mirror of
https://github.com/rommapp/romm.git
synced 2026-07-01 08:16:21 +00:00
57 lines
2.1 KiB
Python
57 lines
2.1 KiB
Python
from fastapi.security.http import HTTPBasic
|
|
from handler.auth import auth_handler, oauth_handler
|
|
from starlette.authentication import AuthCredentials, AuthenticationBackend
|
|
from starlette.requests import HTTPConnection
|
|
|
|
|
|
class HybridAuthBackend(AuthenticationBackend):
|
|
async def authenticate(self, conn: HTTPConnection):
|
|
# Check if session key already stored in cache
|
|
user = await auth_handler.get_current_active_user_from_session(conn)
|
|
if user:
|
|
user.set_last_active()
|
|
return (AuthCredentials(user.oauth_scopes), user)
|
|
|
|
# Check if Authorization header exists
|
|
if "Authorization" not in conn.headers:
|
|
return (AuthCredentials([]), None)
|
|
|
|
scheme, token = conn.headers["Authorization"].split()
|
|
|
|
# Check if basic auth header is valid
|
|
if scheme.lower() == "basic":
|
|
credentials = await HTTPBasic().__call__(conn) # type: ignore[arg-type]
|
|
if not credentials:
|
|
return (AuthCredentials([]), None)
|
|
|
|
user = auth_handler.authenticate_user(
|
|
credentials.username, credentials.password
|
|
)
|
|
if user is None:
|
|
return (AuthCredentials([]), None)
|
|
|
|
user.set_last_active()
|
|
return (AuthCredentials(user.oauth_scopes), user)
|
|
|
|
# Check if bearer auth header is valid
|
|
if scheme.lower() == "bearer":
|
|
(
|
|
user,
|
|
claims,
|
|
) = await oauth_handler.get_current_active_user_from_bearer_token(token)
|
|
if user is None:
|
|
return (AuthCredentials([]), None)
|
|
|
|
# Only access tokens can request resources
|
|
if claims.get("type") != "access":
|
|
return (AuthCredentials([]), None)
|
|
|
|
# Only grant access to resources with overlapping scopes
|
|
token_scopes = set(list(claims.get("scopes").split(" ")))
|
|
overlapping_scopes = list(token_scopes & set(user.oauth_scopes))
|
|
|
|
user.set_last_active()
|
|
return (AuthCredentials(overlapping_scopes), user)
|
|
|
|
return (AuthCredentials([]), None)
|