Verify ID token passed in through header

neurobagel / federation-api

REST API for query federation over multiple Neurobagel graph databases

https://federate.neurobagel.org

MIT License

0 stars 0 forks source link

Closed alyssadai closed 4 months ago

alyssadai commented 4 months ago

[x] add dependency of /query route on OAuth2 scheme
[x] verify ID token from header (?) using google-auth
[x] read in CLIENT_ID from env var, and error if unset
[x] have option to turn off authentication (if user is only deploying tools internally & doesn't want to register their query tool w/ Google)
- [x] this should then skip the CLIENT_ID check
[x] add test that request to /query w/o Authorization header or with invalid credentials leads to error

neurobagel-bot[bot] commented 3 months ago

:rocket: Issue was released in v0.3.0 :rocket: