You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
67 lines
1.8 KiB
67 lines
1.8 KiB
from functools import wraps |
|
from flask import ( |
|
request, Response, session, flash, redirect, url_for, abort |
|
) |
|
from settings import app_password, app_user, app_secret |
|
import random |
|
import string |
|
from itsdangerous import TimedJSONWebSignatureSerializer as Serializer |
|
|
|
|
|
def csrf_token_generator(size=40, chars=string.ascii_uppercase + string.digits): |
|
return ''.join(random.choice(chars) for _ in range(size)) |
|
|
|
|
|
def generate_auth_token(user, expires_in=3000): |
|
s = Serializer(app_secret, expires_in) |
|
return s.dumps({'id': 1}) |
|
|
|
|
|
def verify_token(token): |
|
try: |
|
s = Serializer(app_secret) |
|
data = s.loads(token) |
|
return data['id'] |
|
except: |
|
return None |
|
|
|
|
|
def check_basic_auth(user, passwd): |
|
if passwd in ('', 'unused') and verify_token(user): |
|
return True |
|
elif user == app_user or passwd == app_password: |
|
return True |
|
else: |
|
return False |
|
|
|
|
|
def authenticate(): |
|
"""Sends a 401 response that enables basic auth""" |
|
return Response( |
|
'Could not verify your access level for that URL.\n' |
|
'You have to login with proper credentials', 401, |
|
{'WWW-Authenticate': 'Basic realm="Login Required"'} |
|
) |
|
|
|
|
|
def requires_auth(f): |
|
''' |
|
REQUEST.json |
|
only gets basic authentication |
|
REQUEST.get |
|
redirect to login page |
|
''' |
|
@wraps(f) |
|
def decorated(*args, **kwargs): |
|
auth = session.get('logged_in') |
|
if auth: |
|
return f(*args, **kwargs) |
|
basic_auth = request.authorization |
|
if not check_basic_auth(basic_auth.username, basic_auth.password): |
|
if not request.json: |
|
return redirect(url_for('hello_world')) |
|
else: |
|
abort(401) |
|
|
|
return f(*args, **kwargs) |
|
return decorated
|
|
|