Method handle_auth

st2auth/st2auth/handlers.py:172–282

(
        self,
        request,
        headers=None,
        remote_addr=None,
        remote_user=None,
        authorization=None,
        **kwargs,
    )

        super(StandaloneAuthHandler, self).__init__(*args, **kwargs)

    def handle_auth(
        self,
        request,
        headers=None,
        remote_addr=None,
        remote_user=None,
        authorization=None,
        **kwargs,
    ):
        auth_backend = self._auth_backend.__class__.__name__

        extra = {"auth_backend": auth_backend, "remote_addr": remote_addr}

        if not authorization:
            LOG.audit("Authorization header not provided", extra=extra)
            abort_request()
            return

        auth_type, auth_value = authorization
        if auth_type.lower() not in ["basic"]:
            extra["auth_type"] = auth_type
            LOG.audit("Unsupported authorization type: %s" % (auth_type), extra=extra)
            abort_request()
            return

        try:
            auth_value = base64.b64decode(auth_value)
        except Exception:
            LOG.audit("Invalid authorization header", extra=extra)
            abort_request()
            return

        split = auth_value.split(b":", 1)
        if len(split) != 2:
            LOG.audit("Invalid authorization header", extra=extra)
            abort_request()
            return

        username, password = split

        if six.PY3 and isinstance(username, six.binary_type):
            username = username.decode("utf-8")

        if six.PY3 and isinstance(password, six.binary_type):
            password = password.decode("utf-8")

        result = self._auth_backend.authenticate(username=username, password=password)

        if result is True:
            ttl = getattr(request, "ttl", None)
            username = self._get_username_for_request(username, request)
            try:
                token = self._create_token_for_user(username=username, ttl=ttl)
            except TTLTooLargeException as e:
                abort_request(
                    status_code=http_client.BAD_REQUEST, message=six.text_type(e)
                )
                return