diff options
author | Frederick Muriuki Muriithi | 2022-11-24 13:42:37 +0300 |
---|---|---|
committer | Frederick Muriuki Muriithi | 2022-11-24 13:52:29 +0300 |
commit | 021b8dfcb99928b363e4546f626e3deb5793e392 (patch) | |
tree | 107182d01dc7e5fd802fadb4e12cd88867748c36 /gn3/auth/authentication/checks.py | |
parent | bac3865f7c0d625f2932e1c3fb001cc6a0048921 (diff) | |
download | genenetwork3-021b8dfcb99928b363e4546f626e3deb5793e392.tar.gz |
auth: Implement `create_resource` function
* gn3/auth/authentication/checks.py: new `authenticated_p` decorator to apply
on any function that requires the user to be authenticated before it runs.
* gn3/auth/authorisation/checks.py: use a `auth.authentication.users.User`
object rather than a UUID object in the global `g`.
* gn3/auth/authorisation/groups.py: Implement the `authenticated_user_group`
function to get the group(s) in which the currently authenticated user
belongs.
* gn3/auth/authorisation/resources.py: Implement the `create_resource`
function correctly.
* tests/unit/auth/conftest.py: extract the User objects into a global variable
for reusability with the tests.
* tests/unit/auth/test_resources.py: Use global user objects from conftest in
the tests. Set a User object (rather than UUID) in the global `g` variable.
Diffstat (limited to 'gn3/auth/authentication/checks.py')
-rw-r--r-- | gn3/auth/authentication/checks.py | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/gn3/auth/authentication/checks.py b/gn3/auth/authentication/checks.py new file mode 100644 index 0000000..63b0752 --- /dev/null +++ b/gn3/auth/authentication/checks.py @@ -0,0 +1,14 @@ +"""Functions to check for user authentication.""" + +from flask import g + +from .exceptions import AuthenticationError + +def authenticated_p(func): + """Decorator for functions requiring authentication.""" + def __authenticated__(*args, **kwargs): + user = g.user if hasattr(g, "user") else False + if user: + return func(*args, **kwargs) + raise AuthenticationError("You need to be authenticated") + return __authenticated__ |