from functools import wraps import aiohttp from aiohttp.web import HTTPUnauthorized from settings import AUTH_URL async def check_auth(req): token = req.headers.get("Authorization") if token: print(f"[services.auth] checking auth token: {token}") headers = {"Authorization": "Bearer " + token, "Content-Type": "application/json"} # query getSession($params: SessionQueryInput){ session(params: $params) { message user { id } } } gql = { "query": "query getSession($params: SessionQueryInput){session(params: $params) { message access_token expires_in refresh_token id_token should_show_email_otp_screen should_show_mobile_otp_screen should_show_totp_screen authenticator_scanner_image authenticator_secret authenticator_recovery_codes user { id email email_verified given_name family_name middle_name nickname preferred_username picture signup_methods gender birthdate phone_number phone_number_verified roles created_at updated_at is_multi_factor_auth_enabled app_data } } }", "variables": {}, } async with aiohttp.ClientSession(timeout=aiohttp.ClientTimeout(total=30.0)) as session: async with session.post(AUTH_URL, headers=headers, json=gql) as response: if response.status != 200: return False, None r = await response.json() print(f"[services.auth] response: {r}") try: data = r.get("data") is_authenticated = False user_id = None if data: user_id = data.get("session", {}).get("user", {}).get("id", None) is_authenticated = user_id is not None return is_authenticated, user_id except Exception as e: print(f"{e}: {r}") return False, None def login_required(f): @wraps(f) async def decorated_function(*args, **kwargs): info = args[1] context = info.context print(context) req = context.get("request") is_authenticated, user_id = await check_auth(req) if not is_authenticated: raise Exception("You are not logged in") else: # Add user_id to the context context["user_id"] = user_id # If the user is authenticated, execute the resolver return await f(*args, **kwargs) return decorated_function def auth_request(f): @wraps(f) async def decorated_function(*args, **kwargs): req = args[0] is_authenticated, user_id = await check_auth(req) if not is_authenticated: raise HTTPUnauthorized(text="Please, login first") else: req["user_id"] = user_id return await f(*args, **kwargs) return decorated_function