Common logic used by all the RESTful API services of vLab
Common logic used by every API within vLab - things like making response shapes consistent, providing functionality for the describe parameter, etc.
The requires and deny decorators
These decorators are used together to create an Access Control List for your Flask API. You can layer these directorates however you want, but beware - “With great power comes great responsibility.”
Here are some examples of using the requires and deny decorators.
To use the requires or deny decorators in your Flask API, simply add them to your function before @app.route. You should also accpet **kwargs because additional information like the token and validation information will be passed along.
This example will allow any user with a valid token access:
from vlab_api_common import requires, deny @requires() @app.route('/api/1/foo') def hello(**kwargs): return "hello world"
While this example shows how to forbid jordan access:
from vlab_api_common import requires, deny @deny(username='jordan') @app.route('/api/1/foo') def hello(**kwargs): return "hello world"
In this example, any user with a valid authentication token will be able to perform an HTTP GET on the API end point.
@requires(verify=False) @app.route('/api/1/foo') def hello(**kwargs): return "hello world!"
The difference in this next example is that the requires decorator will check with the configured vLab Authentication Service to ensure that the user has not deleted their token:
@requires() @app.route('/api/1/foo') def hello(**kwargs): return "hello world!"
Notice how this is the default behavior. If you have a resource that’s not very sensitive, and have extremely high requirements on availability, consider explicitly setting verify=False on the requires and deny decorators.
The verify keyword argument applies to both the requires and deny decorators.
You can specify multiple values in the requires and deny decorators. When you specify more than one value in a single decorator, the identities are OR ed. In other words, the moment an identity in the token matches a defined value, the user is granted access.
In this example, if the user is named bob but he is not part of Department A, then the user is still granted access:
@requires(username=('bob', 'sarah'), memberOf='Department A') @app.route('/api/1/foo') def hello(**kwargs): return "Hello World!"
When you layer multiple requires and/or deny decorators together, you AND those decoratores. In other words, all decorators must return successfully for the user to be granted access.
In this example, only forest and jenny from Department A will be granted access. All other members within Department A will not be granted access
@requires(username=('forest', 'jenny')) @requires(memberOf='Department A') @app.route('/api/1/foo') def hello(**kwargs): return "hello forest or jenny from Department A!"
Release history Release notifications | RSS feed
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
|Filename, size||File type||Python version||Upload date||Hashes|
|Filename, size vlab_api_common-2019.7.12-py2.py3-none-any.whl (14.4 kB)||File type Wheel||Python version py2.py3||Upload date||Hashes View|
Hashes for vlab_api_common-2019.7.12-py2.py3-none-any.whl