dekun
b733e551a0
Add scripts/normalize_ambiguous_unicode.py; fix corrupted patch_instance_theme_templates.py. Preserves curly quotes in string literals; removes Git homoglyph warnings on .env.example. Co-authored-by: Cursor <cursoragent@cursor.com>
37 lines
827 B
Python
37 lines
827 B
Python
"""中控调用实例 API 时的鉴权(Flask request 头 X-Hub-Token).SSO 见 hub_sso.py."""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
|
|
from lib.hub.hub_sso import (
|
|
HUB_SSO_TTL_SEC,
|
|
hub_bridge_token,
|
|
mint_hub_sso_token,
|
|
safe_next_path,
|
|
verify_hub_sso_token,
|
|
)
|
|
|
|
__all__ = [
|
|
"HUB_SSO_TTL_SEC",
|
|
"hub_bridge_token",
|
|
"mint_hub_sso_token",
|
|
"safe_next_path",
|
|
"verify_hub_sso_token",
|
|
"request_allowed",
|
|
]
|
|
|
|
|
|
def request_allowed(session_logged_in: bool, auth_disabled: bool) -> bool:
|
|
if auth_disabled or session_logged_in:
|
|
return True
|
|
tok = hub_bridge_token()
|
|
if not tok:
|
|
return False
|
|
try:
|
|
from flask import request
|
|
except ImportError:
|
|
return False
|
|
if request.headers.get("X-Hub-Token") == tok:
|
|
return True
|
|
return False
|