Python utility helper to whitelist described routes. I used this in my FastAPI

http.py

def is_whitelisted(path: str, whitelisted_paths: list[str]) -> bool:
    for pattern in whitelisted_paths:
        # Exact match for "/"
        if pattern == "/" and path == "/":
            return True

        # Simple wildcard match: /api/v1/* matches anything under /api/v1/
        if pattern.endswith("/*"):
            base = pattern[:-1]  # keep the trailing slash
            if path.startswith(base):
                return True

        # Exact match
        if path == pattern:
            return True

    return False

# Examples
is_whitelisted('/api/v1/users', ['/api/v1/users']) # True
is_whitelisted('/api/v1/users', ['/api/v1/*']) # True
is_whitelisted('/api/v1/users', ['/api/*']) # True
is_whitelisted('/api/v1/profiles', ['/api/*']) # True
is_whitelisted('/api/v1/profiles', ['/api/v1/users', '/api/v1/profiles']) # True
is_whitelisted('/api/v1/profiles', ['/api/v1/users']) # False
is_whitelisted('/web', ['/api/*']) # False
is_whitelisted('/api/v1/users/profile', ['/api/v1/users']) # False