nycholas
commented
1 year ago Once the API Browser has the schema definition, we can overload the UI Template and extends that with some code that will help the API Browser put the JWT Token in the Authorization header. For example,
app.py
browse = JSONRPCBrowe(
extensions = ['myst_parser'],
parser = 'markdown',
....,
template_index='./templates/index.html'
)
app = Flask('docstring')
jsonrpc_v1 = JSONRPC(app, '/api/v1', browse=browse)./templates/index.html
{% extends "index.html" %}
{% block include_script %}
<script src="//unpkg.com/something@x/some-jwt-bundle.js"></script>
<script>
let JWTToken = {};
// Create an adapter to use the JWT Flask, seems like keycloak-adapter-js
window.JSONRPCBrowse = JSONRPCBrowse({
requestInterceptor: (request) => {
request.headers['Authorization'] = JWTToken.accessToken;
return request;
}
});
</script>
{% endblock %}
{% endblock %}It is the generic form, but the API Browse can support the specific provider by extensions, as simple as is:
app.py
browse = JSONRPCBrowe(
extensions = ['myst_parser', 'flask-jwt'],
parser = 'markdown',
....,
{'flask_jwt': {
public_key: '...',
secret_key: '...',
....,
}}
)
app = Flask('docstring')
jsonrpc_v1 = JSONRPC(app, '/api/v1', browse=browse)What do you think about that?
Talkless
We use Flask-JWT for authentication. Every JSON-RPC call needs JWT token in
Authorizationheader.Are there any ideas how to make API Browser work with this kind of authentication?
Maybe it's possible to make it extendable, to be able to add some extra form fields where JWT username/password could be provided?
Also, to extention to perform something extra (
/authrequest) before main request seems needed. Also modifying request for addingAuthorizationheader...