Skip to content

Commit 401128e

Browse files
committed
move headers to fastapi reoute
1 parent dfe780c commit 401128e

File tree

1 file changed

+8
-18
lines changed

1 file changed

+8
-18
lines changed

horizon/enforcer/api.py

Lines changed: 8 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -564,26 +564,16 @@ async def is_allowed(
564564
)
565565
async def is_allowed_nginx(
566566
request: Request,
567+
permit_user_key: str = Header(None),
568+
permit_tenant_id: str = Header(None),
569+
permit_action: str = Header(None),
570+
permit_resource_type: str = Header(None),
567571
):
568-
user_key = get_case_insensitive(request.headers, "permit-user-key")
569-
tenant_id = get_case_insensitive(request.headers, "permit-tenant-id")
570-
action = get_case_insensitive(request.headers, "permit-action")
571-
resource_type = get_case_insensitive(request.headers, "permit-resource-type")
572-
573-
if (
574-
user_key is None
575-
or tenant_id is None
576-
or action is None
577-
or resource_type is None
578-
):
579-
raise HTTPException(
580-
status_code=status.HTTP_400_BAD_REQUEST,
581-
detail="Missing required headers: 'Permit-User-Key', 'Permit-Tenant-Id', 'Permit-Action', 'Permit-Resource-Type'",
582-
)
572+
583573
query = AuthorizationQuery(
584-
user=User(key=user_key),
585-
action=action,
586-
resource=Resource(type=resource_type, tenant=tenant_id),
574+
user=User(key=permit_user_key),
575+
action=permit_action,
576+
resource=Resource(type=permit_resource_type, tenant=permit_tenant_id),
587577
)
588578

589579
response = await _is_allowed(query, request, MAIN_POLICY_PACKAGE)

0 commit comments

Comments
 (0)