MITLibraries / alma-sapinvoices-ui / 10497266876

87%

push

github

Use Flask-Login for user session management (#60)

Why these changes are being introduced:
* The Application Load Balancer (ALB) that manages
authentication and authorization provides an access token
and user claims (info about user) in the request headers
routed to its target, the Flask app. With Flask-Login,
this data can be used to identify the 'current_user'
on the app and detect when a session may be stale.

How this addresses that need:
* Implement 'request_loader' callback method
* Add utility method to parse OIDC data from request headers
* Add 'User' class
* Add 'logout' view
* Decorate views using 'login_required'
* Add env var 'AWS_DEFAULT_REGION'
* Add env var 'LOGIN_DISABLED' to optionally turn off the
login (ignore 'login_required' decorator) for testing and development
* Add unit tests
* Add env var application configuration variable LOGIN_DISABLED
is a convenient method to globally turn off the login method
(i.e., parsing OIDC data from header) for purposes of
unit testing and running the app in Dev1 (ALB is turned off for Dev1).

Side effects of this change:
* None

Relevant ticket(s):
* https://mitlibraries.atlassian.net/browse/IN-1033

66 of 82 new or added lines in 3 files covered. (80.49%)

311 of 365 relevant lines covered (85.21%)

0.85 hits per line