aboutsummaryrefslogtreecommitdiff
path: root/gn3/auth/authentication/oauth2/endpoints
diff options
context:
space:
mode:
authorFrederick Muriuki Muriithi2023-09-07 15:49:00 +0300
committerFrederick Muriuki Muriithi2023-10-10 11:12:40 +0300
commit0a8279891190e49867d3a1d72db0f7c7cd275646 (patch)
tree9acceecfcf2667abeaac743e4c7f5139fd5e0afd /gn3/auth/authentication/oauth2/endpoints
parente4af0bbac585b46a5d6303d752cea18ca527d676 (diff)
downloadgenenetwork3-0a8279891190e49867d3a1d72db0f7c7cd275646.tar.gz
Remove authentication from GN3
Authentication should be handled by the auth server (gn-auth) and thus, this commit removes code handling user authentication from the GN3 system.
Diffstat (limited to 'gn3/auth/authentication/oauth2/endpoints')
-rw-r--r--gn3/auth/authentication/oauth2/endpoints/__init__.py0
-rw-r--r--gn3/auth/authentication/oauth2/endpoints/introspection.py48
-rw-r--r--gn3/auth/authentication/oauth2/endpoints/revocation.py22
-rw-r--r--gn3/auth/authentication/oauth2/endpoints/utilities.py31
4 files changed, 0 insertions, 101 deletions
diff --git a/gn3/auth/authentication/oauth2/endpoints/__init__.py b/gn3/auth/authentication/oauth2/endpoints/__init__.py
deleted file mode 100644
index e69de29..0000000
--- a/gn3/auth/authentication/oauth2/endpoints/__init__.py
+++ /dev/null
diff --git a/gn3/auth/authentication/oauth2/endpoints/introspection.py b/gn3/auth/authentication/oauth2/endpoints/introspection.py
deleted file mode 100644
index cfe2998..0000000
--- a/gn3/auth/authentication/oauth2/endpoints/introspection.py
+++ /dev/null
@@ -1,48 +0,0 @@
-"""Handle introspection of tokens."""
-import datetime
-from urllib.parse import urlparse
-
-from flask import request as flask_request
-from authlib.oauth2.rfc7662 import (
- IntrospectionEndpoint as _IntrospectionEndpoint)
-
-from gn3.auth.authentication.oauth2.models.oauth2token import OAuth2Token
-
-from .utilities import query_token as _query_token
-
-def get_token_user_sub(token: OAuth2Token) -> str:# pylint: disable=[unused-argument]
- """
- Return the token's subject as defined in
- https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.2
- """
- ## For now a dummy return to prevent issues.
- return "sub"
-
-class IntrospectionEndpoint(_IntrospectionEndpoint):
- """Introspect token."""
- def query_token(self, token_string: str, token_type_hint: str):
- """Query the token."""
- return _query_token(self, token_string, token_type_hint)
-
- def introspect_token(self, token: OAuth2Token) -> dict:
- """Return the introspection information."""
- url = urlparse(flask_request.url)
- return {
- "active": True,
- "scope": token.get_scope(),
- "client_id": token.client.client_id,
- "username": token.user.name,
- "token_type": token.token_type,
- "exp": int(token.expires_at.timestamp()),
- "iat": int(token.issued_at.timestamp()),
- "nbf": int(
- (token.issued_at - datetime.timedelta(seconds=120)).timestamp()),
- # "sub": get_token_user_sub(token),
- "aud": token.client.client_id,
- "iss": f"{url.scheme}://{url.netloc}",
- "jti": token.token_id
- }
-
- def check_permission(self, token, client, request):
- """Check that the client has permission to introspect token."""
- return client.client_type == "internal"
diff --git a/gn3/auth/authentication/oauth2/endpoints/revocation.py b/gn3/auth/authentication/oauth2/endpoints/revocation.py
deleted file mode 100644
index b8517b6..0000000
--- a/gn3/auth/authentication/oauth2/endpoints/revocation.py
+++ /dev/null
@@ -1,22 +0,0 @@
-"""Handle token revocation."""
-
-from flask import current_app
-from authlib.oauth2.rfc7009 import RevocationEndpoint as _RevocationEndpoint
-
-from gn3.auth import db
-from gn3.auth.authentication.oauth2.models.oauth2token import (
- save_token, OAuth2Token, revoke_token)
-
-from .utilities import query_token as _query_token
-
-class RevocationEndpoint(_RevocationEndpoint):
- """Revoke the tokens"""
- ENDPOINT_NAME = "revoke"
- def query_token(self, token_string: str, token_type_hint: str):
- """Query the token."""
- return _query_token(self, token_string, token_type_hint)
-
- def revoke_token(self, token: OAuth2Token, request):
- """Revoke token `token`."""
- with db.connection(current_app.config["AUTH_DB"]) as conn:
- save_token(conn, revoke_token(token))
diff --git a/gn3/auth/authentication/oauth2/endpoints/utilities.py b/gn3/auth/authentication/oauth2/endpoints/utilities.py
deleted file mode 100644
index e13784e..0000000
--- a/gn3/auth/authentication/oauth2/endpoints/utilities.py
+++ /dev/null
@@ -1,31 +0,0 @@
-"""endpoint utilities"""
-from typing import Any, Optional
-
-from flask import current_app
-from pymonad.maybe import Nothing
-
-from gn3.auth import db
-from gn3.auth.authentication.oauth2.models.oauth2token import (
- OAuth2Token, token_by_access_token, token_by_refresh_token)
-
-def query_token(# pylint: disable=[unused-argument]
- endpoint_object: Any, token_str: str, token_type_hint) -> Optional[
- OAuth2Token]:
- """Retrieve the token from the database."""
- def __identity__(val):
- return val
- token = Nothing
- with db.connection(current_app.config["AUTH_DB"]) as conn:
- if token_type_hint == "access_token":
- token = token_by_access_token(conn, token_str)
- if token_type_hint == "access_token":
- token = token_by_refresh_token(conn, token_str)
-
- return token.maybe(
- token_by_access_token(conn, token_str).maybe(
- token_by_refresh_token(conn, token_str).maybe(
- None, __identity__),
- __identity__),
- __identity__)
-
- return None