class.get_user_data(request.session['assoc_key'])
+
+
+        if not user_data:
+            user_data = request.session.get('auth_consumer_data', {})
+
+        username = user_data.get('username', '')
+        email = user_data.get('email', '')
+        real_name = user_data.get('real_name', '')
+
+        if email:
+            request.session['auth_validated_email'] = email
+
+        form1 = SimpleRegistrationForm(initial={
+        'next': '/',
+        'username': username,
+        'email': email,
+        'real_name': real_name,
+        })
+
+    provider_context = AUTH_PROVIDERS[request.session['auth_provider']].context
+
+    return render_to_response('auth/complete.html', {
+    'form1': form1,
+    'provider':provider_context and mark_safe(provider_context.human_name) or _('unknown'),
+    'login_type':provider_context.id,
+    'gravatar_faq_url':reverse('faq') + '#gravatar',
+    }, context_instance=RequestContext(request))
+
+def request_temp_login(request):
+    if request.method == 'POST':
+        form = TemporaryLoginRequestForm(request.POST)
+
+        if form.is_valid():
+            users = form.user_cache
+
+            for u in users:
+                if u.is_suspended():
+                    return forward_suspended_user(request, u, False)
+
+            for u in users:
+                try:
+                    hash = get_object_or_404(ValidationHash, user=u, type='templogin')
+                    if hash.expiration < datetime.datetime.now():
+                        hash.delete()
+                        return request_temp_login(request)
+                except:
+                    hash = ValidationHash.objects.create_new(u, 'templogin', [u.id])
+
+                send_template_email([u], "auth/temp_login_email.html", {'temp_login_code': hash})
+
+                messages.info(request, _("An email has been sent with your temporary login key"))
+
+            return HttpResponseRedirect(reverse('index'))
+    else:
+        form = TemporaryLoginRequestForm()
+
+    return render_to_response(
+            'auth/temp_login_request.html', {'form': form},
+            context_instance=RequestContext(request))
+
+def temp_signin(request, user, code):
+    user = get_object_or_404(User, id=user)
+
+    if (ValidationHash.objects.validate(code, user, 'templogin', [user.id])):
+        
+        # If the user requests temp_signin he must have forgotten his password. So we mark it as unusable.
+        user.set_unusable_password()
+        user.save()
+        
+        return login_and_forward(request, user, reverse('user_authsettings', kwargs={'id': user.id}),
+                                 _(
+                                         "You are logged in with a temporary access key, please take the time to fix your issue with authentication."
+                                         ))
+    else:
+        raise Http404()
+
+def send_validation_email(request):
+    if not request.user.is_authenticated():
+        return HttpResponseUnauthorized(request)
+    else:
+        # We check if there are some old validation hashes. If there are -- we delete them.
+        try:
+            hash = ValidationHash.objects.get(user=request.user, type='email')
+            hash.delete()
+        except:
+            pass
+
+        # We don't care if there are previous cashes in the database... In every case we have to create a new one
+        hash = ValidationHash.objects.create_new(request.user, 'email', [request.user.email])
+
+        additional_get_params = urllib.urlencode(dict([k, v.encode('utf-8')] for k, v in request.GET.items()))
+        send_template_email([request.user], "auth/mail_validation.html", {
+            'validation_code': hash,
+            'additional_get_params' : additional_get_params
+        })
+
+        messages.info(request, _("A message with an email validation link was just sent to your address."))
+        return HttpResponseRedirect(request.META.get('HTTP_REFERER', '/'))
+
+        
+
+def validate_email(request, user, code):
+    user = get_object_or_404(User, id=user)
+
+    if (ValidationHash.objects.validate(code, user, 'email', [user.email])):
+        EmailValidationAction(user=user, ip=request.META['REMOTE_ADDR']).save()
+        return login_and_forward(request, user, reverse('index'), _("Thank you, your email is now validated."))
+    else:
+        return render_to_response('auth/mail_already_validated.html', { 'user' : user }, RequestContext(request))
+
+def auth_settings(request, id):
+    user_ = get_object_or_404(User, id=id)
+
+    if not (request.user.is_superuser or request.user == user_):
+        return HttpResponseUnauthorized(request)
+
+    auth_keys = user_.auth_keys.all()
+
+    if request.user.is_superuser or (not user_.has_usable_password()):
+        FormClass = SetPasswordForm
+    else:
+        FormClass = ChangePasswordForm
+
+    if request.POST:
+        form = FormClass(request.POST, user=user_)
+        if form.is_valid():
+            is_new_pass = not user_.has_usable_password()
+            user_.set_password(form.cleaned_data['password1'])
+            user_.save()
+
+            if is_new_pass:
+                messages.info(request, _("New password set"))
+                if not request.user.is_superuser:
+                    form = ChangePasswordForm(user=user_)
+            else:
+                messages.info(request, _("Your password was changed"))
+
+            return HttpResponseRedirect(reverse('user_authsettings', kwargs={'id': user_.id}))
+    else:
+        form = FormClass(user=user_)
+
+    auth_keys_list = []
+
+    for k in auth_keys:
+        provider = AUTH_PROVIDERS.get(k.provider, None)
+
+        if provider is not None:
+            name =  "%s: %s" % (provider.context.human_name, provider.context.readable_key(k))
+        else:
+            from forum.authentication.base import ConsumerTemplateContext
+            "unknown: %s" % ConsumerTemplateContext.readable_key(k)
+
+        auth_keys_list.append({
+        'name': name,
+        'id': k.id
+        })
+
+    return render_to_response('auth/auth_settings.html', {
+    'view_user': user_,
+    "can_view_private": (user_ == request.user) or request.user.is_superuser,
+    'form': form,
+    'has_password': user_.has_usable_password(),
+    'auth_keys': auth_keys_list,
+    'allow_local_auth': AUTH_PROVIDERS.get('local', None),
+    }, context_instance=RequestContext(request))
+
+def remove_external_provider(request, id):
+    association = get_object_or_404(AuthKeyUserAssociation, id=id)
+    if not (request.user.is_superuser or request.user == association.user):
+        return HttpResponseUnauthorized(request)
+
+    messages.info(request, _("You removed the association with %s") % association.provider)
+    association.delete()
+    return HttpResponseRedirect(reverse('user_authsettings', kwargs={'id': association.user.id}))
+
+def login_and_forward(request, user, forward=None, message=None):
+    if user.is_suspended():
+        return forward_suspended_user(request, user)
+
+    user.backend = "django.contrib.auth.backends.ModelBackend"
+    login(request, user)
+
+    # Store the login action
+    UserLoginAction(user=user, ip=request.META['REMOTE_ADDR']).save()
+
+    if message is None:
+        message = _("Welcome back %s, you are now logged in") % smart_unicode(user.username)
+
+    messages.info(request, message)
+
+    if not forward:
+        forward = request.session.get(ON_SIGNIN_SESSION_ATTR, reverse('index'))
+
+    pending_data = request.session.get(PENDING_SUBMISSION_SESSION_ATTR, None)
+
+    if pending_data and (user.email_isvalid or pending_data['type'] not in settings.REQUIRE_EMAIL_VALIDATION_TO):
+        submission_time = pending_data['time']
+        if submission_time < datetime.datetime.now() - datetime.timedelta(minutes=int(settings.HOLD_PENDING_POSTS_MINUTES)):
+            del request.session[PENDING_SUBMISSION_SESSION_ATTR]
+        elif submission_time < datetime.datetime.now() - datetime.timedelta(minutes=int(settings.WARN_PENDING_POSTS_MINUTES)):
+            messages.info(request, (_("You have a %s pending submission.") % pending_data['data_name']) + " %s, %s, %s" % (
+                html.hyperlink(reverse('manage_pending_data', kwargs={'action': _('save')}), _("save it")),
+                html.hyperlink(reverse('manage_pending_data', kwargs={'action': _('review')}), _("review")),
+                html.hyperlink(reverse('manage_pending_data', kwargs={'action': _('cancel')}), _("cancel"))
+            ))
+        else:
+            return manage_pending_data(request, _('save'), forward)
+
+    additional_get_params = urllib.urlencode(dict([k, v.encode('utf-8')] for k, v in request.GET.items()))
+
+    parsed_forward = urlparse(forward)
+
+    # If there is already some parsed query in the URL then change the forward URL
+    if parsed_forward.query:
+        forward_url = forward + "&%s" % additional_get_params
+    else:
+        forward_url = forward + "?%s" % additional_get_params
+
+    return HttpResponseRedirect(forward_url)
+
+def forward_suspended_user(request, user, show_private_msg=True):
+    message = _("Sorry, but this account is suspended")
+    if show_private_msg:
+        msg_type = 'privatemsg'
+    else:
+        msg_type = 'publicmsg'
+
+    suspension = user.suspension
+    if suspension:
+        message += (":<br />" + suspension.extra.get(msg_type, ''))
+
+    messages.info(request, message)
+    return HttpResponseRedirect(reverse('index'))
+
+@decorate.withfn(login_required)
+def signout(request):
+    logout(request)
+    return HttpResponseRedirect(reverse('index'))