mirror of
https://github.com/correl/openapi-core.git
synced 2024-11-24 19:19:56 +00:00
45 lines
1.2 KiB
Python
45 lines
1.2 KiB
Python
import warnings
|
|
|
|
from openapi_core.security.exceptions import SecurityError
|
|
|
|
|
|
class BaseProvider(object):
|
|
|
|
def __init__(self, scheme):
|
|
self.scheme = scheme
|
|
|
|
|
|
class UnsupportedProvider(BaseProvider):
|
|
|
|
def __call__(self, request):
|
|
warnings.warn("Unsupported scheme type")
|
|
|
|
|
|
class ApiKeyProvider(BaseProvider):
|
|
|
|
def __call__(self, request):
|
|
name = self.scheme['name']
|
|
location = self.scheme['in']
|
|
source = getattr(request.parameters, location)
|
|
if name not in source:
|
|
raise SecurityError("Missing api key parameter.")
|
|
return source[name]
|
|
|
|
|
|
class HttpProvider(BaseProvider):
|
|
|
|
def __call__(self, request):
|
|
if 'Authorization' not in request.parameters.header:
|
|
raise SecurityError('Missing authorization header.')
|
|
auth_header = request.parameters.header['Authorization']
|
|
try:
|
|
auth_type, encoded_credentials = auth_header.split(' ', 1)
|
|
except ValueError:
|
|
raise SecurityError('Could not parse authorization header.')
|
|
|
|
scheme = self.scheme['scheme']
|
|
if auth_type.lower() != scheme:
|
|
raise SecurityError(
|
|
'Unknown authorization method %s' % auth_type)
|
|
|
|
return encoded_credentials
|