Mechanism to write the auth into the user scope automatically or easily

[leoschwarz]

This is a bit hacky way right now but necessary to integrate a marimo app because the user information gets moved into the marimo.app_meta().request object.

class CopyUserMiddleware(BaseHTTPMiddleware):
    async def dispatch(self, request: Request, call_next):
        request.scope["user"] = request.scope["session"]["bfabric_session"]
        response = await call_next(request)
        return response

app.add_middleware(CopyUserMiddleware)

I will need to read up a bit on the API how to best handle this.

[leoschwarz]

More advanced

class BfabricUser(BaseUser):
    """User object that carries the bfabric session fields.
    Add whatever convenience properties you need.
    """

    def __init__(self, login: str, password: str, instance: str) -> None:
        self.bfabric_auth_login = login
        self.bfabric_auth_password = password
        self.bfabric_instance = instance

    @property
    def is_authenticated(self) -> bool:
        return True

    @property
    def display_name(self) -> str:
        return self.bfabric_auth_login

    @property
    def identity(self) -> str:
        # TODO double check
        # identity must be a string; combine instance if helpful
        if self.bfabric_instance:
            return f"{self.bfabric_instance}:{self.bfabric_auth_login}"
        return self.bfabric_auth_login or ""

    def get_bfabric_client(self) -> Bfabric:
        config = ConfigData(
            auth=BfabricAuth(login=self.bfabric_auth_login, password=self.bfabric_auth_password),
            client=BfabricClientConfig(base_url=self.bfabric_instance),
        )
        return Bfabric(config)


class SessionAuthBackend(AuthenticationBackend):
    """Authentication backend that reads bfabric_session dict from session."""

    async def authenticate(self, conn: HTTPConnection) -> tuple[AuthCredentials, BfabricUser] | None:
        bfabric_session = conn.scope.get("session", {}).get("bfabric_session")
        if not bfabric_session or not isinstance(bfabric_session, dict):
            return None
        user = BfabricUser(
            login=str(bfabric_session["bfabric_auth_login"]),
            password=str(bfabric_session["bfabric_auth_password"]),
            instance=str(bfabric_session["bfabric_instance"]),
        )
        creds = AuthCredentials(["authenticated"])
        return creds, user


app.add_middleware(AuthenticationMiddleware, backend=SessionAuthBackend())