class

PythonMiscAuthTagger

Inherits FrameworkTagger < FileHelper < Tagger < Reference < Object

Constants

SANIC_PATTERNS = [{/\@authorized\s*\(/, "Sanic @authorized decorator"}, {/\@protected\s*\(/, "Sanic @protected decorator"}, {/\@scoped\s*\(/, "Sanic @scoped decorator"}, {/sanic_jwt/, "Sanic JWT"}, {/\@auth\.login_required/, "Sanic auth login_required"}]

Sanic auth patterns

TORNADO_PATTERNS = [{/\@tornado\.web\.authenticated/, "Tornado @authenticated decorator"}, {/\@authenticated/, "Tornado @authenticated"}]

Tornado auth patterns. These are scanned only in the decorator window above a handler, so they must be decorators. The body/class signals (self.current_user, a def get_current_user override) are handled separately by check_class_auth; a bare current_user / a get_current_user( call in the decorator window is not an auth decorator and only produced false positives, so they're omitted here.

Class methods

target_techs
Source