mirror of
https://github.com/rightup/pyMC_Repeater.git
synced 2026-05-05 13:12:15 +02:00
7112da98c2
- Implemented JWT authentication with auto-generated secret if not provided. - Added API token management functionality. - Created authentication endpoints for login, token refresh, verification, and password change. - Introduced API documentation endpoints for Swagger UI and OpenAPI spec. - Enhanced CORS support for API and documentation endpoints. - Updated OpenAPI specification to include new authentication and system endpoints.
67 lines
2.2 KiB
Python
67 lines
2.2 KiB
Python
import logging
|
|
import cherrypy
|
|
|
|
logger = logging.getLogger("HTTPServer")
|
|
|
|
|
|
def check_auth():
|
|
"""
|
|
CherryPy tool to check authentication before processing request.
|
|
|
|
Checks for either JWT in Authorization header or API token in X-API-Key header.
|
|
Sets cherrypy.request.user on success.
|
|
Returns 401 JSON response on failure.
|
|
"""
|
|
# Skip auth check for OPTIONS requests (CORS preflight)
|
|
if cherrypy.request.method == "OPTIONS":
|
|
return
|
|
|
|
# Skip auth check for /auth/login endpoint
|
|
if cherrypy.request.path_info == "/auth/login":
|
|
return
|
|
|
|
# Get auth handlers from config
|
|
jwt_handler = cherrypy.config.get("jwt_handler")
|
|
token_manager = cherrypy.config.get("token_manager")
|
|
|
|
if not jwt_handler or not token_manager:
|
|
logger.error("Auth handlers not initialized in cherrypy.config")
|
|
cherrypy.response.status = 500
|
|
return {"success": False, "error": "Authentication system not configured"}
|
|
|
|
# Check for JWT token first
|
|
auth_header = cherrypy.request.headers.get("Authorization", "")
|
|
if auth_header.startswith("Bearer "):
|
|
token = auth_header[7:] # Remove "Bearer " prefix
|
|
payload = jwt_handler.verify_jwt(token)
|
|
|
|
if payload:
|
|
cherrypy.request.user = {
|
|
"username": payload.get("sub"),
|
|
"client_id": payload.get("client_id"),
|
|
"auth_type": "jwt"
|
|
}
|
|
return
|
|
|
|
# Check for API token
|
|
api_key = cherrypy.request.headers.get("X-API-Key", "")
|
|
if api_key:
|
|
token_info = token_manager.verify_token(api_key)
|
|
|
|
if token_info:
|
|
cherrypy.request.user = {
|
|
"token_id": token_info["id"],
|
|
"token_name": token_info["name"],
|
|
"auth_type": "api_token"
|
|
}
|
|
return
|
|
|
|
# No valid authentication found
|
|
logger.warning(f"Unauthorized access attempt to {cherrypy.request.path_info}")
|
|
raise cherrypy.HTTPError(401, "Unauthorized - Valid JWT or API token required")
|
|
|
|
|
|
# Register the tool
|
|
cherrypy.tools.require_auth = cherrypy.Tool('before_handler', check_auth)
|
|
logger.info("CherryPy require_auth tool registered")
|