services/api/app/middlewares/arvados_api_token.rb
def call env
    request = Rack::Request.new(env)
    params = request.params
    remote_ip = env["action_dispatch.remote_ip"]

    Thread.current[:request_starttime] = Time.now

    remote = false
    reader_tokens = nil
    if params["remote"] && request.get? && (
         request.path.start_with?('/arvados/v1/groups') ||
         request.path.start_with?('/arvados/v1/api_client_authorizations/current') ||
         request.path.start_with?('/arvados/v1/users/current'))
      # Request from a remote API server, asking to validate a salted
      # token.
      remote = params["remote"]
    elsif request.get? || params["_method"] == 'GET'
      reader_tokens = params["reader_tokens"]
      if reader_tokens.is_a? String
        reader_tokens = SafeJSON.load(reader_tokens)
      end
    end

    # Set current_user etc. based on the primary session token if a
    # valid one is present. Otherwise, use the first valid token in
    # reader_tokens.
    accepted = false
    auth = nil
    [params["api_token"],
     params["oauth_token"],
     env["HTTP_AUTHORIZATION"].andand.match(/(OAuth2|Bearer) ([!-~]+)/).andand[2],
     *reader_tokens,
    ].each do |supplied|
      next if !supplied
      try_auth = ApiClientAuthorization.
                 validate(token: supplied, remote: remote)
      if try_auth.andand.user
        auth = try_auth
        accepted = supplied
        break
      end
    end

    Thread.current[:api_client_ip_address] = remote_ip
    Thread.current[:api_client_authorization] = auth
    Thread.current[:api_client_uuid] = auth.andand.api_client.andand.uuid
    Thread.current[:api_client] = auth.andand.api_client
    Thread.current[:token] = accepted
    Thread.current[:user] = auth.andand.user

    @app.call env if @app
  end
# Create a new ArvadosApiToken handler
# +app+  The next layer of the Rack stack.
Create a new ArvadosApiToken handler
+app+  The next layer of the Rack stack.
Create a new ArvadosApiToken handler + app + The next layer of the Rack stack .
def call env
    request = Rack::Request.new(env)
    params = request.params
    remote_ip = env["action_dispatch.remote_ip"]
    Thread.current[:request_starttime] = Time.now
    remote = false
    reader_tokens = nil
    if params["remote"] && request.get? && (
         request.path.start_with?('/arvados/v1/groups') ||
         request.path.start_with?('/arvados/v1/api_client_authorizations/current') ||
         request.path.start_with?('/arvados/v1/users/current'))
      remote = params["remote"]
    elsif request.get? || params["_method"] == 'GET'
      reader_tokens = params["reader_tokens"]
      if reader_tokens.is_a? String
        reader_tokens = SafeJSON.load(reader_tokens)
      end
    end
    accepted = false
    auth = nil
    [params["api_token"],
     params["oauth_token"],
     env["HTTP_AUTHORIZATION"].andand.match(/(OAuth2|Bearer) ([!-~]+)/).andand[2],
     *reader_tokens,
    ].each do |supplied|
      next if !supplied
      try_auth = ApiClientAuthorization.
                 validate(token: supplied, remote: remote)
      if try_auth.andand.user
        auth = try_auth
        accepted = supplied
        break
      end
    end
    Thread.current[:api_client_ip_address] = remote_ip
    Thread.current[:api_client_authorization] = auth
    Thread.current[:api_client_uuid] = auth.andand.api_client.andand.uuid
    Thread.current[:api_client] = auth.andand.api_client
    Thread.current[:token] = accepted
    Thread.current[:user] = auth.andand.user
    @app.call env if @app
  end
def call env request = Rack :: Request . new ( env ) params = request . params remote_ip = env [ "action_dispatch.remote_ip" ] Thread . current [ :request_starttime ] = Time . now remote = false reader_tokens = nil if params [ "remote" ] && request . get? && ( request . path . start_with? ( '/arvados/v1/groups' ) || request . path . start_with? ( '/arvados/v1/api_client_authorizations/current' ) || request . path . start_with? ( '/arvados/v1/users/current' ) ) remote = params [ "remote" ] elsif request . get? || params [ "_method" ] == 'GET' reader_tokens = params [ "reader_tokens" ] if reader_tokens . is_a? String reader_tokens = SafeJSON . load ( reader_tokens ) end end accepted = false auth = nil [ params [ "api_token" ] , params [ "oauth_token" ] , env [ "HTTP_AUTHORIZATION" ] . andand . match ( / (OAuth2|Bearer) ([!-~]+) / ) . andand [ 2 ] , * reader_tokens , ] . each do | supplied | next if ! supplied try_auth = ApiClientAuthorization . validate ( token : supplied , remote : remote ) if try_auth . andand . user auth = try_auth accepted = supplied break end end Thread . current [ :api_client_ip_address ] = remote_ip Thread . current [ :api_client_authorization ] = auth Thread . current [ :api_client_uuid ] = auth . andand . api_client . andand . uuid Thread . current [ :api_client ] = auth . andand . api_client Thread . current [ :token ] = accepted Thread . current [ :user ] = auth . andand . user @app . call env if @app end
Create a new ArvadosApiToken handler
+app+  The next layer of the Rack stack.
Create a new ArvadosApiToken handler + app + The next layer of the Rack stack .
# Request from a remote API server, asking to validate a salted # token. # Set current_user etc. based on the primary session token if a # valid one is present. Otherwise, use the first valid token in # reader_tokens.
env