connexion

mirror of https://github.com/LukeHagar/connexion.git synced 2025-12-09 20:37:46 +00:00

Files

Mohab Usama a275f7b0e2 Use Authorization headers for verifying token info (#542 )

* Use Authorization headers for retrieving token info

* Fix flake8

* Adjust token info example

* Only accept Authorization headers in test

2017-11-14 18:13:41 +01:00

app.py

Ignore context args (#429 )

2017-04-05 14:32:40 +02:00

app.yaml

#148 Remove usage of HTTP_TOKENINFO_URL environment variable

2016-03-04 12:29:34 +01:00

mock_tokeninfo.py

Use Authorization headers for verifying token info (#542 )

2017-11-14 18:13:41 +01:00

mock_tokeninfo.yaml

Use Authorization headers for verifying token info (#542 )

2017-11-14 18:13:41 +01:00

README.rst

#123 add OAuth2 example with mock tokeninfo endpoint

2016-01-22 19:36:50 +01:00

README.rst

==============
OAuth2 Example
==============

This example demonstrates how to implement a resource server with Connexion.
The app will lookup OAuth2 Bearer tokens with the given token info URL.

Running:

.. code-block:: bash

    $ sudo pip3 install --upgrade connexion  # install Connexion from PyPI
    $ ./mock_tokeninfo.py &                  # start mock in background
    $ ./app.py

Now open your browser and go to http://localhost:8080/ui/ to see the Swagger UI.

You can use the hardcoded tokens to request the endpoint:

.. code-block:: bash

    $ curl http://localhost:8080/secret   # missing authentication
    $ curl -H 'Authorization: Bearer 123' http://localhost:8080/secret
    $ curl -H 'Authorization: Bearer 456' http://localhost:8080/secret