mirror of
https://github.com/1Panel-dev/MaxKB.git
synced 2025-12-27 02:52:48 +00:00
50 lines
2.2 KiB
Python
50 lines
2.2 KiB
Python
# coding=utf-8
|
||
"""
|
||
@project: qabot
|
||
@Author：虎
|
||
@file： authenticate.py
|
||
@date：2024/3/14 03:02
|
||
@desc: 公共访问连接认证
|
||
"""
|
||
from django.db.models import QuerySet
|
||
|
||
from application.models.api_key_model import ApplicationAccessToken
|
||
from common.auth.handle.auth_base_handle import AuthBaseHandle
|
||
from common.constants.authentication_type import AuthenticationType
|
||
from common.constants.permission_constants import RoleConstants, Permission, Group, Operate, Auth
|
||
from common.exception.app_exception import AppAuthenticationFailed
|
||
|
||
|
||
class PublicAccessToken(AuthBaseHandle):
|
||
def support(self, request, token: str, get_token_details):
|
||
token_details = get_token_details()
|
||
if token_details is None:
|
||
return False
|
||
return (
|
||
'application_id' in token_details and
|
||
'access_token' in token_details and
|
||
token_details.get('type') == AuthenticationType.APPLICATION_ACCESS_TOKEN.value)
|
||
|
||
def handle(self, request, token: str, get_token_details):
|
||
auth_details = get_token_details()
|
||
application_access_token = QuerySet(ApplicationAccessToken).filter(
|
||
application_id=auth_details.get('application_id')).first()
|
||
if application_access_token is None:
|
||
raise AppAuthenticationFailed(1002, "身份验证信息不正确")
|
||
if not application_access_token.is_active:
|
||
raise AppAuthenticationFailed(1002, "身份验证信息不正确")
|
||
if not application_access_token.access_token == auth_details.get('access_token'):
|
||
raise AppAuthenticationFailed(1002, "身份验证信息不正确")
|
||
|
||
return application_access_token.application.user, Auth(
|
||
role_list=[RoleConstants.APPLICATION_ACCESS_TOKEN],
|
||
permission_list=[
|
||
Permission(group=Group.APPLICATION,
|
||
operate=Operate.USE,
|
||
dynamic_tag=str(
|
||
application_access_token.application_id))],
|
||
application_id=application_access_token.application_id,
|
||
client_id=auth_details.get('client_id'),
|
||
client_type=AuthenticationType.APPLICATION_ACCESS_TOKEN.value
|
||
)
|