set dependency versions, removed deprectated FLASK_ENV

generator/authentication/__init__.py

@@ -17,32 +17,32 @@ def authenticate_via_jwt(
 
 	@functools.wraps(func)
 	def decorator(*args, **kwargs) -> typing.Any:
-		#if "token" not in flask.request.cookies:
-			#return flask.redirect(
-				#flask.url_for("oidc.login")
-			#)
-
-		#try:
-			#claims = authlib.jose.jwt.decode(
-				#flask.request.cookies["token"],
-				#flask.current_app.config["JWT_SECRET_KEY"]
-			#)
-		#except authlib.jose.JoseError as exception:
-			#raise werkzeug.exceptions.BadRequest from exception
-
-		#try:
-			#claims.validate()
-		#except authlib.jose.JoseError as exception:
-			#flask.current_app.logger.debug(
-				#"Claim validation failed: %s",
-				#exception
-			#)
-
-			#return flask.redirect(
-				#flask.url_for("oidc.login")
-			#)
-
-		flask.g.user_id = "1"
+		if "token" not in flask.request.cookies:
+			return flask.redirect(
+				flask.url_for("oidc.login")
+			)
+
+		try:
+			claims = authlib.jose.jwt.decode(
+				flask.request.cookies["token"],
+				flask.current_app.config["JWT_SECRET_KEY"]
+			)
+		except authlib.jose.JoseError as exception:
+			raise werkzeug.exceptions.BadRequest from exception
+
+		try:
+			claims.validate()
+		except authlib.jose.JoseError as exception:
+			flask.current_app.logger.debug(
+				"Claim validation failed: %s",
+				exception
+			)
+
+			return flask.redirect(
+				flask.url_for("oidc.login")
+			)
+
+		flask.g.user_id = claims["sub"]
 
 		return func(*args, **kwargs)
 	return decorator

[Alexa Valentová]

Accidentally left an OpenID bypass in there. Not related to other changes