layabauth 3.2.0

Authentication support for layab.

Authentication for layab

Provides a decorator to ensure that, in a context of a Flask server, a valid OAuth2 token was received.

As expected by the HTTP specification, token is extracted from Authorization header and must be prefixed with Bearer .

If validation fails, an werkzeug.exceptions.Unauthorized exception is raised. Otherwise user details are stored in flask.g.current_user, this variable is an instance of the User class, it contains name property holding the authenticated user name (extracted from the upn field inside the token).

Decorator works fine on flask-restplus methods as well.

Below is a sample Flask application with an endpoint requesting a Microsoft issued OAuth2 token.

import flask
import layabauth

app = flask.Flask(__name__)

@app.route("/my_endpoint")
@layabauth.requires_authentication("https://sts.windows.net/common/discovery/keys")
def my_endpoint():
    return "OK"

app.run()

OpenAPI

You can generate OpenAPI security definition thanks to layabauth.authorizations.

You can generate OpenAPI method security thanks to layabauth.method_authorizations

Testing

Authentication can be mocked using layabauth.testing.auth_mock pytest fixture.

upn pytest fixture returning the UPN located in token used in tests must be provided.

from layabauth.testing import *

@pytest.fixture
def upn():
    return "[e-mail]"


def test_authentication(auth_mock):
    pass

How to install

1. python 3.6+ must be installed
2. Use pip to install module:

python -m pip install layabauth