def before_request(): """ This is executed before the request """ # remove session from param and gather all parameters, either # from the Form data or from JSON in the request body. request.all_data = remove_session_from_param(request.values, request.data) # Verify the authtoken! authtoken = request.all_data.get("authtoken") r = verify_auth_token(authtoken, ["user", "admin"]) request.PI_username = r.get("username") request.PI_realm = r.get("realm") request.PI_role = r.get("role")
def before_request(): """ This is executed before the request """ request.all_data = remove_session_from_param(request.values, request.data) # Create a policy_object, that reads the database audit settings # and contains the complete policy definition during the request. # This audit_object can be used in the postpolicy and prepolicy and it # can be passed to the innerpolicies. g.policy_object = PolicyClass() g.audit_object = getAudit(current_app.config) g.audit_object.log({"success": False, "action_detail": "", "client": request.remote_addr, "client_user_agent": request.user_agent.browser, "privacyidea_server": request.host, "action": "%s %s" % (request.method, request.url_rule), "info": ""})