app.py

# Simple Test Flask application with authn and authz

import FlaskSimpleAuth as fsa
import secret

# create application with token, param and basic authentication
app = fsa.Flask(
    "app",
    FSA_MODE="dev",
    FSA_AUTH=["token", "param", "basic", "none"],
)

# authentication with randomly-generated passwords
PASSDB: dict[str, str] = {
    login: app.hash_password(pwd) for login, pwd in secret.PASSES.items()
}
app.get_user_pass(PASSDB.get)

# admin group authorization
ADMINS: set[str] = {"calvin", "susie"}
app.group_check("ADMIN", ADMINS.__contains__)

# login routes
@app.get("/login", authz="AUTH", authn="basic")
def get_login(user: fsa.CurrentUser):
    return {"user": user, "token": app.create_token(user)}, 200

@app.post("/login", authz="AUTH", authn="param")
def post_login(user: fsa.CurrentUser):
    return {"user": user, "token": app.create_token(user)}, 201

# identity routes
@app.get("/who-am-i", authz="AUTH")
def get_who_am_i(user: fsa.CurrentUser, lang: fsa.Cookie = None):
    return {"user": user, "isadmin": user in ADMINS, "lang": lang}, 200

@app.get("/admin", authz="ADMIN")
def get_admin(user: fsa.CurrentUser):
    return {"user": user, "isadmin": True}, 200

# incredible open service for top-notch translations
HELLO = {"it": "Ciao", "fr": "Salut", "en": "Hi", "ko": "안녕"}

@app.get("/hello", authz="OPEN")
def get_hello(lang: fsa.Cookie = "en"):
    return {"lang": lang, "hello": HELLO.get(lang, "Hi")}, 200

#
# further json, pydantic and dataclasses tests
#
import model

# FIXME could we drop fsa.jsonify?
@app.get("/t0", authz="OPEN")
def get_t0(t: fsa.JsonData):
    return fsa.jsonify(t)

@app.post("/t0", authz="OPEN")
def post_t0(t: fsa.JsonData):
    return fsa.jsonify(t)

@app.get("/t1", authz="OPEN")
def get_t1(t: model.Thing1):
    return fsa.jsonify(t)

@app.post("/t1", authz="OPEN")
def post_t1(t: model.Thing1):
    return fsa.jsonify(t)

@app.get("/t2", authz="OPEN")
def get_t2(t: model.Thing2):
    return fsa.jsonify(t)

@app.post("/t2", authz="OPEN")
def post_t2(t: model.Thing2):
    return fsa.jsonify(t)

@app.get("/t3", authz="OPEN")
def get_t3(t: model.Thing3):
    return fsa.jsonify(t)

@app.post("/t3", authz="OPEN")
def post_t3(t: model.Thing3):
    return fsa.jsonify(t)