From 3a2246e26e9febe3c15e2ddc1e7e6f320f86fe15 Mon Sep 17 00:00:00 2001 From: Santo Cariotti Date: Mon, 6 Apr 2020 21:54:53 +0200 Subject: chore: move package in frest folder --- src/frest/decorators.py | 40 ---------------------------------------- 1 file changed, 40 deletions(-) delete mode 100644 src/frest/decorators.py (limited to 'src/frest/decorators.py') diff --git a/src/frest/decorators.py b/src/frest/decorators.py deleted file mode 100644 index 7ce79d7..0000000 --- a/src/frest/decorators.py +++ /dev/null @@ -1,40 +0,0 @@ -from flask import request, abort -from auth.models import Token -from functools import wraps - - -def check_token(f): - @wraps(f) - def inner(*args, **kwargs): - userid = request.url.split("/")[-1] - headers = request.headers - if not headers.get("Authorization"): - abort(403) - - auth = request.headers.get("Authorization") - token = Token.query.filter_by(string=auth).first() - if not token: - abort(403) - - if userid.isdigit(): - if int(userid) != token.user.userId and not token.user.is_admin: - abort(403) - - return f(*args, **kwargs) - - return inner - - -def admin_required(f): - @wraps(f) - def inner(*args, **kwargs): - header = request.headers - - auth = request.headers.get("Authorization") - token = Token.query.filter_by(string=auth).first() - if not token.user.is_admin: - abort(403) - - return f(*args, **kwargs) - - return inner -- cgit v1.2.3-71-g8e6c