Fixed #4 - api key authentication

docs/api.yml

@@ -139,6 +139,13 @@ paths:
     post:
       summary: Adds a new measurement. Non-existent device or sensor will be created automatically.
       operationId: addMeasurement
+      parameters:
+        - in: header
+          name: apiKey
+          description: The api key
+          required: true
+          schema:
+            type: string
       requestBody:
         description: Measurement to add
         required: true

settings-example.json

@@ -11,6 +11,7 @@
         "databasePath": "storageLeaf.db"
     },
     "api": {
-        "url": "http://localhost:10003"
+        "url": "http://localhost:10003",
+        "key": ""
     }
 }
\ No newline at end of file

src/blueprints/Routes.py

@@ -7,6 +7,7 @@ import yaml
 from flask import Blueprint, request, jsonify, render_template
 
 from logic import Constants
+from logic.AuthenticationWrapper import require_api_key
 from logic.Database import Database
 from logic.RequestValidator import ValidationError, RequestValidator
 
@@ -96,6 +97,7 @@ def construct_blueprint(settings, version):
         return jsonify(database.get_all_measurements_for_sensor(sensorID))
 
     @routes.route('/measurements', methods=['POST'])
+    @require_api_key(password=settings['api']['key'])
     def addMeasurement():
         try:
             parameters = RequestValidator.validate(request, DeviceParameters.get_values())

src/logic/AuthenticationWrapper.py

+from functools import wraps
+
+from flask import request, jsonify
+
+
+def require_api_key(password):
+    def wrap_route(func):
+        @wraps(func)
+        def check_api_key(*args, **kwargs):
+            apiKey = request.headers.get('apiKey')
+            if not apiKey:
+                return jsonify({'message': 'apiKey missing'}), 401
+
+            if apiKey == password:
+                # redirect to requested url
+                return func(*args, **kwargs)
+
+            return jsonify({'message': 'apiKey invalid'}), 401
+
+        return check_api_key
+
+    return wrap_route