File size: 1,293 Bytes
eebf5c4 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 |
"""
Authentication and Security for API Endpoints
"""
from fastapi import Security, HTTPException, status, Request
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
from config import config
security = HTTPBearer(auto_error=False)
async def verify_token(credentials: HTTPAuthorizationCredentials = Security(security)):
"""Verify API token"""
# If no tokens configured, allow access
if not config.API_TOKENS:
return None
# If tokens configured, require authentication
if not credentials:
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Authentication required"
)
if credentials.credentials not in config.API_TOKENS:
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Invalid authentication token"
)
return credentials.credentials
async def verify_ip(request: Request):
"""Verify IP whitelist"""
if not config.ALLOWED_IPS:
# No IP restriction
return True
client_ip = request.client.host
if client_ip not in config.ALLOWED_IPS:
raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN,
detail="IP not whitelisted"
)
return True
|