quay/endpoints/decorators.py

""" Various decorators for endpoint and API handlers. """

import features
from flask import abort
from auth.auth_context import (get_validated_oauth_token, get_authenticated_user,
                               get_validated_token, get_grant_user_context)
from functools import wraps


def anon_allowed(func):
  """ Marks a method to allow anonymous access where it would otherwise be disallowed. """
  func.__anon_allowed = True
  return func


def anon_protect(func):
  """ Marks a method as requiring some form of valid user auth before it can be executed. """
  func.__anon_protected = True
  return check_anon_protection(func)


def check_anon_protection(func):
  """ Validates a method as requiring some form of valid user auth before it can be executed. """
  @wraps(func)
  def wrapper(*args, **kwargs):
    # Skip if anonymous access is allowed.
    if features.ANONYMOUS_ACCESS or '__anon_allowed' in dir(func):
      return func(*args, **kwargs)

    # Check for validated context. If none exists, fail with a 401.
    if (get_authenticated_user() or get_validated_oauth_token() or get_validated_token() or
        get_grant_user_context()):
      return func(*args, **kwargs)

    abort(401)
  return wrapper