Add Authentication and Authorization logic.

[AndreiDrang]

No description provided.

[kemingy]

Awesome! Really appreciate your contribution.

Another thing I want to talk about is, for Authentication Error, should we return ValidationError(422) or AuthenticationError(401 or 403)?

[AndreiDrang]

Another thing I want to talk about is, for Authentication Error, should we return ValidationError(422) or AuthenticationError(401 or 403)?

I'm not sure that hardcoded Errors are good, maybe some flexibility is better.

Cause, for example in my case I not use 422 error from swagger config, I always return 200 code and put error info in payload under specific key, and frontend developers ask me questions about "422 error from swagger" and when it rises 😃

But I think, that 401 error will be better. Or we can just print some WARNING message(like SQLAlchemy) if user sets security key for route, but not set 401 or 403 error in resp.

[kemingy]

I'm not sure that hardcoded Errors are good, maybe some flexibility is better.

Cause, for example in my case I not use 422 error from swagger config, I always return 200 code and put error info in payload under specific key, and frontend developers ask me questions about "422 error from swagger" and when it rises 😃

But I think, that 401 error will be better. Or we can just print some WARNING message(like SQLAlchemy) if user sets security key for route, but not set 401 or 403 error in resp.

We can use 401 as the default one. I also provide before_hook for the user to change the request validation error response body.

[kemingy]

Please run make lint and make test before the push.

[Qparrot]

Hello,
Do you know if it is now possible to add Authorization logic ?
When I search for "security_scheme", "authorization" I found no related page on the SpecTree documentation.

thank you for all the work :), Spectree is great!

[kemingy]

Do you know if it is now possible to add Authorization logic ?

@Qparrot I haven't added docs for this part. But you can refer to the test file

spectree/tests/test_plugin_flask.py

Line 38 in f5e56e5

api_secure = SpecTree("flask", security_schemes=SECURITY_SCHEMAS)

and the examples on the bottom of that file.

[kemingy]

Hello,
Do you know if it is now possible to add Authorization logic ?
When I search for "security_scheme", "authorization" I found no related page on the SpecTree documentation.

The new PR #151 added the related document in the README. @Qparrot