feat: get user info server

This commit is contained in:
Timothy Jaeryang Baek 2025-04-10 17:48:57 -07:00
parent 0d7cc22555
commit 81255d55eb
6 changed files with 225 additions and 0 deletions

View File

@ -0,0 +1,34 @@
# Include any files or directories that you don't want to be copied to your
# container here (e.g., local build artifacts, temporary files, etc.).
#
# For more help, visit the .dockerignore file reference guide at
# https://docs.docker.com/go/build-context-dockerignore/
**/.DS_Store
**/__pycache__
**/.venv
**/.classpath
**/.dockerignore
**/.env
**/.git
**/.gitignore
**/.project
**/.settings
**/.toolstarget
**/.vs
**/.vscode
**/*.*proj.user
**/*.dbmdl
**/*.jfm
**/bin
**/charts
**/docker-compose*
**/compose.y*ml
**/Dockerfile*
**/node_modules
**/npm-debug.log
**/obj
**/secrets.dev.yaml
**/values.dev.yaml
LICENSE
README.md

View File

@ -0,0 +1,51 @@
# syntax=docker/dockerfile:1
# Comments are provided throughout this file to help you get started.
# If you need more help, visit the Dockerfile reference guide at
# https://docs.docker.com/go/dockerfile-reference/
# Want to help us make this template better? Share your feedback here: https://forms.gle/ybq9Krt8jtBL3iCk7
ARG PYTHON_VERSION=3.10.12
FROM python:${PYTHON_VERSION}-slim as base
# Prevents Python from writing pyc files.
ENV PYTHONDONTWRITEBYTECODE=1
# Keeps Python from buffering stdout and stderr to avoid situations where
# the application crashes without emitting any logs due to buffering.
ENV PYTHONUNBUFFERED=1
WORKDIR /app
# Create a non-privileged user that the app will run under.
# See https://docs.docker.com/go/dockerfile-user-best-practices/
ARG UID=10001
RUN adduser \
--disabled-password \
--gecos "" \
--home "/nonexistent" \
--shell "/sbin/nologin" \
--no-create-home \
--uid "${UID}" \
appuser
# Download dependencies as a separate step to take advantage of Docker's caching.
# Leverage a cache mount to /root/.cache/pip to speed up subsequent builds.
# Leverage a bind mount to requirements.txt to avoid having to copy them into
# into this layer.
RUN --mount=type=cache,target=/root/.cache/pip \
--mount=type=bind,source=requirements.txt,target=requirements.txt \
python -m pip install -r requirements.txt
# Switch to the non-privileged user to run the application.
USER appuser
# Copy the source code into the container.
COPY . .
# Expose the port that the application listens on.
EXPOSE 8000
# Run the application.
CMD uvicorn 'main:app' --host=0.0.0.0 --port=8000

View File

@ -0,0 +1,64 @@
# 🔐 User Info Proxy API
A lightweight FastAPI microservice that forwards an Authorization Bearer token to an internal authentication server and returns user details.
## 🚀 Features
- 🔁 Forwards Bearer tokens to your internal auth endpoint
- ☁️ Async HTTP support with httpx
- 🔒 Built-in 401 & 502 error handling
- 🌍 CORS-friendly by default
## 📦 Endpoints
### GET /get_user_info
Forward your existing Bearer token and get authenticated user details.
📥 Headers:
Authorization: Bearer YOUR_TOKEN
📤 Response:
{
"id": "user-id",
"email": "user@example.com",
"name": "Jane Doe",
...
}
## ⚙️ Setup
1. Set your auth backend base URL:
```
export OPEN_WEBUI_BASE_URL=http://your-open-webui.com
```
2. Run the service:
```
uvicorn main:app --host 0.0.0.0 --reload
```
## 🧩 Environment Variables
| Name | Description | Default |
|---------------------|--------------------------------------|----------------------|
| OPEN_WEBUI_BASE_URL | Base URL of the internal auth server | http://localhost:3000 |
## 🍿 Example
curl -H "Authorization: Bearer <your_token>" http://localhost:8000/get_user_info
## 🧪 Tech Stack
- Python 3.11+
- FastAPI ⚡
- httpx 🌐
- Uvicorn 🔥
---
Made with ❤️ by your backend team.

View File

@ -0,0 +1,7 @@
services:
server:
build:
context: .
ports:
- 8000:8000

View File

@ -0,0 +1,63 @@
from fastapi import FastAPI, HTTPException, Request
from fastapi.middleware.cors import CORSMiddleware
import aiohttp
import os
OPEN_WEBUI_BASE_URL = os.getenv("OPEN_WEBUI_BASE_URL", "http://localhost:8080")
app = FastAPI(
title="User Info Proxy API",
version="1.0.0",
description="Fetch user details from the internal authentication server.",
)
app.add_middleware(
CORSMiddleware,
allow_origins=["*"], # You may restrict this to certain domains
allow_credentials=True,
allow_methods=["*"],
allow_headers=["*"],
)
@app.get(
"/get_session_user_info",
summary="Forward auth token and retrieve session user details",
description="Get user info from internal auth service using Authorization Bearer token.",
)
async def get_session_user_info(request: Request):
auth_header = request.headers.get("Authorization")
print(f"Received Authorization header: {auth_header}")
if not auth_header or not auth_header.startswith("Bearer "):
raise HTTPException(
status_code=401, detail="Missing or invalid Authorization header"
)
try:
async with aiohttp.ClientSession() as session:
async with session.get(
f"{OPEN_WEBUI_BASE_URL}/api/v1/auths/",
headers={"Authorization": auth_header},
timeout=aiohttp.ClientTimeout(total=10.0),
) as resp:
if resp.status != 200:
raise HTTPException(
status_code=resp.status, detail="Failed to retrieve user info"
)
data = await resp.json()
return {
"id": data.get("id"),
"role": data.get("role"),
"name": data.get("name"),
"email": data.get("email"),
}
except aiohttp.ClientError as exc:
raise HTTPException(
status_code=502, detail=f"Error connecting to auth service: {exc}"
)

View File

@ -0,0 +1,6 @@
fastapi
uvicorn[standard]
pydantic
python-multipart
aiohttp