Auth token not mandatory, can be provided in env var

trustgraph-ai · Dec 2, 2024 · 94df352 · 94df352
1 parent 07580a7
commit 94df352
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/trustgraph-flow/trustgraph/api/gateway/endpoint.py b/trustgraph-flow/trustgraph/api/gateway/endpoint.py
@@ -69,9 +69,9 @@ async def handle(self, request):
                 return web.HTTPUnauthorized()
             token = tokens[1]
         except:
-            return web.HTTPUnauthorized()
+            token = ""
 
-        if not self.auth.permitted(tokens[1], self.operation):
+        if not self.auth.permitted(token, self.operation):
             return web.HTTPUnauthorized()
 
         try:

diff --git a/trustgraph-flow/trustgraph/api/gateway/service.py b/trustgraph-flow/trustgraph/api/gateway/service.py
@@ -53,7 +53,7 @@
 default_pulsar_host = os.getenv("PULSAR_HOST", "pulsar://pulsar:6650")
 default_timeout = 600
 default_port = 8088
-default_api_token = None
+default_api_token = os.getenv("GATEWAY_SECRET", "")
 
 class Api:
 

diff --git a/trustgraph-flow/trustgraph/api/gateway/socket.py b/trustgraph-flow/trustgraph/api/gateway/socket.py
@@ -47,7 +47,7 @@ async def handle(self, request):
         try:
             token = request.query['token']
         except:
-            return web.HTTPUnauthorized()
+            token = ""
 
         if not self.auth.permitted(token, self.operation):
             return web.HTTPUnauthorized()