@@ -564,26 +564,16 @@ async def is_allowed(
564564 )
565565 async def is_allowed_nginx (
566566 request : Request ,
567+ permit_user_key : str = Header (None ),
568+ permit_tenant_id : str = Header (None ),
569+ permit_action : str = Header (None ),
570+ permit_resource_type : str = Header (None ),
567571 ):
568- user_key = get_case_insensitive (request .headers , "permit-user-key" )
569- tenant_id = get_case_insensitive (request .headers , "permit-tenant-id" )
570- action = get_case_insensitive (request .headers , "permit-action" )
571- resource_type = get_case_insensitive (request .headers , "permit-resource-type" )
572-
573- if (
574- user_key is None
575- or tenant_id is None
576- or action is None
577- or resource_type is None
578- ):
579- raise HTTPException (
580- status_code = status .HTTP_400_BAD_REQUEST ,
581- detail = "Missing required headers: 'Permit-User-Key', 'Permit-Tenant-Id', 'Permit-Action', 'Permit-Resource-Type'" ,
582- )
572+
583573 query = AuthorizationQuery (
584- user = User (key = user_key ),
585- action = action ,
586- resource = Resource (type = resource_type , tenant = tenant_id ),
574+ user = User (key = permit_user_key ),
575+ action = permit_action ,
576+ resource = Resource (type = permit_resource_type , tenant = permit_tenant_id ),
587577 )
588578
589579 response = await _is_allowed (query , request , MAIN_POLICY_PACKAGE )
0 commit comments