FastAPIPassthroughAuthMiddleware

Package: flyte.app.extras

FastAPI middleware that automatically sets Flyte auth metadata from request headers.

This middleware extracts authentication headers from incoming HTTP requests and sets them in the Flyte context using the auth_metadata() context manager. This eliminates the need to manually wrap endpoint handlers with auth_metadata().

The middleware is highly configurable:

• Custom header extractors can be provided
• Specific paths can be excluded from auth requirements
• Auth can be optional or required

Attributes: app: The FastAPI application (this is a mandatory framework parameter) header_extractors: List of functions to extract headers from requests excluded_paths: Set of URL paths that bypass auth extraction

Thread Safety: This middleware is async-safe and properly isolates auth metadata per request using Python’s contextvars. Multiple concurrent requests with different authentication will not interfere with each other.

class FastAPIPassthroughAuthMiddleware(
    app,
    header_extractors: list[HeaderExtractor] | None,
    excluded_paths: set[str] | None,
)

Initialize the Flyte authentication middleware.

Methods

dispatch()

def dispatch(
    request: 'Request',
    call_next,
) -> 'Response'

Process each request, extracting auth headers and setting Flyte context.

extract_authorization_header()

def extract_authorization_header(
    request: 'Request',
) -> tuple[str, str] | None

Extract the Authorization header from the request.

extract_cookie_header()

def extract_cookie_header(
    request: 'Request',
) -> tuple[str, str] | None

Extract the Cookie header from the request.

extract_custom_header()

def extract_custom_header(
    header_name: str,
) -> HeaderExtractor

Create a header extractor for a custom header name.