Authentication and permission scoping for aiohttp
Home Page: https://mgurdal.github.io/aegis/
License: Apache License 2.0
I am Co-founder & Game Designer at Gnarly Game Studio.
The project needs a pull request template to help potential contributors to write the details of their PRs in a more standardized and convenient way.
Describe the bug
BasicAuth allows requests to pass if the get_user method returns None as the user.
To Reproduce
Steps to reproduce the behavior:
get_user method that returns NoneExpected behavior
The server should return 401 UNAUTHORIZED response.
Screenshots
If applicable, add screenshots to help explain your problem.
Environment (please complete the following information):
Describe the bug
Building the documentation page causes an error due to a change in mkdocs social configuration
To Reproduce
Steps to reproduce the behavior:
mkdocs buildExpected behavior
Builds the documentation under the site directory
Screenshots
Environment (please complete the following information):
Description
Wheel of this package could not be built on the clear virtualenv without aiohttp and jwt installed
To Reproduce
Steps to reproduce the behavior:
mkdir /wheels && cd /wheelspip wheel aegis=1.0.0 -d .aiohttp:Collecting aegis==1.0.0
Downloading https://files.pythonhosted.org/packages/90/67/e1af6100994a98f6e3729288b34bf8c65d8c837d7c50139cd76587b4c132/aegis-1.0.0.tar.gz
ERROR: Command errored out with exit status 1:
command: /usr/local/bin/python -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-install-ctnwhnrv/aegis/setup.py'"'"'; __file__='"'"'/tmp/pip-install-ctnwhnrv/aegis/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(__file__);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))' egg_info --egg-base /tmp/pip-install-ctnwhnrv/aegis/pip-egg-info
cwd: /tmp/pip-install-ctnwhnrv/aegis/
Complete output (9 lines):
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/tmp/pip-install-ctnwhnrv/aegis/setup.py", line 12, in <module>
from aegis import __version__
File "/tmp/pip-install-ctnwhnrv/aegis/aegis/__init__.py", line 18, in <module>
from .authenticators.base import BaseAuthenticator
File "/tmp/pip-install-ctnwhnrv/aegis/aegis/authenticators/base.py", line 5, in <module>
from aiohttp import web
ModuleNotFoundError: No module named 'aiohttp'
pip install aiohttppip wheel aegis==1.0.0 -d .jwt:Collecting aegis==1.0.0
Downloading https://files.pythonhosted.org/packages/90/67/e1af6100994a98f6e3729288b34bf8c65d8c837d7c50139cd76587b4c132/aegis-1.0.0.tar.gz
ERROR: Command errored out with exit status 1:
command: /usr/local/bin/python -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-wheel-bc581qq9/aegis/setup.py'"'"'; __file__='"'"'/tmp/pip-wheel-bc581qq9/aegis/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(__file__);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))' egg_info --egg-base /tmp/pip-wheel-bc581qq9/aegis/pip-egg-info
cwd: /tmp/pip-wheel-bc581qq9/aegis/
Complete output (9 lines):
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/tmp/pip-wheel-bc581qq9/aegis/setup.py", line 12, in <module>
from aegis import __version__
File "/tmp/pip-wheel-bc581qq9/aegis/aegis/__init__.py", line 19, in <module>
from .authenticators.jwt import JWTAuth
File "/tmp/pip-wheel-bc581qq9/aegis/aegis/authenticators/jwt.py", line 5, in <module>
import jwt
ModuleNotFoundError: No module named 'jwt'
Expected behavior
pip wheel aegis==1.0.0 should build and store wheel in the /wheels directory.
Environment
We need a refresh token feature that users can activate with minimum effort.
If the refresh_tokenvalue is set to True, user must be forced to override the existing refresh token generator and token validation methods.
class MyAuth(JWTAuth):
jwt_secret = "<secret_key>"
refresh_token = True
async def validate_refresh_token(self, request: web.Request) -> bool:
...
async def get_refresh_token(self, request: web.Request) -> str:
...After enabling the refresh token, user should get the refresh token in the auth/response.
{
"access_token": "<access_token>",
"refresh_token": "<refresh_token>",
}User should be able to retrieve a new access_token by using the existing credentials in the auth/refresh end-point.
{
"access_token": "<access_token>",
}
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.