Add scope requirements

Author: alukach

runtime/eoapi/stac/eoapi/stac/app.py

@@ -100,11 +100,28 @@ async def lifespan(app: FastAPI):
     extension = TiTilerExtension()
     extension.register(api.app, tiles_settings.titiler_endpoint)
 
+for (method, path), scopes in {
+    ("POST", "/collections"): ["stac:collection:create"],
+    ("PUT", "/collections"): ["stac:collection:update"],
+    ("DELETE", "/collections/{collection_id}"): ["stac:collection:delete"],
+    ("POST", "/collections/{collection_id}/items"): ["stac:item:create"],
+    ("PUT", "/collections/{collection_id}/items/{item_id}"): ["stac:item:update"],
+    ("DELETE", "/collections/{collection_id}/items/{item_id}"): ["stac:item:delete"],
+}.items():
+    api.add_route_dependencies(
+        [
+            {
+                "path": app.router.prefix + path,
+                "method": method,
+                "type": "http",
+            },
+        ],
+        [Security(keycloak.scheme, scopes=scopes)],
+    )
+
 
 @app.get("/index.html", response_class=HTMLResponse)
-async def viewer_page(
-    request: Request, token: Annotated[str, Security(keycloak.scheme)]
-):
+async def viewer_page(request: Request):
     """Search viewer."""
     return templates.TemplateResponse(
         "stac-viewer.html",

runtime/eoapi/stac/eoapi/stac/config.py

@@ -22,6 +22,7 @@ class _ApiSettings(pydantic.BaseSettings):
         "fields",
         "pagination",
         "context",
+        "transaction",
     ]
 
     @pydantic.validator("cors_origins")