身份治理服务限时活动

from flask import Flask, request, jsonify
from functools import wraps

app = Flask(__name__)

# 模拟用户数据库
users = {
    'user1': {'password': 'pass1', 'roles': ['admin']},
    'user2': {'password': 'pass2', 'roles': ['user']}
}

def require_role(role):
    def decorator(f):
        @wraps(f)
        def decorated_function(*args, **kwargs):
            auth = request.authorization
            if not auth or auth.username not in users or auth.password != users[auth.username]['password']:
                return jsonify({'message': 'Authentication required'}), 401
            if role not in users[auth.username]['roles']:
                return jsonify({'message': 'Permission denied'}), 403
            return f(*args, **kwargs)
        return decorated_function
    return decorator

@app.route('/admin')
@require_role('admin')
def admin_route():
    return jsonify({'message': 'Welcome, Admin!'})

@app.route('/user')
@require_role('user')
def user_route():
    return jsonify({'message': 'Welcome, User!'})

if __name__ == '__main__':
    app.run(debug=True)