darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-04 18:31:13 -05:00
Code Issues Packages Projects Releases Wiki Activity

debug

Browse Source
This commit is contained in:
Kenneth Kehl
2024-09-04 09:42:14 -07:00
parent c6f222695b
commit 099e77b615
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
app/authentication/auth.py
View File

@@ -64,13 +64,19 @@ def requires_admin_auth():
def requires_internal_auth(expected_client_id): def requires_internal_auth(expected_client_id):
debug_not_production(
hilite(
f"Enter requires_internal_auth with expected client id {expected_client_id}"
)
)
if expected_client_id not in current_app.config.get("INTERNAL_CLIENT_API_KEYS"): if expected_client_id not in current_app.config.get("INTERNAL_CLIENT_API_KEYS"):
raise TypeError("Unknown client_id for internal auth") raise TypeError("Unknown client_id for internal auth")
request_helper.check_proxy_header_before_request() request_helper.check_proxy_header_before_request()
auth_token = _get_auth_token(request) auth_token = _get_auth_token(request)
debug_not_production(f"auth token {auth_token}")
client_id = _get_token_issuer(auth_token) client_id = _get_token_issuer(auth_token)
debug_not_production(f"client id {client_id}")
if client_id != expected_client_id: if client_id != expected_client_id:
current_app.logger.info("client_id: %s", client_id) current_app.logger.info("client_id: %s", client_id)
current_app.logger.info("expected_client_id: %s", expected_client_id) current_app.logger.info("expected_client_id: %s", expected_client_id)
@@ -80,6 +86,9 @@ def requires_internal_auth(expected_client_id):
InternalApiKey(client_id, secret) InternalApiKey(client_id, secret)
for secret in current_app.config.get("INTERNAL_CLIENT_API_KEYS")[client_id] for secret in current_app.config.get("INTERNAL_CLIENT_API_KEYS")[client_id]
] ]
debug_not_production(
f"got the api keys ... note client_id {client_id} should be the service_id {api_keys}"
)
_decode_jwt_token(auth_token, api_keys, client_id) _decode_jwt_token(auth_token, api_keys, client_id)
g.service_id = client_id g.service_id = client_id