From a79bca799a5830b035df818d7e87425c25d081df Mon Sep 17 00:00:00 2001 From: Santo Cariotti Date: Fri, 20 Mar 2020 11:11:03 +0100 Subject: chore: move frest dir into src --- frest/decorators.py | 40 ---------------------------------------- 1 file changed, 40 deletions(-) delete mode 100644 frest/decorators.py (limited to 'frest/decorators.py') diff --git a/frest/decorators.py b/frest/decorators.py deleted file mode 100644 index 181b62d..0000000 --- a/frest/decorators.py +++ /dev/null @@ -1,40 +0,0 @@ -from flask import request, abort -from auth.models import Token -from functools import wraps - - -def check_token(f): - @wraps(f) - def inner(*args, **kwargs): - userid = request.url.split('/')[-1] - headers = request.headers - if not headers.get("Authentication"): - abort(403) - - auth = request.headers.get("Authentication") - token = Token.query.filter_by(string=auth).first() - if not token: - abort(403) - - if userid.isdigit(): - if int(userid) != token.user.userId and not token.user.is_admin: - abort(403) - - return f(*args, **kwargs) - - return inner - - -def admin_required(f): - @wraps(f) - def inner(*args, **kwargs): - header = request.headers - - auth = request.headers.get("Authentication") - token = Token.query.filter_by(string=auth).first() - if not token.user.is_admin: - abort(403) - - return f(*args, **kwargs) - - return inner -- cgit v1.2.3-71-g8e6c