Function check_authentication

webapp_modern.py:108–148

Enforce authentication on all endpoints when auth is configured.

()

# PROVENANCE / ORIGIN VERIFICATION
# Reports authorship and whether this checkout is the official repository or a
# fork. The mobile app reads this on connect. It is an attribution signal, not
# a security control — a fork can edit it — but it keeps forks honest.
# ============================================================================

@app.route('/api/provenance')
def api_provenance():
    try:
        import provenance
        return jsonify(provenance.verify(os.path.dirname(os.path.abspath(__file__))))
    except Exception as _prov_err:  # pragma: no cover - defensive
        return jsonify({
            'canonical_repo': 'https://github.com/PierreGode/Ragnar.git',
            'official': False,
            'error': str(_prov_err),
        })

# ============================================================================
# BLE PROVISIONING
# The Bluetooth GATT peripheral the mobile app uses to discover this box and
# learn its IP (see ble_provisioning.py + Ragnarmobile docs/PROTOCOL.md). It is
# provisioning-only: no dashboard data ever crosses Bluetooth. Off by default,
# because advertising as a peripheral contends with bt_scanner's active scans
# on the same adapter.
# ============================================================================

_ble_server = None
_ble_lock = threading.Lock()


def _ble_ap_state():
    """Live hotspot state for the netStatus characteristic."""
    active = bool(getattr(shared_data, 'wardrive_ap_active', False))
    wm = getattr(shared_data, 'wifi_manager', None)
    ssid = None
    if active:
        ssid = getattr(wm, 'ap_ssid', None) or shared_data.config.get('wifi_ap_ssid', 'Ragnar')
    return {'active': active, 'ssid': ssid}


def _ble_set_ap(on):
    """Bring the hotspot up/down from a bonded AP-control write."""
    wm = getattr(shared_data, 'wifi_manager', None)
    if wm is None:
        raise RuntimeError('Wi-Fi manager not available')