Allow disabling OnCore auth

dfci · Dec 5, 2023 · 3b63595 · 3b63595
1 parent 088b483
commit 3b63595
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/matchminer/security.py b/matchminer/security.py
@@ -19,7 +19,7 @@
 from bson.objectid import ObjectId
 
 from matchminer import database
-from matchminer.settings import ONCORE_CURATION_AUTH_TOKEN
+from matchminer.settings import ONCORE_CURATION_AUTH_TOKEN, DISABLE_ONCORE_AUTH
 
 logging.basicConfig(level=logging.INFO, format='[%(levelname)s] %(message)s', )
 
@@ -129,6 +129,10 @@ def authorize_oncore_curation(request):
     :return: {bool} True if user is not authenticated. False if user is authenticated
     """
 
+    if DISABLE_ONCORE_AUTH:
+        logging.info("Curation UI auth disabled")
+        return False
+
     user_id = request.cookies.get('user_id')
     if user_id is None:
         return True

diff --git a/matchminer/settings.py b/matchminer/settings.py
@@ -21,6 +21,7 @@
 SLS_URL = ""
 SAML_SETTINGS = ""
 NO_AUTH = ""
+DISABLE_ONCORE_AUTH = False
 WELCOME_EMAIL = ""
 API_PORT = ""
 API_TOKEN = ""