Compatibility with Django LoginRequiredMiddleware

Django 5.1 introduced the LoginRequiredMiddleware that automatically
requires an authenticated user on all views except those marked as
not requiring a login.

Author: tobiasge

azure_auth/decorators.py

@@ -2,13 +2,24 @@
 from urllib.parse import urlparse
 
 from django.conf import settings
-from django.contrib.auth import BACKEND_SESSION_KEY
+from django.contrib.auth import BACKEND_SESSION_KEY, decorators
 from django.shortcuts import redirect
 from django.urls import reverse
 
 from .handlers import AuthHandler
 
 
+def _dummy_login_not_required(view_func):
+    return view_func
+
+
+# The login_not_required decorator was added in Django 5.1
+# For earlier version we use a dummy decorator
+login_not_required = getattr(
+    decorators, "login_not_required", _dummy_login_not_required
+)
+
+
 def azure_auth_required(func):
     @functools.wraps(func)
     def _wrapper(request, *args, **kwargs):

azure_auth/views.py

@@ -7,11 +7,13 @@
 
 from azure_auth.utils import EntraStateSerializer
 
+from .decorators import login_not_required
 from .handlers import AuthHandler
 
 serializer = EntraStateSerializer()
 
 
+@login_not_required
 def azure_auth_login(request: HttpRequest):
     return HttpResponseRedirect(
         AuthHandler(request).get_auth_uri(
@@ -20,6 +22,7 @@ def azure_auth_login(request: HttpRequest):
     )
 
 
+@login_not_required
 def azure_auth_logout(request: HttpRequest):
     # Auth handler has to be initialized before `logout()` to load the claims from the session
     auth_handler = AuthHandler(request)
@@ -28,6 +31,7 @@ def azure_auth_logout(request: HttpRequest):
     return HttpResponseRedirect(auth_handler.get_logout_uri())
 
 
+@login_not_required
 def azure_auth_callback(request: HttpRequest):
     token = AuthHandler(request).get_token_from_flow()
     user = authenticate(request, token=token)