johanels/photoprism
1
0
Fork 0
mirror of https://github.com/photoprism/photoprism.git synced 2025-12-12 00:34:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

OAuth2: Add Client Credentials Authentication #213 #782 #808 #3730 #3943

Browse Source 
This adds standard OAuth2 client credentials and bearer token support as
well as scope-based authorization checks for REST API clients. Note that
this initial implementation should not be used in production and that
the access token limit has not been implemented yet.

Signed-off-by: Michael Mayer <michael@photoprism.app>
This commit is contained in:
Michael Mayer
2023-12-12 18:42:50 +01:00
parent e80b07795c
commit 467f7b1585
78 changed files with 2474 additions and 406 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
internal/api/session.go
View File

@@ -1,25 +1,10 @@
package api
import (
"github.com/gin-gonic/gin"
"github.com/photoprism/photoprism/internal/entity"
"github.com/photoprism/photoprism/internal/get"
"github.com/photoprism/photoprism/internal/session"
"github.com/photoprism/photoprism/pkg/clean"
)
// SessionID returns the session ID from the request context.
func SessionID(c *gin.Context) (sessId string) {
if c == nil {
// Should never happen.
return ""
}
// Get the authentication token from the HTTP headers.
return clean.ID(c.GetHeader(session.Header))
}
// Session finds the client session for the given ID or returns nil otherwise.
func Session(id string) *entity.Session {
// Skip authentication if app is running in public mode.