auth_required decorator

1 files changed, 26 insertions, 0 deletions

diff --git a/api/hierarchy.py b/api/hierarchy.py
new file mode 100644
index 0000000..6c1f0af
--- /dev/null
+++ b/api/hierarchy.py
@@ -0,0 +1,26 @@
+from flask import request
+from auth.login_token import token_login
+from db import cursor
+
+ranks = ["none", "user", "moderator", "admin", "bot"]
+
+def auth_required(level):
+    def decorator(func):
+        def wrapper():
+            token = request.cookies.get("token") or ""
+            if not token: return "", 403
+
+            user_id = token_login(token)
+            if not user_id: return "", 403
+
+            user_rank_text = cursor.execute("select type from users where user_id = ?", [user_id]).fetchone()[0]
+
+            required_rank = ranks.index(level)
+            user_rank = ranks.index(user_rank_text)
+            if required_rank > user_rank: return "", 403
+
+            return func(user_id)
+        wrapper.__name__ = func.__name__
+        return wrapper
+    return decorator
+