Commit d621d770 authored by Guillermo Sanz López's avatar Guillermo Sanz López
Browse files

add jwt required to all endpoints

parent 05db5c0f

capif_backend/backoffice_service/__main__.py

+1 −0
Original line number Diff line number Diff line
@@ -14,6 +14,7 @@ app = Flask(__name__) 
CORS(app)



# Register blueprints (routes)

# otra opciones modificar URL ->  app.register_blueprint(backoffice_routes, url_prefix="/resources")

app.register_blueprint(backoffice_routes)

app.register_blueprint(access_routes)

capif_backend/backoffice_service/controllers/default_controller.py

+13 −2
Original line number Diff line number Diff line
@@ -8,7 +8,7 @@ from flask_jwt_extended import jwt_required, get_jwt_identity 
backoffice_routes = Blueprint("backoffice_routes", __name__)

operations = Operations()   # create operations object -> operations.py





# https://10.95.82.71:8085   /resources/invokers

@backoffice_routes.route("/resources/invokers", methods=["GET"])

@jwt_required()

def get_invokers():
@@ -16,20 +16,23 @@ def get_invokers(): 


@backoffice_routes.route("/resources/numInvokers", methods=["GET"])

@jwt_required()

def get_num_invokers():

def get_num_ixnvokers():

    return operations.get_num_invokers()





@backoffice_routes.route("/resources/providers", methods=["GET"])

@jwt_required()

def get_providers():

    return operations.get_providers()



@backoffice_routes.route("/resources/numProviders", methods=["GET"])

@jwt_required()

def get_num_providers():

    return operations.get_num_providers()





@backoffice_routes.route("/resources/invokers/security/<invoker_id>", methods=["GET"])

@jwt_required()

def get_invoker_security_context(invoker_id):

    print("ESTOY EN DEFAULT CONTROLLER     INVOKER ID: ", invoker_id)

    if invoker_id == "null":
@@ -38,6 +41,7 @@ def get_invoker_security_context(invoker_id): 




@backoffice_routes.route("/events/<id>", methods=["GET"])

@jwt_required()

def get_events(id):

    if id == "null":

        return jsonify(message="Invalid events id", object=None), 400
@@ -45,42 +49,49 @@ def get_events(id): 




@backoffice_routes.route("/resources/providers/services/<id>", methods=["GET"])

@jwt_required()

def get_provider_services(id):

    if id == "null":

        return jsonify(message="Invalid apf_id", object=None), 400

    return operations.get_provider_services(id)



@backoffice_routes.route("/users/<id>", methods=["GET"])

@jwt_required()

def get_capif_user(id):

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

    return operations.get_user(id)



@backoffice_routes.route("/users", methods=["GET"])

@jwt_required()

def get_capif_users():

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

    return operations.get_user()



@backoffice_routes.route("/resources/numUsers", methods=["GET"])

@jwt_required()

def get_capif_num_users():

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

    return operations.get_num_user()



@backoffice_routes.route("/invokers/<id>", methods=["DELETE"])

@jwt_required()

def delete_invoker(id):

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

    return operations.delete_invoker(id)



@backoffice_routes.route("/providers/<id>", methods=["DELETE"])

@jwt_required()

def delete_provider(id):

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

    return operations.delete_provider(id)



@backoffice_routes.route("/users/<id>", methods=["DELETE"])

@jwt_required()

def delete_user(id):

    if id == "null":

        return jsonify(message="Invalid id", object=None), 400

capif_backend/backoffice_service/controllers/login.py

+3 −2
Original line number Diff line number Diff line
@@ -20,7 +20,8 @@ def login(): 
    if username != "superadmin" or password != "1234":

        return jsonify({"msg": "Bad username or password"}), 401



    access_token = create_access_token(identity=username)

    # identity es un dato serializable en json -> username = superadmin

    access_token = create_access_token(identity=username, expires_delta=False)

    refresh_token = create_refresh_token(identity=username)



    return jsonify(access_token=access_token, refresh_token=refresh_token)