mirror of
https://github.com/fuckpiracyshield/api.git
synced 2024-05-20 05:56:19 +02:00
70 lines
2.4 KiB
Python
70 lines
2.4 KiB
Python
import sys
|
|
import os
|
|
|
|
current = os.path.dirname(os.path.realpath(__file__))
|
|
parent = os.path.dirname(current)
|
|
sys.path.append(parent)
|
|
|
|
import tornado
|
|
|
|
from ioutils.base import BaseHandler
|
|
from ioutils.errors import ErrorCode, ErrorMessage
|
|
|
|
from piracyshield_service.security.blacklist.exists_by_refresh_token import SecurityBlacklistExistsByRefreshTokenService
|
|
|
|
from piracyshield_service.authentication.refresh_access_token import AuthenticationRefreshAccessTokenService
|
|
|
|
from piracyshield_component.exception import ApplicationException
|
|
|
|
class AuthenticationRefreshHandler(BaseHandler):
|
|
|
|
"""
|
|
Get another JWT access token once the main has expired.
|
|
"""
|
|
|
|
optional_fields = [
|
|
'refresh_token'
|
|
]
|
|
|
|
async def post(self):
|
|
# use stored refresh token when available
|
|
refresh_token = self.get_refresh_cookie()
|
|
|
|
# if no cookie available, generate a new access_token via POSTed refresh_token
|
|
if not refresh_token:
|
|
# if no refresh_token is found, we have an error
|
|
if self.handle_post(required_fields = None, optional_fields = self.optional_fields) == False:
|
|
return
|
|
|
|
if not self.request_data.get('refresh_token'):
|
|
return self.error(status_code = 401, error_code = ErrorCode.MISSING_REFRESH_TOKEN, message = ErrorMessage.MISSING_REFRESH_TOKEN)
|
|
|
|
refresh_token = self.request_data.get('refresh_token')
|
|
|
|
try:
|
|
security_blacklist_exists_by_refresh_token_service = SecurityBlacklistExistsByRefreshTokenService()
|
|
|
|
if security_blacklist_exists_by_refresh_token_service.execute(
|
|
refresh_token = refresh_token
|
|
) == True:
|
|
self.error(status_code = 401, error_code = ErrorCode.TOKEN_EXPIRED, message = ErrorMessage.TOKEN_EXPIRED)
|
|
|
|
return False
|
|
|
|
authentication_refresh_access_token_service = AuthenticationRefreshAccessTokenService()
|
|
|
|
access_token = await tornado.ioloop.IOLoop.current().run_in_executor(
|
|
None,
|
|
authentication_refresh_access_token_service.execute,
|
|
refresh_token,
|
|
self.ip_address
|
|
)
|
|
|
|
# return the access_token
|
|
self.success(data = {
|
|
'access_token': access_token
|
|
})
|
|
|
|
except ApplicationException as e:
|
|
self.error(status_code = 400, error_code = e.code, message = e.message)
|