72 lines
2.4 KiB
Python
72 lines
2.4 KiB
Python
|
from typing import Optional
|
||
|
|
|
||
|
|
from fastapi.openapi.models import APIKey, APIKeyIn
|
||
|
|
from fastapi.security.base import SecurityBase
|
||
|
|
from starlette.exceptions import HTTPException
|
||
|
|
from starlette.requests import Request
|
||
|
|
from starlette.status import HTTP_403_FORBIDDEN
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyBase(SecurityBase):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyQuery(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self, *, name: str, scheme_name: Optional[str] = None, auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(**{"in": APIKeyIn.query}, name=name)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key: str = request.query_params.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyHeader(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self, *, name: str, scheme_name: Optional[str] = None, auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(**{"in": APIKeyIn.header}, name=name)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key: str = request.headers.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|
||
|
|
|
||
|
|
|
||
|
|
class APIKeyCookie(APIKeyBase):
|
||
|
|
def __init__(
|
||
|
|
self, *, name: str, scheme_name: Optional[str] = None, auto_error: bool = True
|
||
|
|
):
|
||
|
|
self.model: APIKey = APIKey(**{"in": APIKeyIn.cookie}, name=name)
|
||
|
|
self.scheme_name = scheme_name or self.__class__.__name__
|
||
|
|
self.auto_error = auto_error
|
||
|
|
|
||
|
|
async def __call__(self, request: Request) -> Optional[str]:
|
||
|
|
api_key = request.cookies.get(self.model.name)
|
||
|
|
if not api_key:
|
||
|
|
if self.auto_error:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=HTTP_403_FORBIDDEN, detail="Not authenticated"
|
||
|
|
)
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
return api_key
|