swh.auth.starlette.backends module#

class swh.auth.starlette.backends.BearerTokenAuthBackend(server_url: str, realm_name: str, client_id: str, cache: BaseCache)[source]#

Bases: AuthenticationBackend

Starlette authentication backend using Keycloak OpenID Connect authorization

An Keycloak server, realm and a cache to store access tokens must be provided

Parameters:

  • server_url – Keycloak URL

  • realm_name – Keycloak realm name

  • client_id – Keycloak client ID

  • cache – An aiocache cache instance

async authenticate(conn: HTTPConnection) → Tuple[AuthCredentials, SimpleUser] | None[source]#