Francesco Bartoli francbartoli

Security and spatial IT geek with opinionated mind to openness. Hugely passionate of mountain landscape and activities.

francbartoli / fastapi_google_authentication_javascript.py

Created June 2, 2019 12:38 — forked from nilsdebruin/fastapi_google_authentication_javascript.py

	google_login_javascript_client = f"""<!DOCTYPE html>
	<html itemscope itemtype="http://schema.org/Article">
	<head>
	<meta charset="UTF-8">
	<meta name="google-signin-client_id" content="{CLIENT_ID}">
	<title>Google Login</title><script src="https://apis.google.com/js/platform.js" async defer></script>
	<body>
	<div class="g-signin2" data-onsuccess="onSignIn"></div>
	<script>function onSignIn(googleUser) {{

francbartoli / fastapi_basic_login_basic.py

Created June 2, 2019 12:37 — forked from nilsdebruin/fastapi_basic_login_basic.py

	@app.get("/login_basic")
	async def login_basic(auth: BasicAuth = Depends(basic_auth)):
	if not auth:
	response = Response(headers={"WWW-Authenticate": "Basic"}, status_code=401)
	return response

	try:
	decoded = base64.b64decode(auth).decode("ascii")
	username, _, password = decoded.partition(":")
	user = authenticate_user(fake_users_db, username, password)

francbartoli / fastapi_basic_logout.py

Created June 2, 2019 12:37 — forked from nilsdebruin/fastapi_basic_logout.py

	@app.get("/logout")
	async def route_logout_and_remove_cookie():
	response = RedirectResponse(url="/")
	response.delete_cookie("Authorization", domain="localtest.me")
	return response

francbartoli / fastapi_basic_basic_class.py

Created June 2, 2019 12:37 — forked from nilsdebruin/fastapi_basic_basic_class.py

	class BasicAuth(SecurityBase):
	def __init__(self, scheme_name: str = None, auto_error: bool = True):
	self.scheme_name = scheme_name or self.__class__.__name__
	self.auto_error = auto_error

	async def __call__(self, request: Request) -> Optional[str]:
	authorization: str = request.headers.get("Authorization")
	scheme, param = get_authorization_scheme_param(authorization)
	if not authorization or scheme.lower() != "basic":
	if self.auto_error:

francbartoli / fastapi_api_key_secure_endpoint.py

Created June 2, 2019 12:36 — forked from nilsdebruin/fastapi_api_key_secure_endpoint.py

	@app.get("/secure_endpoint", tags=["test"])
	async def get_open_api_endpoint(api_key: APIKey = Depends(get_api_key)):
	response = "How cool is this?"
	return response

francbartoli / fastapi_api_key_get_api_key.py

Created June 2, 2019 12:36 — forked from nilsdebruin/fastapi_api_key_get_api_key.py

	async def get_api_key(
	api_key_query: str = Security(api_key_query),
	api_key_header: str = Security(api_key_header),
	api_key_cookie: str = Security(api_key_cookie),
	):

	if api_key_query == API_KEY:
	return api_key_query
	elif api_key_header == API_KEY:
	return api_key_header

francbartoli / fastapi_google_authentication_login_endpoints.py

Created June 2, 2019 12:35 — forked from nilsdebruin/fastapi_google_authentication_login_endpoints.py

	@app.get("/google_login_client", tags=["security"])
	def google_login_client():

	return HTMLResponse(google_login_javascript_client)


	@app.get("/google_login_server", tags=["security"])
	def google_login_server():

	return HTMLResponse(google_login_javascript_server)

francbartoli / fastapi_basic_oauth2_cookie_class.py

Created June 2, 2019 12:35 — forked from nilsdebruin/fastapi_basic_oauth2_cookie_class.py

	class OAuth2PasswordBearerCookie(OAuth2):
	def __init__(
	self,
	tokenUrl: str,
	scheme_name: str = None,
	scopes: dict = None,
	auto_error: bool = True,
	):
	if not scopes:
	scopes = {}

francbartoli / fastapi_google_authentication_user_functions.py

Created June 2, 2019 12:34 — forked from nilsdebruin/fastapi_google_authentication_user_functions.py

	def get_user_by_email(db, email: str):
	for username, value in db.items():
	if value.get("email") == email:
	user_dict = db[username]
	return User(**user_dict)


	def authenticate_user_email(fake_db, email: str):
	user = get_user_by_email(fake_db, email)
	if not user:

francbartoli / Apache:GeoNode SSL-TLS Non LE Authority

Created February 4, 2019 13:59

Add custom certs to geonode

	# - Close port 8080 for inbound networking
	# - Edit your local_settings to use proxy /geonode (and not port 8080)
	# - Add following to local_settings: AVATAR_GRAVATAR_SSL = True
	# - make sure mod_ssl is active: $ a2enmod ssl

	# add certs to your server
	# change vhost config as shown below

	# export database
	$ pg_dump -U geonode -d geonode > /tmp/geonode.sql