allow_signed_tokens setting, closes #1856

This commit is contained in:
Simon Willison 2022-10-25 19:55:47 -07:00
commit c23fa850e7
8 changed files with 48 additions and 5 deletions

View file

@ -52,6 +52,8 @@ def permission_allowed(datasette, actor, action, resource):
@hookimpl
def actor_from_request(datasette, request):
prefix = "dstok_"
if not datasette.setting("allow_signed_tokens"):
return None
authorization = request.headers.get("authorization")
if not authorization:
return None