_jYddlmZddlmZddlmZddlmZmZm Z m Z m Z ddl m Z Gdde ZGdd e Zd S) )Dict) HTTPException)override) AuthzAction AuthzResourceServerAuthenticationProviderServerAuthorizationProvider UserIdentity)SystemcBeZdZdZedeeefdefdZdS)ExampleAuthenticationProviderzIn practice the tenant would likely be resolved from some other opaque value (e.g. key/token). Here, it's just passed directly as a header for simplicity.headersreturncLtd|ddS)Ntestzx-tenant)user_idtenant)r get)selfrs k/var/www/FlaskApp/flask-venv/lib/python3.11/site-packages/chromadb/test/client/test_database_tenant_auth.pyauthenticate_or_raisez3ExampleAuthenticationProvider.authenticate_or_raises-;;z400    N) __name__ __module__ __qualname____doc__rrstrr rrrr r sTee  T#s(^    X   rr c TeZdZdZdeddffd Zededede ddfd Z xZ S) ExampleAuthorizationProviderzUA simple authz provider that asserts the user's tenant matches the resource's tenant.systemrNcbt||j|_dS)N)super__init__settings _settings)rr! __class__s rr$z%ExampleAuthorizationProvider.__init__s(    ruseractionresourcec~|jdS|tjkrdS|j|jkrtdddS)Ni Unauthorized) status_codedetail)rrRESETr)rr(r)r*s rauthorize_or_raisez/ExampleAuthorizationProvider.authorize_or_raise sN ;  F [& & & F ;(/ ) )CGGG G * )r) rrrrr r$rr rrr0 __classcell__)r's@rr r s__)v)$)))))) H  H*5 HAN H  H H HX H H H H Hrr N)typingrfastapir overridesr chromadb.authrrrr r chromadb.configr r r rrrr7s!!!!!!#"""""     $@   HHHHH#>HHHHHr