You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
2.7 KiB
93 lines
2.7 KiB
3 years ago
|
from typing import Optional
|
||
|
|
|
||
|
|
from fastapi.openapi.models import APIKey, APIKeyIn
|
||
|
|
from fastapi.security.base import SecurityBase
|
||
|
|
from starlette.exceptions import HTTPException
|
||
|
|
from starlette.requests import Request
|
||
|
|
from starlette.status import HTTP_403_FORBIDDEN
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyBase(SecurityBase):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyQuery(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self,
|
||
|
|
*,
|
||
|
|
name: str,
|
||
|
|
scheme_name: Optional[str] = None,
|
||
|
|
description: Optional[str] = None,
|
||
|
|
auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(
|
||
|
|
**{"in": APIKeyIn.query}, name=name, description=description
|
||
|
|
)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key: str = request.query_params.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyHeader(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self,
|
||
|
|
*,
|
||
|
|
name: str,
|
||
|
|
scheme_name: Optional[str] = None,
|
||
|
|
description: Optional[str] = None,
|
||
|
|
auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(
|
||
|
|
**{"in": APIKeyIn.header}, name=name, description=description
|
||
|
|
)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key: str = request.headers.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyCookie(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self,
|
||
|
|
*,
|
||
|
|
name: str,
|
||
|
|
scheme_name: Optional[str] = None,
|
||
|
|
description: Optional[str] = None,
|
||
|
|
auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(
|
||
|
|
**{"in": APIKeyIn.cookie}, name=name, description=description
|
||
|
|
)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key = request.cookies.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|