aiohttp-security/aiohttp_security/abc.py

51 lines
1.5 KiB
Python
Raw Normal View History

2015-07-08 17:30:24 +00:00
import abc
import asyncio
# see http://plope.com/pyramid_auth_design_api_postmortem
class AbstractIdentityPolicy(metaclass=abc.ABCMeta):
@asyncio.coroutine
@abc.abstractmethod
def identify(self, request):
"""Return the claimed identity of the user associated request or
2015-07-08 17:30:24 +00:00
``None`` if no identity can be found associated with the request."""
pass
@asyncio.coroutine
@abc.abstractmethod
def remember(self, request, response, identity, **kwargs):
2015-07-08 17:30:24 +00:00
"""Remember identity.
Modify response object by filling it's headers with remembered user.
2015-07-08 17:30:24 +00:00
An individual identity policy and its consumers can decide on
the composition and meaning of **kw.
"""
pass
@asyncio.coroutine
@abc.abstractmethod
def forget(self, request, response):
""" Modify response which can be used to 'forget' the
2015-07-08 17:30:24 +00:00
current identity on subsequent requests."""
pass
class AbstractAuthorizationPolicy(metaclass=abc.ABCMeta):
@asyncio.coroutine
@abc.abstractmethod
def permits(self, identity, permission, context=None):
""" Return True if the identity is allowed the permission in the
current context, else return False"""
pass
@asyncio.coroutine
@abc.abstractmethod
def authorized_userid(self, identity):
""" Return the user_id of the user identified by the identity
or 'None' if no user exists related to the identity """
pass