From d8edad98b26b068d7f6e1aa857434a0705ff00a8 Mon Sep 17 00:00:00 2001
From: Colin Powell <colin@unbl.ink>
Date: Sun, 5 Mar 2023 02:30:42 -0500
Subject: [PATCH] Hide sensitive data in admin

---
 vrobbler/apps/profiles/admin.py  |  5 +++++
 vrobbler/apps/profiles/models.py | 26 +++++++++++++++++++++++---
 2 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/vrobbler/apps/profiles/admin.py b/vrobbler/apps/profiles/admin.py
index 1a39682..6661efb 100644
--- a/vrobbler/apps/profiles/admin.py
+++ b/vrobbler/apps/profiles/admin.py
@@ -7,3 +7,8 @@ from profiles.models import UserProfile
 class UserProfileAdmin(admin.ModelAdmin):
     date_hierarchy = "created"
     ordering = ("-created",)
+    exclude = (
+        "twitch_token",
+        "twitch_client_secret",
+        "lastfm_password",
+    )
diff --git a/vrobbler/apps/profiles/models.py b/vrobbler/apps/profiles/models.py
index d93081d..8b13273 100644
--- a/vrobbler/apps/profiles/models.py
+++ b/vrobbler/apps/profiles/models.py
@@ -1,11 +1,14 @@
-import pytz
+from datetime import timedelta
 
+import pytz
+from django.utils import timezone
 from django.contrib.auth import get_user_model
 from django.db import models
 from django_extensions.db.models import TimeStampedModel
+from encrypted_field import EncryptedField
 from profiles.constants import PRETTY_TIMEZONE_CHOICES
 
-from encrypted_field import EncryptedField
+from vrobbler.apps.videogames.igdb import refresh_igdb_api_token
 
 User = get_user_model()
 BNULL = {"blank": True, "null": True}
@@ -16,10 +19,16 @@ class UserProfile(TimeStampedModel):
         User, on_delete=models.CASCADE, related_name="profile"
     )
     timezone = models.CharField(
-        max_length=255, choices=PRETTY_TIMEZONE_CHOICES, default=pytz.UTC
+        max_length=255,
+        choices=PRETTY_TIMEZONE_CHOICES,
+        **BNULL,
     )
     lastfm_username = models.CharField(max_length=255, **BNULL)
     lastfm_password = EncryptedField(**BNULL)
+    twitch_client_id = models.CharField(max_length=255, **BNULL)
+    twitch_client_secret = EncryptedField(**BNULL)
+    twitch_token = EncryptedField(**BNULL)
+    twitch_token_expires = models.DateTimeField(**BNULL)
 
     def __str__(self):
         return f"User profile for {self.user}"
@@ -27,3 +36,14 @@ class UserProfile(TimeStampedModel):
     @property
     def tzinfo(self):
         return pytz.timezone(self.timezone)
+
+    def get_twitch_token(self):
+        now = timezone.now()
+        token = self.twitch_token
+        if not token or self.twitch_token_expires < now:
+            self.twitch_token, expires_in = refresh_igdb_api_token(
+                self.user_id
+            )
+            self.twitch_token_expires = now + timedelta(seconds=expires_in)
+            self.save(update_fields=["twitch_token", "twitch_token_expires"])
+        return self.twitch_token