ED/FDEV-CAPI-Handler
1
0
Fork 0
mirror of https://github.com/norohind/FDEV-CAPI-Handler.git synced 2025-06-07 19:03:21 +03:00
Code Issues Projects Releases Wiki Activity

web: fix secret check, add ListTokens, RandomToken

Browse Source
This commit is contained in:
norohind 2021-12-08 00:56:36 +03:00
parent 2719d804eb
commit 317dff9e3b
Signed by: norohind
GPG Key ID: 01C3BECC26FB59E1
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
web.py
View File

@ -12,7 +12,8 @@ logger.propagate = False
def check_secret(req: falcon.request.Request, resp: falcon.response.Response, resource, params) -> None: def check_secret(req: falcon.request.Request, resp: falcon.response.Response, resource, params) -> None:
cookies_secret = req.get_cookie_values('key') cookies_secret = req.get_cookie_values('key')
if cookies_secret[0] != config.access_key:
if cookies_secret is None or cookies_secret[0] != config.access_key:
raise falcon.HTTPForbidden raise falcon.HTTPForbidden
@ -83,12 +84,29 @@ class CleanOrphanRecords:
capi_authorizer.cleanup_orphans() capi_authorizer.cleanup_orphans()
class ListTokens:
@falcon.before(check_secret)
def on_get(self, req: falcon.request.Request, resp: falcon.response.Response):
resp.content_type = falcon.MEDIA_JSON
resp.text = json.dumps(capi_authorizer.list_all_users())
class RandomToken:
# for legacy reasons
@falcon.before(check_secret)
def on_get(self, req: falcon.request.Request, resp: falcon.response.Response):
import random
random_state = random.choice(capi_authorizer.list_all_users())
application = falcon.App() application = falcon.App()
application.add_route('/authorize', AuthInit()) application.add_route('/authorize', AuthInit())
application.add_route('/fdev-redirect', FDEVCallback()) application.add_route('/fdev-redirect', FDEVCallback())
application.add_route('/users/{state}', TokenByState()) # for legacy reasons application.add_route('/users/{state}', TokenByState()) # for legacy reasons
application.add_route('/random_token', RandomToken()) # for legacy reasons, subject to decommissioning
application.add_route('/users/by-state/{state}', TokenByState()) application.add_route('/users/by-state/{state}', TokenByState())
application.add_route('/users/by-nickname/{nickname}', TokenByNickname()) application.add_route('/users/by-nickname/{nickname}', TokenByNickname())
application.add_route('/users', ListTokens())
application.add_route('/tools/clean-orphan-records', CleanOrphanRecords()) application.add_route('/tools/clean-orphan-records', CleanOrphanRecords())
if __name__ == '__main__': if __name__ == '__main__':