pre-push commit

battleflow/security.py

@@ -0,0 +1,12 @@
+from functools import wraps
+from flask import request, abort, current_app
+
+def require_token(f):
+    @wraps(f)
+    def wrapper(*args, **kwargs):
+        expected = current_app.config.get("COMBAT_TOKEN")
+        supplied = request.args.get("token") or request.headers.get("X-Token")
+        if not expected or supplied != expected:
+            abort(401)
+        return f(*args, **kwargs)
+    return wrapper