Odysseus v1.0

core/middleware.py

@@ -0,0 +1,100 @@
+# src/middleware.py
+# Shared middleware, decorators, and request helpers
+
+import os
+import secrets
+
+from fastapi import HTTPException, Request
+from starlette.middleware.base import BaseHTTPMiddleware
+from starlette.responses import Response
+
+
+# Per-process token that lets the in-app tool layer hit admin-gated
+# routes via HTTP loopback (the agent's tool calls don't carry the
+# admin user's session cookie). Set once at import; tools read the
+# same value from this module. Never persisted or exposed externally.
+INTERNAL_TOOL_TOKEN = os.environ.get("ODYSSEUS_INTERNAL_TOKEN") or secrets.token_hex(32)
+INTERNAL_TOOL_HEADER = "X-Odysseus-Internal-Token"
+
+
+def require_admin(request: Request):
+    """Raise 403 if the current user isn't an admin.
+    Allows access when auth is explicitly disabled, or when the request carries
+    the in-process internal-tool token used by loopback agent tools.
+    """
+    # In-process bypass for tool-layer loopback calls. Two paths:
+    # (a) header-direct (caller set X-Odysseus-Internal-Token), or
+    # (b) the auth middleware already validated the token and stamped
+    #     request.state.current_user = "internal-tool".
+    try:
+        if request.headers.get(INTERNAL_TOOL_HEADER) == INTERNAL_TOOL_TOKEN:
+            return
+        if getattr(request.state, "current_user", None) == "internal-tool":
+            return
+    except Exception:
+        pass
+
+    auth_mgr = getattr(request.app.state, "auth_manager", None)
+    if os.getenv("AUTH_ENABLED", "true").lower() == "false":
+        return
+    if not auth_mgr or not auth_mgr.is_configured:
+        raise HTTPException(403, "Admin only")
+    user = getattr(request.state, "current_user", None)
+    if not user or not auth_mgr.is_admin(user):
+        raise HTTPException(403, "Admin only")
+
+
+class SecurityHeadersMiddleware(BaseHTTPMiddleware):
+    """Add standard security headers to all responses."""
+
+    async def dispatch(self, request: Request, call_next) -> Response:
+        # Generate a per-request nonce for inline scripts
+        nonce = secrets.token_hex(16)
+        request.state.csp_nonce = nonce
+
+        response = await call_next(request)
+        path = request.url.path
+
+        # Tool render endpoints are served inside iframes — allow framing by self
+        is_tool_render = path.startswith("/api/tools/") and path.endswith("/render")
+        # Visual report pages are self-contained HTML — need inline scripts + external images
+        is_report = path.startswith("/api/research/report/")
+
+        response.headers["X-Content-Type-Options"] = "nosniff"
+        response.headers["Referrer-Policy"] = "no-referrer"
+
+        if is_report:
+            response.headers["Content-Security-Policy"] = (
+                "default-src 'self'; "
+                "script-src 'self' 'unsafe-inline'; "
+                "style-src 'self' 'unsafe-inline'; "
+                "font-src 'self'; "
+                "img-src 'self' data: blob: https:; "
+                "connect-src 'self'; "
+                "frame-ancestors 'none'"
+            )
+        elif is_tool_render:
+            # Tool iframe content: skip all framing headers — the iframe's
+            # sandbox="allow-scripts" attribute provides isolation.
+            # Don't overwrite the route's own restrictive CSP either.
+            pass
+        else:
+            response.headers["X-Frame-Options"] = "DENY"
+            # NOTE: `style-src 'unsafe-inline'` is intentionally retained.
+            # `static/index.html` and `static/login.html` ship inline <style>
+            # blocks, and several JS modules build runtime `style=""` attrs.
+            # Migrating to nonce-only requires templating the HTML files +
+            # auditing every JS-set style attribute. Since inline styles
+            # don't execute script, the residual risk is visual-only.
+            response.headers["Content-Security-Policy"] = (
+                "default-src 'self'; "
+                f"script-src 'self' 'nonce-{nonce}' https://cdn.jsdelivr.net; "
+                "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
+                "font-src 'self' https://cdn.jsdelivr.net; "
+                "img-src 'self' data: blob:; "
+                "media-src 'self' blob:; "
+                "connect-src 'self'; "
+                "frame-src 'self'; "
+                "frame-ancestors 'none'"
+            )
+        return response