Authentication

Author: snbianco

astroquery/mast/missions.py

@@ -47,8 +47,8 @@ class MastMissionsClass(MastQueryWithLogin):
                              'spectral_type', 'bmv0_mag', 'u_mag', 'b_mag', 'v_mag', 'gaia_g_mean_mag', 'star_mass',
                              'instrument', 'grating', 'filter', 'observation_id']
 
-    def __init__(self, *, mission='hst'):
-        super().__init__()
+    def __init__(self, *, mission='hst', mast_token=None):
+        super().__init__(mast_token=mast_token)
 
         self.dataset_kwds = {  # column keywords corresponding to dataset ID
             'hst': 'sci_data_set_name',
@@ -497,8 +497,19 @@ def download_file(self, uri, *, local_path=None, cache=True, verbose=True):
                 url = data_url
 
         except HTTPError as err:
+            if err.response.status_code == 401:
+                no_auth_msg = f'You are not authorized to download from {data_url}.'
+                if self._authenticated:
+                    no_auth_msg += ('\nPlease check your authentication token. You can generate a new '
+                                    'token at https://auth.mast.stsci.edu/token?suggested_name=Astroquery&'
+                                    'suggested_scope=mast:exclusive_access')
+                else:
+                    no_auth_msg += ('\nPlease authenticate yourself using the `~astroquery.mast.MastMissions.login` '
+                                    'function or initialize `~astroquery.mast.MastMissions` with an authentication '
+                                    'token.')
+                log.warning(no_auth_msg)
             status = 'ERROR'
-            msg = 'HTTPError: {0}'.format(err)
+            msg = f'HTTPError: {err}'
             url = data_url
 
         return status, msg, url

astroquery/mast/tests/test_mast.py

@@ -12,6 +12,7 @@
 from astropy.io import fits
 
 import astropy.units as u
+from requests import HTTPError, Response
 
 from astroquery.mast.services import _json_to_table
 from astroquery.utils.mocks import MockResponse
@@ -147,6 +148,11 @@ def request_mockreturn(url, params={}):
 
 
 def download_mockreturn(*args, **kwargs):
+    if 'unauthorized' in args[0]:
+        response = Response()
+        response.reason = 'Unauthorized'
+        response.status_code = 401
+        raise HTTPError(response=response)
     return ('COMPLETE', None, None)
 
 
@@ -376,6 +382,30 @@ def test_missions_download_products(patch_post, tmp_path):
                                                      extension='jpg',
                                                      download_dir=tmp_path)
 
+
+def test_missions_download_no_auth(patch_post, caplog):
+    # Exclusive access products should not be downloaded if user is not authenticated
+    # User is not authenticated
+    uri = 'unauthorized.fits'
+    result = mast.MastMissions.download_file(uri)
+    assert result[0] == 'ERROR'
+    assert 'HTTPError' in result[1]
+    with caplog.at_level('WARNING', logger='astroquery'):
+        assert 'You are not authorized to download' in caplog.text
+        assert 'Please authenticate yourself' in caplog.text
+    caplog.clear()
+
+    # User is authenticated, but doesn't have proper permissions
+    test_token = "56a9cf3df4c04052atest43feb87f282"
+    mast.MastMissions.login(token=test_token)
+    result = mast.MastMissions.download_file(uri)
+    assert result[0] == 'ERROR'
+    assert 'HTTPError' in result[1]
+    with caplog.at_level('WARNING', logger='astroquery'):
+        assert 'You are not authorized to download' in caplog.text
+        assert 'Please check your authentication token' in caplog.text
+
+
 ###################
 # MastClass tests #
 ###################