Optional auth

[baseplate-admin]

Hi there,

I was planning to change the response depending if the user is authenticated or not.

How to achieve this?

@api.get('',auth=AuthBearer()|None)
def optional_protected_route(request):
  if request.auth:
     return CustomResponse
  else:
     return GenericResponse

---

By optional i meant user can include token or they can just do the request without token

[vitalik]

I guess your authenticator class should return some Not-authenticated-user (like django does)

class AuthBearer(HttpBearer):
    def authenticate(self, request, token):
        if token == "supersecret":
            return AuthenticatedUser()
        else:
            return AnonymousUser()

...

@api.get('',auth=AuthBearer()|None)
def optional_protected_route(request):
  if request.auth.is_anonymous:
        return Custom
 ...

[baseplate-admin]

Ty for fast Response

But the problem is

auth=AuthBearer() | None

raises config error.

[baseplate-admin]

Any idea on this @vitalik

[baseplate-admin]

Fastapi-jwt handles it like this

https://indominusbyte.github.io/fastapi-jwt-auth/usage/optional/

[vitalik]

see prev answer - #709 (comment)

[baseplate-admin]

The correct approach would be to modify this code. ( do you want a Pull Request addressing this? )

    def __call__(self, request: HttpRequest) -> Optional[Any]:
        headers = get_headers(request)
        auth_value = headers.get(self.header)
        if not auth_value:
            return AnonymousUser()  # <---------- Modify this 
        parts = auth_value.split(" ")

        if parts[0].lower() != self.openapi_scheme:
            if settings.DEBUG:
                logger.error(f"Unexpected auth - '{auth_value}'")
            return None
        token = " ".join(parts[1:])
        return self.authenticate(request, token)

[baseplate-admin]

The solution is to override the HttpBearer class to return AnonymousUser

    def __call__(self, request: HttpRequest) -> Optional[Any]:
        headers = get_headers(request)
        auth_value = headers.get(self.header)
        if not auth_value:
            return AnonymousUser()  # if there is no key, we return AnonymousUser object
        parts = auth_value.split(" ")

        if parts[0].lower() != self.openapi_scheme:
            if settings.DEBUG:
                logger.error(f"Unexpected auth - '{auth_value}'")
            return None
        token = " ".join(parts[1:])
        return self.authenticate(request, token)

Massive thanks to @eadwinCode for his help in eadwinCode/django-ninja-extra#60 (comment)