highperfocused/lnbits
1
0
Fork 0
mirror of https://github.com/lnbits/lnbits.git synced 2025-03-26 17:51:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1178 from lnbits/refactor/depend_admin_user

Browse Source 
Refactor: `require_admin_user` decorator
This commit is contained in:
calle 2022-12-26 12:20:25 +01:00 committed by GitHub
commit 9968b1885c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lnbits/core/views/api.py
View File

@ -36,6 +36,7 @@ from lnbits.decorators import (
check_admin,
get_key_type,
require_admin_key,
require_admin_user,
require_invoice_key,
)
from lnbits.helpers import url_for, urlsafe_short_hash
@ -664,7 +665,7 @@ async def img(request: Request, data):
)
@core_app.get("/api/v1/audit/", dependencies=[Depends(check_admin)])
@core_app.get("/api/v1/audit", dependencies=[Depends(check_admin)])
async def api_auditor():
WALLET = get_wallet_class()
total_balance = await get_total_balance()

17
lnbits/decorators.py
View File

@ -172,6 +172,23 @@ async def get_key_type(
)
async def require_admin_user(
r: Request,
api_key_header: str = Security(api_key_header), # type: ignore
api_key_query: str = Security(api_key_query), # type: ignore
):
token = api_key_header or api_key_query
wallet = await get_key_type(r, token)
if wallet.wallet.user not in settings.lnbits_admin_users:
raise HTTPException(
status_code=HTTPStatus.FORBIDDEN, detail="Not an admin user"
)
else:
return wallet
async def require_admin_key(
r: Request,
api_key_header: str = Security(api_key_header), # type: ignore

3
lnbits/extensions/satspay/views_api.py
View File

@ -11,6 +11,7 @@ from lnbits.decorators import (
check_admin,
get_key_type,
require_admin_key,
require_admin_user,
require_invoice_key,
)
from lnbits.extensions.satspay import satspay_ext
@ -148,7 +149,7 @@ async def api_charge_balance(charge_id):
@satspay_ext.post("/api/v1/themes/{css_id}", dependencies=[Depends(check_admin)])
async def api_themes_save(
data: SatsPayThemes,
wallet: WalletTypeInfo = Depends(require_invoice_key),
wallet: WalletTypeInfo = Depends(require_admin_key),
css_id: str = Query(...),
):