1 # Copyright (C) 2022 Wind River Systems, Inc.
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 from werkzeug.wrappers import Request, Response
16 from o2common.helper import o2logging
17 from o2common.authmw.authprov import auth_definer
19 logger = o2logging.get_logger(__name__)
22 class AuthRequiredExp(Exception):
23 def __init__(self, value):
28 'WWW-Authenticate': '{}'.format(self.value)}
31 class AuthFailureExp(Exception):
32 def __init__(self, value):
37 'WWW-Authenticate': '{}'.format(self.value)}
40 def _response_wrapper(environ, start_response, header):
41 res = Response(headers=header,
42 mimetype='text/plain', status=401)
43 return res(environ, start_response)
46 class authmiddleware():
52 def __init__(self, app):
55 def __call__(self, environ, start_response):
56 logger.info(__name__ + 'authentication middleware')
57 req = Request(environ, populate_request=True, shallow=True)
59 auth_header = req.headers['Authorization']
62 auth_token = auth_header.split(" ")[1]
64 ad = auth_definer('oauth')
65 # invoke underlying auth mdw to make k8s/keystone api
66 ret = ad.authenticate(auth_token)
69 "auth success with oauth token: " + auth_token)
70 return self.app(environ, start_response)
73 'Bearer realm="Authentication Failed"')
75 raise AuthRequiredExp('Bearer realm="Authentication Required"')
76 except AuthRequiredExp as ex:
77 return _response_wrapper(environ, start_response, ex.dictize())
78 except AuthFailureExp as ex:
79 return _response_wrapper(environ, start_response, ex.dictize())
81 hint = 'Bearer realm="Authentication Required"'
82 return _response_wrapper(environ, start_response,
83 AuthRequiredExp(hint).dictize())