INNER CODE UNIT · Python

_try_api_token_auth

evolution-foundation/evo-nexus · dashboard/backend/app.py:754

def _try_api_token_auth():
    """Resolve an Authorization: Bearer <token> header against DASHBOARD_API_TOKEN.
    On match, log in the configured service user for the duration of this request.
    Returns True if a valid token was found and applied, False otherwise.
    """
    expected = os.environ.get("DASHBOARD_API_TOKEN", "").strip()
    if not expected:
        return False
    header = request.headers.get("Authorization", "")
    if not header.startswith("Bearer "):
        return False
    provided = header[len("Bearer "):].strip()
    if not provided or not secrets.compare_digest(provided, expected):
        return False
    # Load service user: DASHBOARD_API_USER env var, defaults to first admin
    service_username = os.environ.get("DASHBOARD_API_USER", "").strip()
    user = None
    if service_username:

View source record →