Disposable emails not allowed

Author: Casassarnau

app/settings.py

@@ -428,3 +428,6 @@
         },
         'ICON': 'bi bi-github',
     }
+
+# Disposable email token from https://api.testmail.top/
+DISPOSABLE_EMAIL_TOKEN = os.environ.get('DISPOSABLE_EMAIL_TOKEN', None)

user/migrations/0007_alter_user_email.py

@@ -0,0 +1,19 @@
+# Generated by Django 4.0.8 on 2022-11-28 22:06
+
+from django.db import migrations, models
+import user.validations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('user', '0006_delete_loginrequest'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='user',
+            name='email',
+            field=models.EmailField(max_length=254, unique=True, validators=[user.validations.disposable_email], verbose_name='email address'),
+        ),
+    ]

user/models.py

@@ -11,6 +11,8 @@
 from django.utils.http import urlsafe_base64_encode, urlsafe_base64_decode
 from django.utils.translation import gettext_lazy as _
 
+from user.validations import disposable_email
+
 
 # UserManager from default Auth Django models. This is just to get rid of username field
 class UserManager(BaseUserManager):
@@ -128,7 +130,7 @@ class User(AbstractBaseUser, PermissionsMixin):
 
     first_name = models.CharField(_("first name"), max_length=150)
     last_name = models.CharField(_("last names"), max_length=150)
-    email = models.EmailField(_("email address"), unique=True)
+    email = models.EmailField(_("email address"), unique=True, validators=[disposable_email])
     email_verified = models.BooleanField(_('email verified'), default=False)
     email_subscribe = models.BooleanField(_('email subscribed'), default=False)
     is_staff = models.BooleanField(

user/validations.py

@@ -0,0 +1,17 @@
+import requests
+from django.conf import settings
+from django.core.exceptions import ValidationError
+
+
+def disposable_email(email):
+    token = getattr(settings, 'DISPOSABLE_EMAIL_TOKEN', None)
+    if token is not None:
+        url = "https://api.testmail.top/domain/check"
+        email_domain = email.split('@')[1]
+        headers = {
+            'Authorization': 'Bearer %s' % token
+        }
+        response = requests.request("GET", url, headers=headers, params={"data": email_domain})
+        result = response.json()
+        if not result["result"]:
+            raise ValidationError('Disposable emails are not permitted.')