Improve django-rest-framework support

AUTHORS

@@ -14,3 +14,4 @@ Ash Christopher
 Rodney Richardson
 Hiroki Kiyohara
 Diego Garcia
+Pierre Dulac

docs/rest-framework/getting_started.rst

@@ -104,6 +104,7 @@ Also add the following to your `settings.py` module:
     OAUTH2_PROVIDER = {
         # this is the list of available scopes
         'SCOPES': {'read': 'Read scope', 'write': 'Write scope', 'groups': 'Access to your groups'}
+        'OAUTH2_BACKEND_CLASS': 'oauth2_provider.ext.rest_framework.oauth2_backends.OAuthLibCore',
     }
 
     REST_FRAMEWORK = {

oauth2_provider/ext/rest_framework/authentication.py

@@ -1,4 +1,7 @@
+from django.utils.translation import ugettext_lazy as _
+
 from rest_framework.authentication import BaseAuthentication
+from rest_framework import exceptions
 
 from ...oauth2_backends import get_oauthlib_core
 
@@ -16,11 +19,15 @@ def authenticate(self, request):
         """
         oauthlib_core = get_oauthlib_core()
         valid, r = oauthlib_core.verify_request(request, scopes=[])
-        if valid:
-            return r.user, r.access_token
-        else:
+
+        if not valid:
             return None
 
+        if not r.user.is_active:
+            raise exceptions.AuthenticationFailed(_('User inactive or deleted.'))
+
+        return r.user, r.access_token
+
     def authenticate_header(self, request):
         """
         Bearer is the only finalized type currently

oauth2_provider/ext/rest_framework/oauth2_backends.py

@@ -0,0 +1,19 @@
+from rest_framework.request import Request
+from oauth2_provider import oauth2_backends
+
+
+class OAuthLibCore(oauth2_backends.OAuthLibCore):
+    """Backend for Django Rest Framework"""
+
+    def extract_body(self, request):
+        """
+        We can read only once the body in Django, 
+        so in case of DRF we avoid to read it before the framework does.
+        This use case often happen during multipart form requests.
+
+        NB: it forces you to use the `Authorization` request header 
+            for authentication and not pass the credentials in the request body
+        """
+        if isinstance(request, Request):
+            return request.data.items()
+        return super(OAuthLibCore, self).extract_body(request)