diff --git a/servers/get-user-info/.dockerignore b/servers/get-user-info/.dockerignore new file mode 100644 index 0000000..03a268b --- /dev/null +++ b/servers/get-user-info/.dockerignore @@ -0,0 +1,34 @@ +# Include any files or directories that you don't want to be copied to your +# container here (e.g., local build artifacts, temporary files, etc.). +# +# For more help, visit the .dockerignore file reference guide at +# https://docs.docker.com/go/build-context-dockerignore/ + +**/.DS_Store +**/__pycache__ +**/.venv +**/.classpath +**/.dockerignore +**/.env +**/.git +**/.gitignore +**/.project +**/.settings +**/.toolstarget +**/.vs +**/.vscode +**/*.*proj.user +**/*.dbmdl +**/*.jfm +**/bin +**/charts +**/docker-compose* +**/compose.y*ml +**/Dockerfile* +**/node_modules +**/npm-debug.log +**/obj +**/secrets.dev.yaml +**/values.dev.yaml +LICENSE +README.md diff --git a/servers/get-user-info/Dockerfile b/servers/get-user-info/Dockerfile new file mode 100644 index 0000000..e91fca9 --- /dev/null +++ b/servers/get-user-info/Dockerfile @@ -0,0 +1,51 @@ +# syntax=docker/dockerfile:1 + +# Comments are provided throughout this file to help you get started. +# If you need more help, visit the Dockerfile reference guide at +# https://docs.docker.com/go/dockerfile-reference/ + +# Want to help us make this template better? Share your feedback here: https://forms.gle/ybq9Krt8jtBL3iCk7 + +ARG PYTHON_VERSION=3.10.12 +FROM python:${PYTHON_VERSION}-slim as base + +# Prevents Python from writing pyc files. +ENV PYTHONDONTWRITEBYTECODE=1 + +# Keeps Python from buffering stdout and stderr to avoid situations where +# the application crashes without emitting any logs due to buffering. +ENV PYTHONUNBUFFERED=1 + +WORKDIR /app + +# Create a non-privileged user that the app will run under. +# See https://docs.docker.com/go/dockerfile-user-best-practices/ +ARG UID=10001 +RUN adduser \ + --disabled-password \ + --gecos "" \ + --home "/nonexistent" \ + --shell "/sbin/nologin" \ + --no-create-home \ + --uid "${UID}" \ + appuser + +# Download dependencies as a separate step to take advantage of Docker's caching. +# Leverage a cache mount to /root/.cache/pip to speed up subsequent builds. +# Leverage a bind mount to requirements.txt to avoid having to copy them into +# into this layer. +RUN --mount=type=cache,target=/root/.cache/pip \ + --mount=type=bind,source=requirements.txt,target=requirements.txt \ + python -m pip install -r requirements.txt + +# Switch to the non-privileged user to run the application. +USER appuser + +# Copy the source code into the container. +COPY . . + +# Expose the port that the application listens on. +EXPOSE 8000 + +# Run the application. +CMD uvicorn 'main:app' --host=0.0.0.0 --port=8000 diff --git a/servers/get-user-info/README.md b/servers/get-user-info/README.md new file mode 100644 index 0000000..6a3cb8c --- /dev/null +++ b/servers/get-user-info/README.md @@ -0,0 +1,64 @@ +# ๐Ÿ” User Info Proxy API + +A lightweight FastAPI microservice that forwards an Authorization Bearer token to an internal authentication server and returns user details. + +## ๐Ÿš€ Features + +- ๐Ÿ” Forwards Bearer tokens to your internal auth endpoint +- โ˜๏ธ Async HTTP support with httpx +- ๐Ÿ”’ Built-in 401 & 502 error handling +- ๐ŸŒ CORS-friendly by default + +## ๐Ÿ“ฆ Endpoints + +### GET /get_user_info + +Forward your existing Bearer token and get authenticated user details. + +๐Ÿ“ฅ Headers: + +Authorization: Bearer YOUR_TOKEN + +๐Ÿ“ค Response: + +{ + "id": "user-id", + "email": "user@example.com", + "name": "Jane Doe", + ... +} + +## โš™๏ธ Setup + +1. Set your auth backend base URL: + +``` +export OPEN_WEBUI_BASE_URL=http://your-open-webui.com +``` + +2. Run the service: + +``` +uvicorn main:app --host 0.0.0.0 --reload +``` + +## ๐Ÿงฉ Environment Variables + +| Name | Description | Default | +|---------------------|--------------------------------------|----------------------| +| OPEN_WEBUI_BASE_URL | Base URL of the internal auth server | http://localhost:3000 | + +## ๐Ÿฟ Example + +curl -H "Authorization: Bearer " http://localhost:8000/get_user_info + +## ๐Ÿงช Tech Stack + +- Python 3.11+ +- FastAPI โšก +- httpx ๐ŸŒ +- Uvicorn ๐Ÿ”ฅ + +--- + +Made with โค๏ธ by your backend team. diff --git a/servers/get-user-info/compose.yaml b/servers/get-user-info/compose.yaml new file mode 100644 index 0000000..9fc4d98 --- /dev/null +++ b/servers/get-user-info/compose.yaml @@ -0,0 +1,7 @@ +services: + server: + build: + context: . + ports: + - 8000:8000 + diff --git a/servers/get-user-info/main.py b/servers/get-user-info/main.py new file mode 100644 index 0000000..9218456 --- /dev/null +++ b/servers/get-user-info/main.py @@ -0,0 +1,63 @@ +from fastapi import FastAPI, HTTPException, Request +from fastapi.middleware.cors import CORSMiddleware +import aiohttp +import os + +OPEN_WEBUI_BASE_URL = os.getenv("OPEN_WEBUI_BASE_URL", "http://localhost:8080") + +app = FastAPI( + title="User Info Proxy API", + version="1.0.0", + description="Fetch user details from the internal authentication server.", +) + +app.add_middleware( + CORSMiddleware, + allow_origins=["*"], # You may restrict this to certain domains + allow_credentials=True, + allow_methods=["*"], + allow_headers=["*"], +) + + +@app.get( + "/get_session_user_info", + summary="Forward auth token and retrieve session user details", + description="Get user info from internal auth service using Authorization Bearer token.", +) +async def get_session_user_info(request: Request): + auth_header = request.headers.get("Authorization") + + print(f"Received Authorization header: {auth_header}") + + if not auth_header or not auth_header.startswith("Bearer "): + raise HTTPException( + status_code=401, detail="Missing or invalid Authorization header" + ) + + try: + async with aiohttp.ClientSession() as session: + async with session.get( + f"{OPEN_WEBUI_BASE_URL}/api/v1/auths/", + headers={"Authorization": auth_header}, + timeout=aiohttp.ClientTimeout(total=10.0), + ) as resp: + + if resp.status != 200: + raise HTTPException( + status_code=resp.status, detail="Failed to retrieve user info" + ) + + data = await resp.json() + + return { + "id": data.get("id"), + "role": data.get("role"), + "name": data.get("name"), + "email": data.get("email"), + } + + except aiohttp.ClientError as exc: + raise HTTPException( + status_code=502, detail=f"Error connecting to auth service: {exc}" + ) diff --git a/servers/get-user-info/requirements.txt b/servers/get-user-info/requirements.txt new file mode 100644 index 0000000..4d03492 --- /dev/null +++ b/servers/get-user-info/requirements.txt @@ -0,0 +1,6 @@ +fastapi +uvicorn[standard] +pydantic +python-multipart + +aiohttp \ No newline at end of file