mirror of
https://code.lenaisten.de/Lenaisten/advent22.git
synced 2024-11-23 08:13:01 +00:00
Jörn-Michael Miehe
af00dafb6c
apparently, a @staticmethod that Depends on another @staticmethod in the same class is bad
36 lines
904 B
Python
36 lines
904 B
Python
import secrets
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, status
|
|
from fastapi.security import HTTPBasic, HTTPBasicCredentials
|
|
|
|
from ..core.config import Config
|
|
|
|
router = APIRouter(prefix="/user", tags=["user"])
|
|
security = HTTPBasic()
|
|
|
|
|
|
async def user_is_admin(
|
|
credentials: HTTPBasicCredentials = Depends(security),
|
|
config: Config = Depends(Config.get_config),
|
|
) -> bool:
|
|
username_correct = secrets.compare_digest(credentials.username, config.admin.name)
|
|
|
|
password_correct = secrets.compare_digest(
|
|
credentials.password, config.admin.password
|
|
)
|
|
|
|
return username_correct and password_correct
|
|
|
|
|
|
async def require_admin(
|
|
is_admin: bool = Depends(user_is_admin),
|
|
) -> None:
|
|
if not is_admin:
|
|
raise HTTPException(status.HTTP_401_UNAUTHORIZED)
|
|
|
|
|
|
@router.get("/admin")
|
|
def check_admin(
|
|
_: None = Depends(require_admin),
|
|
) -> bool:
|
|
return True
|