class PythonMiscAuthTagger
- PythonMiscAuthTagger
- FrameworkTagger
- Tagger
- Reference
- Object
Defined in:
tagger/framework_taggers/python/python_misc_auth.crConstant Summary
-
SANIC_PATTERNS =
[{/\@authorized\s*\(/, "Sanic @authorized decorator"}, {/\@protected\s*\(/, "Sanic @protected decorator"}, {/\@scoped\s*\(/, "Sanic @scoped decorator"}, {/sanic_jwt/, "Sanic JWT"}, {/\@auth\.login_required/, "Sanic auth login_required"}] -
Sanic auth patterns
-
TORNADO_PATTERNS =
[{/\@tornado\.web\.authenticated/, "Tornado @authenticated decorator"}, {/\@authenticated/, "Tornado @authenticated"}] -
Tornado auth patterns. These are scanned only in the decorator window above a handler, so they must be decorators. The body/class signals (
self.current_user, adef get_current_useroverride) are handled separately bycheck_class_auth; a barecurrent_user/ aget_current_user(call in the decorator window is not an auth decorator and only produced false positives, so they're omitted here.