Allow API endpoints to not request authentication

1 files changed, 22 insertions, 15 deletions

diff --git a/modules/rest_api.py b/modules/rest_api.py
index dfdb0746..c97b5baf 100644
--- a/modules/rest_api.py
+++ b/modules/rest_api.py
@@ -13,25 +13,32 @@ class Handler(http.server.BaseHTTPRequestHandler):
             query = parsed.query
             get_params = urllib.parse.parse_qs(query)
 
+            _, _, endpoint = parsed.path[1:].partition("/")
+            endpoint, _, args = endpoint.partition("/")
+            args = list(filter(None, args.split("/")))
+
             response = ""
             code = 404
 
-            if not "key" in get_params or not _bot.get_setting(
-                    "api-key-%s" % get_params["key"][0], False):
-                code = 401
-            else:
-                if parsed.path.startswith("/api/"):
-                    _, _, endpoint = parsed.path[1:].partition("/")
-                    endpoint, _, args = endpoint.partition("/")
-                    args = list(filter(None, args.split("/")))
-
-                    response = _events.on("api").on(endpoint).call_for_result(
-                        params=get_params, path=args)
+            hooks = _events.on("api").on(endpoint).get_hooks()
+            if hooks:
+                hook = hooks[0]
+                authenticated = hook.get_kwarg("authenticated", True)
+                key = get_params.get("key", None)
+                print(key)
+                if authenticated and (
+                        not key or
+                        not _bot.get_setting("api-key-%s" % key[0], False)):
+                    code = 401
+                else:
+                    if parsed.path.startswith("/api/"):
+                        response = _events.on("api").on(endpoint
+                            ).call_for_result(params=get_params, path=args)
 
-                    if response:
-                        response = json.dumps(response, sort_keys=True,
-                            indent=4)
-                        code = 200
+                        if response:
+                            response = json.dumps(response, sort_keys=True,
+                                indent=4)
+                            code = 200
 
             self.send_response(code)
             self.send_header("Content-type", "application/json")