Source code for LifeLogServer.auth

import flask as f
import functools

from . import database

from http import HTTPStatus

AUTH_HEADER="token"


[docs]def requireAuth(func=None, /, userid_keyword="userid"):
    """In order to authenticated a particular user, you must provide one of that user's tokens in the 'token' header.

    **Example**:

    .. sourcecode:: bash

       curl --header 'token: 488bf926-f046-4e59-ae62-04431f211fc2' --request GET --url 'https://lifelog.ivanjohnson.net/api/v1/weight/get?since=0&before=2000000000&limit=3000&offset=0'

    At present there is no automatic way of obtaining an API token.
    """
    if not func:
        return functools.partial(requireAuth)

    @functools.wraps(func)
    def wrapper(*args, **kwargs):
        try:
            givenToken = f.request.headers[AUTH_HEADER]
        except KeyError:
            return (f'You must use the \"{AUTH_HEADER}\" header to authenticate', HTTPStatus.UNAUTHORIZED)

        givenDB = 'db' in kwargs

        db = database.get_db()

        rows = db.execute('SELECT userid FROM users WHERE token = ?', (givenToken,)).fetchone()
        if rows is None or len(rows) == 0:
            return ("The provided auth token does not have access to this resource", HTTPStatus.FORBIDDEN)

        kwargs[userid_keyword] = rows['userid']

        return func(*args, **kwargs)
    return wrapper