selfprivacy-rest-api/selfprivacy_api/graphql/__init__.py

"""GraphQL API for SelfPrivacy."""
# pylint: disable=too-few-public-methods
import typing

from strawberry.permission import BasePermission
from strawberry.types import Info
from strawberry.extensions import Extension

from selfprivacy_api.actions.api_tokens import is_token_valid
from selfprivacy_api.utils.localization import Localization


class IsAuthenticated(BasePermission):
    """Is authenticated permission"""

    message = "You must be authenticated to access this resource."

    def has_permission(self, source: typing.Any, info: Info, **kwargs) -> bool:
        token = info.context["request"].headers.get("Authorization")
        if token is None:
            token = info.context["request"].query_params.get("token")
        if token is None:
            return False
        return is_token_valid(token.replace("Bearer ", ""))


class LocaleExtension(Extension):
    """Parse the Accept-Language header and set the locale in the context as one of the supported locales."""

    def resolve(self, _next, root, info: Info, *args, **kwargs):
        locale = Localization().get_locale(
            info.context["request"].headers.get("Accept-Language")
        )
        info.context["locale"] = locale
        return _next(root, info, *args, **kwargs)