Authentication and authorization implementation

[g2giovanni]

Dear all,
what is the fast way to implement authentication and authorization (giving write access only to specific users) in stac-fastapi? Any suggestion?

Thank you very much.

[jamesfisher-geo]

Basic auth has been implemented in stac-fastapi-elasticsearch-opensearch and in stac-fastapi-mongo

[jonhealy1]

We have a draft pr too in stac-fastapi-elasticsearch-opensearch for OAuth 2

[g2giovanni]

Unfortunately, at the moment, we're using stac-fastapi-pgstac as the backend.

[vincentsarago]

have you looked at https://fastapi.tiangolo.com/tutorial/security/ and https://fastapi.tiangolo.com/advanced/security/

it's pretty straightforward to set Authentification on fastapi application, using dependency injection or middleware.

in stac-fastapi we have https://github.com/stac-utils/stac-fastapi/blob/main/stac_fastapi/api/stac_fastapi/api/routes.py#L95-L127 which helps you add dependencies to specific route

stac-fastapi/stac_fastapi/api/tests/test_api.py

Lines 90 to 117 in 1c3546a

	def test_add_route_dependencies_after_building_api(self, collection, item):
	routes = [
	{"path": "/collections", "method": "POST", "payload": collection},
	{
	"path": "/collections/{collectionId}",
	"method": "PUT",
	"payload": collection,
	},
	{"path": "/collections/{collectionId}", "method": "DELETE", "payload": ""},
	{
	"path": "/collections/{collectionId}/items",
	"method": "POST",
	"payload": item,
	},
	{
	"path": "/collections/{collectionId}/items/{itemId}",
	"method": "PUT",
	"payload": item,
	},
	{
	"path": "/collections/{collectionId}/items/{itemId}",
	"method": "DELETE",
	"payload": "",
	},
	]
	api = self._build_api()
	api.add_route_dependencies(scopes=routes, dependencies=[Depends(must_be_bob)])
	self._assert_dependency_applied(api, routes)