Compare commits
1 Commits
jwt-experi
...
openapi3
Author | SHA1 | Date | |
---|---|---|---|
4f4b959e9e
|
@ -20,9 +20,7 @@ RUN \
|
|||||||
pip3 install connexion && \
|
pip3 install connexion && \
|
||||||
pip3 install connexion[swagger-ui] && \
|
pip3 install connexion[swagger-ui] && \
|
||||||
pip3 install uwsgi && \
|
pip3 install uwsgi && \
|
||||||
pip3 install flask-cors && \
|
pip3 install flask-cors
|
||||||
pip3 install python-jose[cryptography] && \
|
|
||||||
pip3 install six
|
|
||||||
|
|
||||||
RUN \
|
RUN \
|
||||||
mkdir -p ${APP_DIR} && \
|
mkdir -p ${APP_DIR} && \
|
||||||
|
44
auth.py
44
auth.py
@ -1,44 +0,0 @@
|
|||||||
|
|
||||||
import time
|
|
||||||
|
|
||||||
import connexion
|
|
||||||
import six
|
|
||||||
from werkzeug.exceptions import Unauthorized
|
|
||||||
|
|
||||||
from jose import JWTError, jwt
|
|
||||||
|
|
||||||
JWT_ISSUER = 'de.hottis.hausverwaltung'
|
|
||||||
JWT_SECRET = 'streng_geheim'
|
|
||||||
JWT_LIFETIME_SECONDS = 600
|
|
||||||
JWT_ALGORITHM = 'HS256'
|
|
||||||
|
|
||||||
|
|
||||||
def generate_token(user_id):
|
|
||||||
timestamp = _current_timestamp()
|
|
||||||
payload = {
|
|
||||||
"iss": JWT_ISSUER,
|
|
||||||
"iat": int(timestamp),
|
|
||||||
"exp": int(timestamp + JWT_LIFETIME_SECONDS),
|
|
||||||
"sub": str(user_id),
|
|
||||||
}
|
|
||||||
|
|
||||||
return jwt.encode(payload, JWT_SECRET, algorithm=JWT_ALGORITHM)
|
|
||||||
|
|
||||||
|
|
||||||
def decode_token(token):
|
|
||||||
try:
|
|
||||||
return jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
|
|
||||||
except JWTError as e:
|
|
||||||
six.raise_from(Unauthorized, e)
|
|
||||||
|
|
||||||
|
|
||||||
def get_secret(user, token_info) -> str:
|
|
||||||
return '''
|
|
||||||
You are user_id {user} and the secret is 'wbevuec'.
|
|
||||||
Decoded token claims: {token_info}.
|
|
||||||
'''.format(user=user, token_info=token_info)
|
|
||||||
|
|
||||||
|
|
||||||
def _current_timestamp() -> int:
|
|
||||||
return int(time.time())
|
|
||||||
|
|
164
swagger.yaml
164
swagger.yaml
@ -1,7 +1,7 @@
|
|||||||
openapi: 3.0.0
|
openapi: 3.0.0
|
||||||
info:
|
info:
|
||||||
title: Hausverwaltung-JWT
|
title: Hausverwaltung
|
||||||
version: "0.2"
|
version: "0.1"
|
||||||
|
|
||||||
paths:
|
paths:
|
||||||
/hv/objekte:
|
/hv/objekte:
|
||||||
@ -12,10 +12,12 @@ paths:
|
|||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Objekt'
|
$ref: '#/components/schemas/Objekt'
|
||||||
404:
|
404:
|
||||||
description: No Objekte available
|
description: No Objekte available
|
||||||
500:
|
500:
|
||||||
@ -28,13 +30,16 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Objekt'
|
$ref: '#/components/schemas/Objekt'
|
||||||
404:
|
404:
|
||||||
description: Objekt not found
|
description: Objekt not found
|
||||||
500:
|
500:
|
||||||
@ -47,10 +52,12 @@ paths:
|
|||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Wohnung'
|
$ref: '#/components/schemas/Wohnung'
|
||||||
404:
|
404:
|
||||||
description: No Wohnung available
|
description: No Wohnung available
|
||||||
500:
|
500:
|
||||||
@ -63,15 +70,18 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Wohnung'
|
$ref: '#/components/schemas/Wohnung'
|
||||||
404:
|
404:
|
||||||
description: No Wohnung available
|
description: No Wohnung available
|
||||||
500:
|
500:
|
||||||
@ -84,13 +94,16 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Wohnung'
|
$ref: '#/components/schemas/Wohnung'
|
||||||
404:
|
404:
|
||||||
description: Wohnung not found
|
description: Wohnung not found
|
||||||
500:
|
500:
|
||||||
@ -103,10 +116,12 @@ paths:
|
|||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Mieter'
|
$ref: '#/components/schemas/Mieter'
|
||||||
404:
|
404:
|
||||||
description: No Mieter available
|
description: No Mieter available
|
||||||
500:
|
500:
|
||||||
@ -119,13 +134,16 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Mieter'
|
$ref: '#/components/schemas/Mieter'
|
||||||
404:
|
404:
|
||||||
description: Mieter not found
|
description: Mieter not found
|
||||||
500:
|
500:
|
||||||
@ -138,13 +156,16 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Forderung'
|
$ref: '#/components/schemas/Forderung'
|
||||||
404:
|
404:
|
||||||
description: Forderung not found
|
description: Forderung not found
|
||||||
500:
|
500:
|
||||||
@ -157,15 +178,18 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: mieter_id
|
- name: mieter_id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Forderung'
|
$ref: '#/components/schemas/Forderung'
|
||||||
404:
|
404:
|
||||||
description: No Forderung available
|
description: No Forderung available
|
||||||
500:
|
500:
|
||||||
@ -178,13 +202,16 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: id
|
- name: id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Zahlung'
|
$ref: '#/components/schemas/Zahlung'
|
||||||
404:
|
404:
|
||||||
description: Zahlung not found
|
description: Zahlung not found
|
||||||
500:
|
500:
|
||||||
@ -197,15 +224,18 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: mieter_id
|
- name: mieter_id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response.
|
description: Successful response.
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/Zahlung'
|
$ref: '#/components/schemas/Zahlung'
|
||||||
404:
|
404:
|
||||||
description: No Zahlung available
|
description: No Zahlung available
|
||||||
500:
|
500:
|
||||||
@ -218,19 +248,23 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: mieter_id
|
- name: mieter_id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
- name: year
|
- name: year
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response
|
description: Successful response
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
type: array
|
type: array
|
||||||
items:
|
items:
|
||||||
$ref: '#/components/ZahlungForderung'
|
$ref: '#/components/schemas/ZahlungForderung'
|
||||||
404:
|
404:
|
||||||
description: No ZahlungForderung available
|
description: No ZahlungForderung available
|
||||||
500:
|
500:
|
||||||
@ -243,72 +277,44 @@ paths:
|
|||||||
parameters:
|
parameters:
|
||||||
- name: mieter_id
|
- name: mieter_id
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
- name: year
|
- name: year
|
||||||
in: path
|
in: path
|
||||||
type: integer
|
|
||||||
required: true
|
required: true
|
||||||
|
schema:
|
||||||
|
type: integer
|
||||||
responses:
|
responses:
|
||||||
200:
|
200:
|
||||||
description: Successful response
|
description: Successful response
|
||||||
|
content:
|
||||||
|
'application/json':
|
||||||
schema:
|
schema:
|
||||||
$ref: '#/components/Saldo'
|
$ref: '#/components/schemas/Saldo'
|
||||||
404:
|
404:
|
||||||
description: Neither Forderungen nor Zahlungen available
|
description: Neither Forderungen nor Zahlungen available
|
||||||
500:
|
500:
|
||||||
description: Some server error
|
description: Some server error
|
||||||
/hv/zahlung:
|
# /hv/zahlung:
|
||||||
post:
|
# post:
|
||||||
tags: [ "Zahlung" ]
|
# tags: [ "Zahlung" ]
|
||||||
operationId: ZahlungenForderungen.put_zahlung
|
# operationId: ZahlungenForderungen.put_zahlung
|
||||||
summary: Inserts a new Zahlung
|
# summary: Inserts a new Zahlung
|
||||||
parameters:
|
# parameters:
|
||||||
- name: zahlung
|
# - name: zahlung
|
||||||
in: body
|
# in: body
|
||||||
schema:
|
# schema:
|
||||||
$ref: '#/components/Zahlung'
|
# $ref: '#/components/schemas/Zahlung'
|
||||||
responses:
|
# responses:
|
||||||
202:
|
# 202:
|
||||||
description: Zahlung successfully inserted
|
# description: Zahlung successfully inserted
|
||||||
500:
|
# 500:
|
||||||
description: Some server or database error
|
# description: Some server or database error
|
||||||
/auth/{user_id}:
|
|
||||||
get:
|
|
||||||
tags: [ "jwt" ]
|
|
||||||
summary: Return JWT token
|
|
||||||
operationId: auth.generate_token
|
|
||||||
parameters:
|
|
||||||
- name: user_id
|
|
||||||
description: User unique identifier
|
|
||||||
in: path
|
|
||||||
required: true
|
|
||||||
example: 12
|
|
||||||
schema:
|
|
||||||
type: integer
|
|
||||||
responses:
|
|
||||||
'200':
|
|
||||||
description: JWT token
|
|
||||||
content:
|
|
||||||
'text/plain':
|
|
||||||
schema:
|
|
||||||
type: string
|
|
||||||
/secret:
|
|
||||||
get:
|
|
||||||
tags: [ "jwt" ]
|
|
||||||
summary: Return secret string
|
|
||||||
operationId: auth.get_secret
|
|
||||||
responses:
|
|
||||||
'200':
|
|
||||||
description: secret response
|
|
||||||
content:
|
|
||||||
'text/plain':
|
|
||||||
schema:
|
|
||||||
type: string
|
|
||||||
security:
|
|
||||||
- jwt: ['secret']
|
|
||||||
|
|
||||||
components:
|
components:
|
||||||
|
schemas:
|
||||||
Objekt:
|
Objekt:
|
||||||
description: Objekt type
|
description: Objekt type
|
||||||
type: object
|
type: object
|
||||||
@ -427,9 +433,3 @@ components:
|
|||||||
type: number
|
type: number
|
||||||
saldo:
|
saldo:
|
||||||
type: number
|
type: number
|
||||||
securitySchemes:
|
|
||||||
jwt:
|
|
||||||
type: http
|
|
||||||
scheme: bearer
|
|
||||||
bearerFormat: JWT
|
|
||||||
x-bearerInfoFunc: auth.decode_token
|
|
Reference in New Issue
Block a user