Pass value to authentication class?

[danielniccoli]

I implemented basic authentication, where I take the username and password and do an authentication check against the Django user model. Now I have two API endpoints where I am checking if the user has a certain permission, if not I throw an AuthenticationError.

This is how it works:

class BasicAuth(HttpBasicAuth):
    def authenticate(self, request, username, password):
        user = authenticate(username=username, password=password)
        return user.pk

@api.get("/check1", auth=BasicAuth())
def get(request):
    user = User.objects.get(pk=request.auth)
    if not user.has_perm("app.permission1"):
        raise AuthenticationError()
    return {"check": 1}

@api.get("/check2", auth=BasicAuth())
def get(request):
    user = User.objects.get(pk=request.auth)
    if not user.has_perm("app.permission2"):
        raise AuthenticationError()
    return {"check": 2}

The problem I am facing now is that I want to check the permissions at the time I do the basic authentication, not afterwards. Is there any way to pass an additional parameter to the BasicAuth class, so I can do some more extensive checks per endpoint, without having to create multiple classes? Like so, for example?

# Examples
@api.get("/check1", auth=BasicAuth("app.permission1"))