Breaking News: Grepper is joining You.com. Read the official announcement!

custom authorization for fastapi

mathiasgodwin answered on September 6, 2021 Popularity 10/10 Helpfulness 4/10

answer custom authorization for fastapi

related fastapi authentication

custom authorization for fastapi

Comment

from fastapi import FastAPI, HTTPException, Depends, Request

    def verify_token(req: Request):
        token = req.headers["Authorization"]
        # Here your code for verifying the token or whatever you use
        if token is not valid:
            raise HTTPException(
                status_code=401,
                detail="Unauthorized"
            )
        return True
    
    @app.post("/auth")
    async def login(password: str):
        if password == "my_password":
            return {"token": password} # Generate your own token
    
    @app.get("/")
    async def home(authorized: bool = Depends(verify_token)):
         if authorized:
            return {"detail": "Welcome home"}

Popularity 10/10 Helpfulness 4/10 Language python

Source: stackoverflow.com

Tags: authorization fastapi python

Link to this answer
Share Copy Link

Contributed on Dec 29 2022

mathiasgodwin

0 Answers Avg Quality 2/10

Closely Related Answers

fastapi authentication

Comment

oauth2_scheme = OAuth2PasswordBearer(tokenUrl='token')

def get_db():
    db = SessionLocal()
    try:
        yield db
    finally:
        db.close()


async def get_current_user(token: str = Depends(oauth2_scheme), db: Session = Depends(get_db)):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Could not validate credentials",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        id: int = payload.get("id")
        if id is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    user = db.get(User, id)
    if user is None:
        raise credentials_exception
    return user


async def check_if_admin(user: schemas.User = Depends(get_current_user)):
    if user.role == "admin":
        return user
    else:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="User is not admin",
            headers={"WWW-Authenticate": "Bearer"},
        )


def create_access_token(data: dict):
    to_encode = data.copy()
    expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    to_encode.update({"exp": expire})
    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return encoded_jwt


def authenticate_user(db: Session, username: str, password: str):
    try:
        user: User = db.execute(select(User).filter(User.username == username).filter(User.password == password)).scalar_one()
        data_dict = {"id": user.user_id, "username": user.username, "role": user.role}
        return create_access_token(data_dict)
    except Exception as e:
        print(e)
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Incorrect username or password",
            headers={"WWW-Authenticate": "Bearer"},
        )
@app.post('/token')
async def token(form_data: OAuth2PasswordRequestForm = Depends(), db: Session = Depends(get_db)):
    token = authenticate_user(db, form_data.username, form_data.password)
    return {"access_token": token, "token_type": "bearer"}
    
@app.post("/admin/example_admin_route", dependencies=[Depends(check_if_admin)])
def example_admin_route():

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: python

Link to this answer
Share Copy Link

Contributed on Sep 06 2021

Famous Fox

0 Answers Avg Quality 2/10

custom authorization for fastapi

Contents

More Related Answers

custom authorization for fastapi

Closely Related Answers

fastapi authentication

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.