openreplay/ee/api/auth/auth_project.py

import logging

from fastapi import Request
from starlette import status
from starlette.exceptions import HTTPException

import schemas
from chalicelib.core import projects
from or_dependencies import OR_context

logger = logging.getLogger(__name__)


class ProjectAuthorizer:
    def __init__(self, project_identifier):
        self.project_identifier: str = project_identifier

    async def __call__(self, request: Request) -> None:
        if len(request.path_params.keys()) == 0 or request.path_params.get(self.project_identifier) is None:
            return
        current_user: schemas.CurrentContext = await OR_context(request)
        value = request.path_params[self.project_identifier]
        user_id = current_user.user_id if request.state.authorizer_identity == "jwt" else None
        if (self.project_identifier == "projectId" \
            and not projects.is_authorized(project_id=value, tenant_id=current_user.tenant_id,
                                           user_id=user_id)) \
                or (self.project_identifier == "projectKey" \
                    and not projects.is_authorized(
                    project_id=projects.get_internal_project_id(value),
                    tenant_id=current_user.tenant_id, user_id=user_id)):
            logger.debug("unauthorized project")
            logger.debug(value)
            raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="unauthorized project.")