FilesExpand file tree

 main

/

middleware.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

85 lines (65 loc) · 2.65 KB

 main

/

middleware.py

Copy path

Top

File metadata and controls

• Code
• Blame

85 lines (65 loc) · 2.65 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

# Copyright 2021 Google LLC

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

from functools import wraps

from typing import Any, Callable, Dict

import firebase_admin

from firebase_admin import auth # noqa: F401

from flask import request, Response

import structlog

default_app = firebase_admin.initialize_app()

# [START cloudrun_user_auth_jwt]

def jwt_authenticated(func: Callable[..., int]) -> Callable[..., int]:

@wraps(func)

def decorated_function(*args: Any, **kwargs: Any) -> Any:

header = request.headers.get("Authorization", None)

if header:

token = header.split(" ")[1]

try:

decoded_token = firebase_admin.auth.verify_id_token(token)

except Exception as e:

logger.exception(e)

return Response(status=403, response=f"Error with authentication: {e}")

else:

return Response(status=401)

request.uid = decoded_token["uid"]

return func(*args, **kwargs)

return decorated_function

# [END cloudrun_user_auth_jwt]

# adapted from https://github.com/ymotongpoo/cloud-logging-configurations/blob/master/python/structlog/main.py

def field_name_modifier(

logger: structlog._loggers.PrintLogger, log_method: str, event_dict: Dict

) -> Dict:

# Changes the keys for some of the fields, to match Cloud Logging's expectations

event_dict["severity"] = event_dict["level"]

del event_dict["level"]

event_dict["message"] = event_dict["event"]

del event_dict["event"]

return event_dict

def getJSONLogger() -> structlog._config.BoundLoggerLazyProxy:

# extend using https://www.structlog.org/en/stable/processors.html

structlog.configure(

processors=[

structlog.stdlib.add_log_level,

structlog.stdlib.PositionalArgumentsFormatter(),

field_name_modifier,

structlog.processors.TimeStamper("iso"),

structlog.processors.JSONRenderer(),

],

wrapper_class=structlog.stdlib.BoundLogger,

)

return structlog.get_logger()

logger = getJSONLogger()

def logging_flush() -> None:

# Setting PYTHONUNBUFFERED in Dockerfile ensured no buffering

pass