houqp commented on a change in pull request #10594:
URL: https://github.com/apache/airflow/pull/10594#discussion_r483749253
##########
File path: airflow/api_connexion/security.py
##########
@@ -16,25 +16,63 @@
# under the License.
from functools import wraps
-from typing import Callable, TypeVar, cast
+from typing import Callable, Optional, Sequence, Tuple, TypeVar, cast
from flask import Response, current_app
-from airflow.api_connexion.exceptions import Unauthenticated
+from airflow.api_connexion.exceptions import PermissionDenied, Unauthenticated
T = TypeVar("T", bound=Callable) # pylint: disable=invalid-name
-def requires_authentication(function: T):
- """Decorator for functions that require authentication"""
+def check_authentication():
+ """Checks that the request has valid authorization information."""
+ response = current_app.api_auth.requires_authentication(Response)()
+ if response.status_code != 200:
+ # since this handler only checks authentication, not authorization,
+ # we should always return 401
+ raise Unauthenticated(headers=response.headers)
- @wraps(function)
- def decorated(*args, **kwargs):
- response = current_app.api_auth.requires_authentication(Response)()
- if response.status_code != 200:
- # since this handler only checks authentication, not authorization,
- # we should always return 401
- raise Unauthenticated(headers=response.headers)
- return function(*args, **kwargs)
- return cast(T, decorated)
+def check_authorization(
+ permissions: Optional[Sequence[Tuple[str, str]]] = None, dag_id:
Optional[int] = None
+):
Review comment:
could you annotate the return type as well?
```suggestion
) -> None:
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
