Compare commits
1 Commits
openapi3
...
jwt-experi
Author | SHA1 | Date | |
---|---|---|---|
73b94e8aa2
|
@ -20,7 +20,9 @@ RUN \
|
||||
pip3 install connexion && \
|
||||
pip3 install connexion[swagger-ui] && \
|
||||
pip3 install uwsgi && \
|
||||
pip3 install flask-cors
|
||||
pip3 install flask-cors && \
|
||||
pip3 install python-jose[cryptography] && \
|
||||
pip3 install six
|
||||
|
||||
RUN \
|
||||
mkdir -p ${APP_DIR} && \
|
||||
|
44
auth.py
Normal file
44
auth.py
Normal file
@ -0,0 +1,44 @@
|
||||
|
||||
import time
|
||||
|
||||
import connexion
|
||||
import six
|
||||
from werkzeug.exceptions import Unauthorized
|
||||
|
||||
from jose import JWTError, jwt
|
||||
|
||||
JWT_ISSUER = 'de.hottis.hausverwaltung'
|
||||
JWT_SECRET = 'streng_geheim'
|
||||
JWT_LIFETIME_SECONDS = 600
|
||||
JWT_ALGORITHM = 'HS256'
|
||||
|
||||
|
||||
def generate_token(user_id):
|
||||
timestamp = _current_timestamp()
|
||||
payload = {
|
||||
"iss": JWT_ISSUER,
|
||||
"iat": int(timestamp),
|
||||
"exp": int(timestamp + JWT_LIFETIME_SECONDS),
|
||||
"sub": str(user_id),
|
||||
}
|
||||
|
||||
return jwt.encode(payload, JWT_SECRET, algorithm=JWT_ALGORITHM)
|
||||
|
||||
|
||||
def decode_token(token):
|
||||
try:
|
||||
return jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
|
||||
except JWTError as e:
|
||||
six.raise_from(Unauthorized, e)
|
||||
|
||||
|
||||
def get_secret(user, token_info) -> str:
|
||||
return '''
|
||||
You are user_id {user} and the secret is 'wbevuec'.
|
||||
Decoded token claims: {token_info}.
|
||||
'''.format(user=user, token_info=token_info)
|
||||
|
||||
|
||||
def _current_timestamp() -> int:
|
||||
return int(time.time())
|
||||
|
164
swagger.yaml
164
swagger.yaml
@ -1,7 +1,7 @@
|
||||
openapi: 3.0.0
|
||||
info:
|
||||
title: Hausverwaltung
|
||||
version: "0.1"
|
||||
title: Hausverwaltung-JWT
|
||||
version: "0.2"
|
||||
|
||||
paths:
|
||||
/hv/objekte:
|
||||
@ -12,12 +12,10 @@ paths:
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Objekt'
|
||||
$ref: '#/components/Objekt'
|
||||
404:
|
||||
description: No Objekte available
|
||||
500:
|
||||
@ -30,16 +28,13 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Objekt'
|
||||
$ref: '#/components/Objekt'
|
||||
404:
|
||||
description: Objekt not found
|
||||
500:
|
||||
@ -52,12 +47,10 @@ paths:
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Wohnung'
|
||||
$ref: '#/components/Wohnung'
|
||||
404:
|
||||
description: No Wohnung available
|
||||
500:
|
||||
@ -70,18 +63,15 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Wohnung'
|
||||
$ref: '#/components/Wohnung'
|
||||
404:
|
||||
description: No Wohnung available
|
||||
500:
|
||||
@ -94,16 +84,13 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Wohnung'
|
||||
$ref: '#/components/Wohnung'
|
||||
404:
|
||||
description: Wohnung not found
|
||||
500:
|
||||
@ -116,12 +103,10 @@ paths:
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Mieter'
|
||||
$ref: '#/components/Mieter'
|
||||
404:
|
||||
description: No Mieter available
|
||||
500:
|
||||
@ -134,16 +119,13 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Mieter'
|
||||
$ref: '#/components/Mieter'
|
||||
404:
|
||||
description: Mieter not found
|
||||
500:
|
||||
@ -156,16 +138,13 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Forderung'
|
||||
$ref: '#/components/Forderung'
|
||||
404:
|
||||
description: Forderung not found
|
||||
500:
|
||||
@ -178,18 +157,15 @@ paths:
|
||||
parameters:
|
||||
- name: mieter_id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Forderung'
|
||||
$ref: '#/components/Forderung'
|
||||
404:
|
||||
description: No Forderung available
|
||||
500:
|
||||
@ -202,16 +178,13 @@ paths:
|
||||
parameters:
|
||||
- name: id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Zahlung'
|
||||
$ref: '#/components/Zahlung'
|
||||
404:
|
||||
description: Zahlung not found
|
||||
500:
|
||||
@ -224,18 +197,15 @@ paths:
|
||||
parameters:
|
||||
- name: mieter_id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response.
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/Zahlung'
|
||||
$ref: '#/components/Zahlung'
|
||||
404:
|
||||
description: No Zahlung available
|
||||
500:
|
||||
@ -248,23 +218,19 @@ paths:
|
||||
parameters:
|
||||
- name: mieter_id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
- name: year
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
type: array
|
||||
items:
|
||||
$ref: '#/components/schemas/ZahlungForderung'
|
||||
$ref: '#/components/ZahlungForderung'
|
||||
404:
|
||||
description: No ZahlungForderung available
|
||||
500:
|
||||
@ -277,44 +243,72 @@ paths:
|
||||
parameters:
|
||||
- name: mieter_id
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
- name: year
|
||||
in: path
|
||||
required: true
|
||||
schema:
|
||||
type: integer
|
||||
required: true
|
||||
responses:
|
||||
200:
|
||||
description: Successful response
|
||||
content:
|
||||
'application/json':
|
||||
schema:
|
||||
$ref: '#/components/schemas/Saldo'
|
||||
$ref: '#/components/Saldo'
|
||||
404:
|
||||
description: Neither Forderungen nor Zahlungen available
|
||||
500:
|
||||
description: Some server error
|
||||
# /hv/zahlung:
|
||||
# post:
|
||||
# tags: [ "Zahlung" ]
|
||||
# operationId: ZahlungenForderungen.put_zahlung
|
||||
# summary: Inserts a new Zahlung
|
||||
# parameters:
|
||||
# - name: zahlung
|
||||
# in: body
|
||||
# schema:
|
||||
# $ref: '#/components/schemas/Zahlung'
|
||||
# responses:
|
||||
# 202:
|
||||
# description: Zahlung successfully inserted
|
||||
# 500:
|
||||
# description: Some server or database error
|
||||
|
||||
/hv/zahlung:
|
||||
post:
|
||||
tags: [ "Zahlung" ]
|
||||
operationId: ZahlungenForderungen.put_zahlung
|
||||
summary: Inserts a new Zahlung
|
||||
parameters:
|
||||
- name: zahlung
|
||||
in: body
|
||||
schema:
|
||||
$ref: '#/components/Zahlung'
|
||||
responses:
|
||||
202:
|
||||
description: Zahlung successfully inserted
|
||||
500:
|
||||
description: Some server or database error
|
||||
/auth/{user_id}:
|
||||
get:
|
||||
tags: [ "jwt" ]
|
||||
summary: Return JWT token
|
||||
operationId: auth.generate_token
|
||||
parameters:
|
||||
- name: user_id
|
||||
description: User unique identifier
|
||||
in: path
|
||||
required: true
|
||||
example: 12
|
||||
schema:
|
||||
type: integer
|
||||
responses:
|
||||
'200':
|
||||
description: JWT token
|
||||
content:
|
||||
'text/plain':
|
||||
schema:
|
||||
type: string
|
||||
/secret:
|
||||
get:
|
||||
tags: [ "jwt" ]
|
||||
summary: Return secret string
|
||||
operationId: auth.get_secret
|
||||
responses:
|
||||
'200':
|
||||
description: secret response
|
||||
content:
|
||||
'text/plain':
|
||||
schema:
|
||||
type: string
|
||||
security:
|
||||
- jwt: ['secret']
|
||||
|
||||
components:
|
||||
schemas:
|
||||
Objekt:
|
||||
description: Objekt type
|
||||
type: object
|
||||
@ -433,3 +427,9 @@ components:
|
||||
type: number
|
||||
saldo:
|
||||
type: number
|
||||
securitySchemes:
|
||||
jwt:
|
||||
type: http
|
||||
scheme: bearer
|
||||
bearerFormat: JWT
|
||||
x-bearerInfoFunc: auth.decode_token
|
Reference in New Issue
Block a user