osdf/webapp/appcontroller.py

   1 # -------------------------------------------------------------------------
   2 #   Copyright (c) 2015-2017 AT&T Intellectual Property
   3 #
   4 #   Licensed under the Apache License, Version 2.0 (the "License");
   5 #   you may not use this file except in compliance with the License.
   6 #   You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 #   Unless required by applicable law or agreed to in writing, software
  11 #   distributed under the License is distributed on an "AS IS" BASIS,
  12 #   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 #   See the License for the specific language governing permissions and
  14 #   limitations under the License.
  15 #
  16 # -------------------------------------------------------------------------
  17 #
  18
  19 import json
  20
  21 from flask import Response
  22 from flask import request
  23 from flask_httpauth import HTTPBasicAuth
  24
  25 import osdf
  26 import osdf.config.base as cfg_base
  27 from osdf.adapters.aaf import aaf_authentication as aaf_auth
  28 from osdf.config.base import osdf_config
  29
  30 auth_basic = HTTPBasicAuth()
  31
  32 error_body = {
  33     "serviceException": {
  34         "text": "Unauthorized, check username and password"
  35     }
  36 }
  37
  38 unauthorized_message = json.dumps(error_body)
  39
  40
  41 @auth_basic.get_password
  42 def get_pw(username):
  43     auth_group = ''
  44     for k in osdf.end_point_auth_mapping:
  45         if k in request.url:
  46             auth_group = osdf.end_point_auth_mapping.get(k)
  47     return cfg_base.http_basic_auth_credentials[auth_group].get(username) if auth_group else None
  48
  49
  50 @auth_basic.error_handler
  51 def auth_error():
  52     response = Response(unauthorized_message, content_type='application/json; charset=utf-8')
  53     response.headers.add('content-length', len(unauthorized_message))
  54     response.status_code = 401
  55     return response
  56
  57
  58 @auth_basic.verify_password
  59 def verify_pw(username, password):
  60     is_aaf_enabled = osdf_config.deployment.get('is_aaf_enabled', False)
  61     if is_aaf_enabled:
  62         return aaf_auth.authenticate(username, password)
  63     else:
  64         pw = get_pw(username)
  65         return pw == password