Source code for sirepo.auth.basic

"""HTTP Basic Auth Login

:copyright: Copyright (c) 2019 Bivio Software, Inc.  All Rights Reserved.
:license: http://www.apache.org/licenses/LICENSE-2.0.html
"""

from pykern.pkdebug import pkdc, pkdlog, pkdp
from pykern import pkconfig


AUTH_METHOD = "basic"

#: bots only
AUTH_METHOD_VISIBLE = False

_in_srunit = False




def init_apis(*args, **kwargs):
    global _cfg
    _cfg = pkconfig.init(
        uid=pkconfig.Required(_cfg_uid, "single user allowed to login with basic auth"),
        password=pkconfig.Required(str, "password for uid"),
    )





def require_user(qcall):
    """Check for basic auth credentials against cfg"""
    v = qcall.sreq.get("http_authorization")
    if v and v.type == "basic" and _cfg.password == v.password:
        if _cfg.uid == v.username:
            return _cfg.uid
        if _in_srunit:
            return v.username
    return None



def _cfg_uid(value):
    from sirepo import simulation_db

    if value and value == "dev-no-validate" and pkconfig.channel_in_internal_test():
        global _in_srunit
        _in_srunit = True
        return value
    simulation_db.user_path(uid=value, check=True)
    return value