blob: 91fdb7c9cad541a760038a526bbee71b2afa566b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
"""Allows users to authenticate directly."""
from flask import current_app as app
from authlib.oauth2.rfc6749 import grants
from gn3.auth import db
from gn3.auth.authentication.users import valid_login, user_by_email
class PasswordGrant(grants.ResourceOwnerPasswordCredentialsGrant):
"""Implement the 'Password' grant."""
TOKEN_ENDPOINT_AUTH_METHODS = ["client_secret_basic", "client_secret_post"]
def authenticate_user(self, username, password):
"Authenticate the user with their username and password."
with db.connection(app.config["AUTH_DB"]) as conn:
return user_by_email(conn, username).maybe(
None,
lambda user: valid_login(conn, user, password))
|
