feat: refactor auth middleware

Author: syfun

.isort.cfg

@@ -1,2 +1,19 @@
 [settings]
 known_third_party = django,gql,graphql,jwt,pydantic
+
+recursive=True
+line_length=100
+# force_to_top=file1.py,file2.py
+skip_glob=alembic/*.py
+# known_future_library=future,pies
+# known_standard_library=std,std2
+# known_third_party=randomthirdparty
+# known_first_party=mylib1,mylib2
+indent='    '
+multi_line_output=3
+# length_sort=1
+# forced_separate=django.contrib,django.utils
+default_section=FIRSTPARTY
+no_lines_before=LOCALFOLDER
+include_trailing_comma=True
+combine_as_imports=True

README.md

@@ -34,12 +34,29 @@ urlpatterns = [
 ]
 ```
 
+```python
+# utils.py
+def context_builder():
+    return {'version': 1}
+```
+
 ```python
 # settings.py
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'djgql.auth.middleware.BasicAuthMiddleware',
+]
 GRAPHQL_SCHEMA_FILE = os.path.join(BASE_DIR, 'starwar.gql')
 GRAPHQL = {
     'SCHEMA': 'starwar.schema.schema',
-    'ENABLE_PLAYGROUND': True
+    'ENABLE_PLAYGROUND': True,
+    'CONTEXT_BUILDER': 'starwar.utils.context_builder
 }
 ```
 
@@ -50,6 +67,7 @@ from enum import Enum
 from django.conf import settings
 from gql import query, gql, type_resolver, enum_type, field_resolver
 from gql.build_schema import build_schema_from_file
+from djgql.auth import login_required
 from pydantic import BaseModel
 
 type_defs = gql("""
@@ -90,7 +108,10 @@ class Droid(Character):
 
 
 @query
+@login_required
 def hero(parent, info, episode: typing.Optional[Episode]) -> typing.Optional[Character]:
+    request = info.context['request']
+    print(request.user)
     return Human(id='test')
 
 

djgql/auth/__init__.py

@@ -1,30 +1,2 @@
-def get_authorization_header(request):
-    """
-    Return request's 'Authorization:' header, as a bytestring.
-
-    Hide some test client ickyness where the header can be unicode.
-    """
-    auth = request.META.get('HTTP_AUTHORIZATION', b'')
-    if isinstance(auth, str):
-        auth = auth.encode()
-    return auth
-
-
-class BaseAuthentication:
-    """
-    All authentication classes should extend BaseAuthentication.
-    """
-
-    def authenticate(self, request):
-        """
-        Authenticate the request and return a two-tuple of (user, token).
-        """
-        raise NotImplementedError(".authenticate() must be overridden.")
-
-    def authenticate_header(self, request):
-        """
-        Return a string to be used as the value of the `WWW-Authenticate`
-        header in a `401 Unauthenticated` response, or `None` if the
-        authentication scheme should return `403 Permission Denied` responses.
-        """
-        pass
+from .middleware import BaseAuthMiddleware, BasicAuthMiddleware  # noqa
+from .decorator import login_required  # noqa

djgql/auth/backends.py

@@ -0,0 +1,16 @@
+from functools import wraps
+
+from djgql.exceptions import AuthenticationError
+
+
+def login_required(func):
+    @wraps(func)
+    def wrap(parent, info, *args, **kwargs):
+        request = info.context['request']
+        if 'authenticated' not in request.auth.scopes:
+            raise AuthenticationError()
+        info.context['user'] = request.user
+
+        return func(*args, **kwargs)
+
+    return wrap