71 lines
2.5 KiB
Python
71 lines
2.5 KiB
Python
from starlette.middleware.base import BaseHTTPMiddleware
|
|
from fastapi import Request, Response, HTTPException
|
|
from fastapi.responses import RedirectResponse
|
|
from datetime import datetime, timezone
|
|
from typing import Awaitable, Callable
|
|
from starlette.types import ASGIApp
|
|
from urllib.parse import quote
|
|
|
|
from session import SessionManager
|
|
from config import CONFIGS
|
|
|
|
|
|
class AuthMiddleware(BaseHTTPMiddleware):
|
|
'''Middleware that handles session authentication.'''
|
|
|
|
def __init__(self, app: ASGIApp, session_manager: SessionManager, api_token: str | None):
|
|
super().__init__(app)
|
|
self.__session_manager = session_manager
|
|
self.__api_token = api_token
|
|
|
|
async def dispatch(self, request: Request, call_next: Callable[[Request], Awaitable[Response]]):
|
|
'''Handles session authentication.'''
|
|
public_routes = [
|
|
f'/{CONFIGS.ROOT_PATH}/login',
|
|
f'/{CONFIGS.ROOT_PATH}/robots.txt'
|
|
]
|
|
if request.url.path in public_routes:
|
|
return await call_next(request)
|
|
|
|
is_api_request = '/api/v1/' in request.url.path
|
|
|
|
if is_api_request:
|
|
if self.__api_token:
|
|
# Attempt to authenticate with API token
|
|
if api_key := request.headers.get('Authorization'):
|
|
if api_key == self.__api_token:
|
|
return await call_next(request)
|
|
else:
|
|
raise HTTPException(status_code=401, detail="Invalid API token.")
|
|
|
|
# Extract session_id from cookies
|
|
session_id = request.cookies.get("session_id")
|
|
|
|
if not session_id:
|
|
if is_api_request:
|
|
raise HTTPException(status_code=401, detail="Unauthorized.")
|
|
|
|
return self.__redirect_to_login(request)
|
|
|
|
session_data = self.__session_manager.get_session(session_id)
|
|
|
|
if not session_data:
|
|
if is_api_request:
|
|
raise HTTPException(status_code=401, detail="The session is invalid.")
|
|
|
|
return self.__redirect_to_login(request)
|
|
|
|
if session_data.expires_at < datetime.now(timezone.utc):
|
|
if is_api_request:
|
|
raise HTTPException(status_code=401, detail="The session has expired.")
|
|
|
|
return self.__redirect_to_login(request)
|
|
|
|
return await call_next(request)
|
|
|
|
def __redirect_to_login(self, request: Request):
|
|
next_url = quote(str(request.url))
|
|
redirect_url = str(request.url_for('login')) + f'?next_url={next_url}'
|
|
|
|
return RedirectResponse(url=redirect_url, status_code=302)
|