1 Commits

Author SHA1 Message Date
73b94e8aa2 jwt, first try not working 2021-01-24 20:41:08 +01:00
3 changed files with 274 additions and 228 deletions

View File

@ -20,7 +20,9 @@ RUN \
pip3 install connexion && \
pip3 install connexion[swagger-ui] && \
pip3 install uwsgi && \
pip3 install flask-cors
pip3 install flask-cors && \
pip3 install python-jose[cryptography] && \
pip3 install six
RUN \
mkdir -p ${APP_DIR} && \

44
auth.py Normal file
View File

@ -0,0 +1,44 @@
import time
import connexion
import six
from werkzeug.exceptions import Unauthorized
from jose import JWTError, jwt
JWT_ISSUER = 'de.hottis.hausverwaltung'
JWT_SECRET = 'streng_geheim'
JWT_LIFETIME_SECONDS = 600
JWT_ALGORITHM = 'HS256'
def generate_token(user_id):
timestamp = _current_timestamp()
payload = {
"iss": JWT_ISSUER,
"iat": int(timestamp),
"exp": int(timestamp + JWT_LIFETIME_SECONDS),
"sub": str(user_id),
}
return jwt.encode(payload, JWT_SECRET, algorithm=JWT_ALGORITHM)
def decode_token(token):
try:
return jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
except JWTError as e:
six.raise_from(Unauthorized, e)
def get_secret(user, token_info) -> str:
return '''
You are user_id {user} and the secret is 'wbevuec'.
Decoded token claims: {token_info}.
'''.format(user=user, token_info=token_info)
def _current_timestamp() -> int:
return int(time.time())

View File

@ -1,7 +1,7 @@
openapi: 3.0.0
info:
title: Hausverwaltung
version: "0.1"
title: Hausverwaltung-JWT
version: "0.2"
paths:
/hv/objekte:
@ -12,12 +12,10 @@ paths:
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Objekt'
$ref: '#/components/Objekt'
404:
description: No Objekte available
500:
@ -30,16 +28,13 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
$ref: '#/components/schemas/Objekt'
$ref: '#/components/Objekt'
404:
description: Objekt not found
500:
@ -52,12 +47,10 @@ paths:
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Wohnung'
$ref: '#/components/Wohnung'
404:
description: No Wohnung available
500:
@ -70,18 +63,15 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Wohnung'
$ref: '#/components/Wohnung'
404:
description: No Wohnung available
500:
@ -94,16 +84,13 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
$ref: '#/components/schemas/Wohnung'
$ref: '#/components/Wohnung'
404:
description: Wohnung not found
500:
@ -116,12 +103,10 @@ paths:
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Mieter'
$ref: '#/components/Mieter'
404:
description: No Mieter available
500:
@ -134,16 +119,13 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
$ref: '#/components/schemas/Mieter'
$ref: '#/components/Mieter'
404:
description: Mieter not found
500:
@ -156,16 +138,13 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
$ref: '#/components/schemas/Forderung'
$ref: '#/components/Forderung'
404:
description: Forderung not found
500:
@ -178,18 +157,15 @@ paths:
parameters:
- name: mieter_id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Forderung'
$ref: '#/components/Forderung'
404:
description: No Forderung available
500:
@ -202,16 +178,13 @@ paths:
parameters:
- name: id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
$ref: '#/components/schemas/Zahlung'
$ref: '#/components/Zahlung'
404:
description: Zahlung not found
500:
@ -224,18 +197,15 @@ paths:
parameters:
- name: mieter_id
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response.
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/Zahlung'
$ref: '#/components/Zahlung'
404:
description: No Zahlung available
500:
@ -248,23 +218,19 @@ paths:
parameters:
- name: mieter_id
in: path
required: true
schema:
type: integer
required: true
- name: year
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response
content:
'application/json':
schema:
type: array
items:
$ref: '#/components/schemas/ZahlungForderung'
$ref: '#/components/ZahlungForderung'
404:
description: No ZahlungForderung available
500:
@ -277,44 +243,72 @@ paths:
parameters:
- name: mieter_id
in: path
required: true
schema:
type: integer
required: true
- name: year
in: path
required: true
schema:
type: integer
required: true
responses:
200:
description: Successful response
content:
'application/json':
schema:
$ref: '#/components/schemas/Saldo'
$ref: '#/components/Saldo'
404:
description: Neither Forderungen nor Zahlungen available
500:
description: Some server error
# /hv/zahlung:
# post:
# tags: [ "Zahlung" ]
# operationId: ZahlungenForderungen.put_zahlung
# summary: Inserts a new Zahlung
# parameters:
# - name: zahlung
# in: body
# schema:
# $ref: '#/components/schemas/Zahlung'
# responses:
# 202:
# description: Zahlung successfully inserted
# 500:
# description: Some server or database error
/hv/zahlung:
post:
tags: [ "Zahlung" ]
operationId: ZahlungenForderungen.put_zahlung
summary: Inserts a new Zahlung
parameters:
- name: zahlung
in: body
schema:
$ref: '#/components/Zahlung'
responses:
202:
description: Zahlung successfully inserted
500:
description: Some server or database error
/auth/{user_id}:
get:
tags: [ "jwt" ]
summary: Return JWT token
operationId: auth.generate_token
parameters:
- name: user_id
description: User unique identifier
in: path
required: true
example: 12
schema:
type: integer
responses:
'200':
description: JWT token
content:
'text/plain':
schema:
type: string
/secret:
get:
tags: [ "jwt" ]
summary: Return secret string
operationId: auth.get_secret
responses:
'200':
description: secret response
content:
'text/plain':
schema:
type: string
security:
- jwt: ['secret']
components:
schemas:
Objekt:
description: Objekt type
type: object
@ -433,3 +427,9 @@ components:
type: number
saldo:
type: number
securitySchemes:
jwt:
type: http
scheme: bearer
bearerFormat: JWT
x-bearerInfoFunc: auth.decode_token