neurobagel / federation-api / 9929807237

97%

push

github

Add authentication to `/query` route (#104)

* add implicit OAuth flow + token verification via Google for /query route

* add dependencies for Google auth library

* add note on using OIDC auth class

* read CLIENT_ID from env var and error if unset

* refactor token util into dedicated module

* use mocked token & verification in tests

* test behaviour for invalid tokens

* add TODO to check for 'Bearer'

* add env var to disable /query auth

* check CLIENT_ID on app startup

* disable auth for tests of node fetching

* test startup check for CLIENT_ID

* refactor tests; add test of query when auth is disabled

* rename auth env var

* improve clarity of comments and messages

Co-authored-by: Sebastian Urchs <surchs@users.noreply.github.com>

* refactor mocked verify_token definition

---------

Co-authored-by: Sebastian Urchs <surchs@users.noreply.github.com>

80 of 82 new or added lines in 7 files covered. (97.56%)

558 of 575 relevant lines covered (97.04%)

1.91 hits per line