Esempio n. 1
0
 def decorated(*args, **kwargs):
     token_header = request.headers.get('authorization', None)
     if token_header:
         token_hash = token_header[6:]
         token_8 = base64.b64decode(token_hash)
         token = token_8[:-1]
         g.current_user = User.verify_auth_token(token)
         if not g.current_user.is_administrator():
             abort(403)
         return f(*args, **kwargs)
Esempio n. 2
0
 def decorated(*args, **kwargs):
     token_header = request.headers.get('authorization', None)
     if token_header:
         token_hash = token_header[6:]
         token_8 = base64.b64decode(token_hash)
         token = token_8[:-1]
         g.current_user = User.verify_auth_token(token)
         if not g.current_user.is_administrator():
             abort(403)
         return f(*args, **kwargs)
Esempio n. 3
0
 def decorated(*args, **kwargs):
     token_header = request.headers.get('authorization', None)
     if token_header:
         token_hash = token_header[6:]
         token_8 = base64.b64decode(token_hash)
         token = token_8[:-1]
         g.current_user = User.verify_auth_token(token)
         if not g.current_user.can(Permission.MODERATE_COMMENTS):
             abort(403)
         return f(*args, **kwargs)
     else:
         abort(401)