【第2回】Responder + Firestore でモダンかつサーバーレスなブログシステムを作ってみた【Firebase設定と認証機能実装】

1import firebase_admin
2from firebase_admin import credentials
3from firebase_admin import firestore
4
5# Use a service account
6cred = credentials.Certificate('private/keys.json')
7firebase_admin.initialize_app(cred)
8
9db = firestore.client()

1from init_db import db
2
3doc_ref = db.collection('users').document('TTanaka')
4doc_ref.set({
5    'first': 'Taro',
6    'last': 'Tanaka',
7    'born': 1994
8})

1from init_db import db
2
3users_ref = db.collection('users')
4docs = users_ref.stream()
5
6for doc in docs:
7    print('{} => {}'.format(doc.id, doc.to_dict()))

1TTanaka => {'first': 'Taro', 'last': 'Tanaka', 'born': 1994}

1import requests
2import json
3
4
5def _sign_up(email, password, displayName):
6    # Api key取得
7    with open('private/apikey.txt') as f:
8        api_key = f.read()
9
10    # 管理者ユーザ追加
11    url = 'https://identitytoolkit.googleapis.com/v1/accounts:signUp?key={}'.format(api_key)
12    headers = {'Content-type': 'application/json'}
13    data = json.dumps({'email': email,
14                       'password': password,
15                       'returnSecureToken': True})
16
17    result = requests.post(url=url,
18                           headers=headers,
19                           data=data,
20                           )
21
22    if 'error' in result.json():
23        print('error: {}'.format(result.json()['error']['errors'][0]['message']))
24        return result.json()
25
26    # DisplayNameを更新
27    url = 'https://identitytoolkit.googleapis.com/v1/accounts:update?key={}'.format(api_key)
28    data = json.dumps({
29        'idToken': result.json()['idToken'],
30        'displayName': displayName
31    })
32
33    result = requests.post(url=url,
34                           headers=headers,
35                           data=data,
36                           )
37
38    if 'error' in result.json():
39        print('error: {}'.format(result.json()['error']['errors'][0]['message']))
40        return result.json()
41
42    return result.json()
43
44
45if __name__ == '__main__':
46    _sign_up('contact@sample.com', 'password', 'rightcode')

1<!--
2templates/admin.html
3管理者ページ
4-->
5
6{% extends "layout.html" %}
7{% block content %}
8
9<br>
10<h1>My Blog Name | 管理者ページ</h1>
11<p>こんにちは，{{ name }} さん</p>
12
13{% endblock %}

1<!--
2templates/login.html
3ログインページ
4-->
5
6{% extends "layout.html" %}
7{% block content %}
8
9<br>
10<h1>My Blog Name | ログイン</h1>
11<br>
12<div class="card login">
13    <form action="/admin" method="post">
14        <p>Email</p>
15        <input name="email" type="email">
16        <p>Password</p>
17        <input name="password" type="password">
18        <p class="error">{{ error }}</p>
19        <button type="submit">Login</button>
20    </form>
21</div>
22
23{% endblock %}

1.card{
2    max-width: 500px;
3    height: auto;
4    margin: auto;
5}
6.login{
7    overflow: hidden;
8    border-radius: 8px;
9    box-shadow: 0 4px 15px rgba(0,0,0,.2);
10}
11.login form{
12    margin: 50px 10px;
13}
14.login p{
15    margin: 10px 50px;
16    font-size: 20px;
17    font-weight: bold;
18    line-height: 125%;
19}
20.login input{
21    margin: 5px 50px;
22}
23button{
24    display: block;
25    border-style: none;
26    font-size: 1.4em;
27    background-color: #2b52cd;
28    color: white;
29    margin: 50px 50px;
30    padding: 10px 30px;
31}
32.error{
33    font-size: 0.5em;
34    color: #ce0404;
35}

1# auth.py内
2from firebase_admin import auth
3from datetime import timedelta
4
5
6def _login(email, password, expires=5):
7    with open('private/apikey.txt') as f:
8        api_key = f.read()
9
10    url = 'https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword?key={}'.format(api_key)
11    headers = {'Content-type': 'application/json'}
12    data = json.dumps({'email': email,
13                       'password': password,
14                       'returnSecureToken': True})
15
16    result = requests.post(url=url,
17                           headers=headers,
18                           data=data,
19                           )
20
21    result = result.json()
22
23    # エラーがある場合
24    if 'error' in result:
25        return result, None
26
27
28    # セッションクッキーの作成
29    session_cookie = auth.create_session_cookie(result['idToken'], timedelta(expires))
30
31    return result, session_cookie

1# controllers.py内
2from auth import _login, _sign_up
3
4# ~~ 省略 ~~ #
5
6firebase_error_massages = {
7    'EMAIL_NOT_FOUND': 'メールアドレスが正しくありません',
8    'INVALID_PASSWORD': 'パスワードが正しくありません',
9}
10
11@api.route('/login')
12def login(req, resp):
13    # エラーがあれば取得
14    error = req.params.get('error', '')
15    if error in firebase_error_massages:
16        error = firebase_error_massages[error]
17
18    resp.html = api.template('login.html',
19                             title='Login',
20                             error=error
21                             )
22
23
24@api.route('/admin')
25class Admin:
26    async def on_get(self, req, resp):
27        api.redirect(resp, '/login')
28
29    async def on_post(self, req, resp):
30        # POSTデータを取得
31        data = await req.media()
32        email = data['email']
33        password = data['password']
34
35        # 認証
36        res, session = _login(email, password)
37
38        if 'error' not in res:
39            # 認証成功ならば管理者ページへ
40            resp.html = api.template('admin.html',
41                                     title='管理者ページ',
42                                     token=res['idToken'],
43                                     name=res['displayName'])
44        else:
45            # 認証失敗ならばエラーメッセージをログイン画面に渡してリダイレクト
46            api.redirect(resp, '/login?error={}'.format(res['error']['errors'][0]['message']))