CERC/api_v1.4
58
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

reintroduce security for reverse lockup

Browse Source
This commit is contained in:
Guille Gutierrez 2023-04-13 09:44:37 -04:00
parent 8759a5cea3
commit cc03524585
2 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hub_api/buildings/meb.py
View File

@ -21,9 +21,9 @@ class Meb(Resource, Config):
_session = refresh_session(session_id, token, application_uuid) _session = refresh_session(session_id, token, application_uuid)
if _session is None: if _session is None:
return Response(json.dumps({'error': 'unauthorized'}), status=403) return Response(json.dumps({'error': 'unauthorized'}), status=403)
token = {'token': _session['token']}
application_id = session(session_id)['application_id'] application_id = session(session_id)['application_id']
user_id = session(session_id)['user_id'] user_id = session(session_id)['user_id']
token = {'token': _session['token']}
payload = request.get_json() payload = request.get_json()
results = self.export_db_factory.results(user_id, application_id, payload) results = self.export_db_factory.results(user_id, application_id, payload)
if results == {}: if results == {}:

12
hub_api/geolocation/reverse.py
View File

@ -2,10 +2,11 @@ import json
import math import math
from pathlib import Path from pathlib import Path
from flask import Response from flask import Response, request
from flask.views import MethodView from flask.views import MethodView
from hub_api.config import Config from hub_api.config import Config
from hub_api.helpers.session_helper import refresh_session
class Reverse(MethodView, Config): class Reverse(MethodView, Config):
@ -14,6 +15,13 @@ class Reverse(MethodView, Config):
self._reverse_path = Path(Path(__file__).parent.parent / 'data/cities15000.txt').resolve() self._reverse_path = Path(Path(__file__).parent.parent / 'data/cities15000.txt').resolve()
def get(self, latitude: float, longitude: float): def get(self, latitude: float, longitude: float):
session_id = request.headers.get('session_id', None)
token = request.headers.get('token', None)
application_uuid = request.headers.get('application_uuid', None)
_session = refresh_session(session_id, token, application_uuid)
if _session is None:
return Response(json.dumps({'error': 'unauthorized'}), status=403)
token = {'token': _session['token']}
latitude = float(latitude) latitude = float(latitude)
longitude = float(longitude) longitude = float(longitude)
distance = math.inf distance = math.inf
@ -31,5 +39,5 @@ class Reverse(MethodView, Config):
distance = new_distance distance = new_distance
country = file_country_code country = file_country_code
city = file_city_name city = file_city_name
return Response(json.dumps({'country': country, 'city':city}), status=200) return Response(json.dumps({'country': country, 'city':city}), status=200, headers=token)