• Search by Module
• Search by Words
• Search Projects

• Java
• Python
• JavaScript
• TypeScript
• C++
• Scala
• Blog

• asap-authentication-python-master
  • ChangeLog
  • AUTHORS
  • .mailmap
  • LICENSE
  • test-requirements.txt
  • README.rst
  • setup.py
  • atlassian_jwt_auth
    • verifier.py
    • exceptions.py
    • key.py
    • frameworks
      • common
        • decorators.py
        • asap.py
        • __init__.py
        • utils.py
        • tests
          • test_utils.py
          • test_decorators.py
          • __init__.py
        • backend.py
      • django
        • middleware.py
        • decorators.py
        • __init__.py
        • tests
          • views.py
          • urls.py
          • __init__.py
          • settings.py
          • test_django.py
        • backend.py
      • __init__.py
      • wsgi
        • middleware.py
        • __init__.py
        • tests
          • test_wsgi.py
        • backend.py
      • flask
        • decorators.py
        • __init__.py
        • tests
          • test_flask.py
          • __init__.py
        • backend.py
    • __init__.py
    • algorithms.py
    • tests
      • test_key.py
      • test_signer.py
      • test_verifier.py
      • test_signer_private_key_repo.py
      • test_public_key_provider.py
      • __init__.py
      • utils.py
      • test_private_key_provider.py
    • auth.py
    • contrib
      • requests.py
      • flask_app
        • decorators.py
        • __init__.py
      • aiohttp
        • verifier.py
        • key.py
        • __init__.py
        • auth.py
      • django
        • middleware.py
        • decorators.py
        • __init__.py
      • __init__.py
      • README.md
      • tests
        • aiohttp
          • test_verifier.py
          • test_public_key_provider.py
          • test_auth.py
          • __init__.py
        • test_requests.py
        • __init__.py
        • utils.py
      • server
        • __init__.py
    • signer.py
  • setup.cfg
  • .travis.yml
  • requirements.txt
  • .gitignore

from functools import wraps

from django.http.response import HttpResponse

from atlassian_jwt_auth.frameworks.django.decorators import with_asap


def validate_asap(issuers=None, subjects=None, required=True):
    """Decorator to allow endpoint-specific ASAP authorization, assuming ASAP
    authentication has already occurred.

    :param list issuers: A list of issuers that are allowed to use the
        endpoint.
    :param list subjects: A list of subjects that are allowed to use the
        endpoint.
    :param boolean required: Whether or not to require ASAP on this endpoint.
        Note that requirements will be still be verified if claims are present.
    """
    def validate_asap_decorator(func):
        @wraps(func)
        def validate_asap_wrapper(request, *args, **kwargs):
            asap_claims = getattr(request, 'asap_claims', None)
            if required and not asap_claims:
                message = 'Unauthorized: Invalid or missing token'
                response = HttpResponse(message, status=401)
                response['WWW-Authenticate'] = 'Bearer'
                return response

            if asap_claims:
                iss = asap_claims['iss']
                if issuers and iss not in issuers:
                    message = 'Forbidden: Invalid token issuer'
                    return HttpResponse(message, status=403)

                sub = asap_claims.get('sub')
                if subjects and sub not in subjects:
                    message = 'Forbidden: Invalid token subject'
                    return HttpResponse(message, status=403)

            return func(request, *args, **kwargs)

        return validate_asap_wrapper
    return validate_asap_decorator


def requires_asap(issuers=None, subject_should_match_issuer=None, func=None):
    """Decorator for Django endpoints to require ASAP

    :param list issuers: *required The 'iss' claims that this endpoint is from.
    """
    return with_asap(func=func,
                     required=True,
                     issuers=issuers,
                     subject_should_match_issuer=subject_should_match_issuer)