Merge pull request #23 from auth0-samples/update-endpoints

Update endpoints, return JSON resposne

Author: aaguiarz

00-Starter-Seed/server.py

@@ -7,7 +7,7 @@
 from six.moves.urllib.request import urlopen
 
 from dotenv import load_dotenv, find_dotenv
-from flask import Flask, request, jsonify, _app_ctx_stack
+from flask import Flask, request, jsonify, _request_ctx_stack
 from flask_cors import cross_origin
 from jose import jwt
 
@@ -131,42 +131,48 @@ def decorated(*args, **kwargs):
                                     "Unable to parse authentication"
                                     " token."}, 400)
 
-            _app_ctx_stack.top.current_user = payload
+            _request_ctx_stack.top.current_user = payload
             return f(*args, **kwargs)
         raise AuthError({"code": "invalid_header",
                         "description": "Unable to find appropriate key"}, 400)
     return decorated
 
 
 # Controllers API
-@APP.route("/ping")
+@APP.route("/api/public")
 @cross_origin(headers=["Content-Type", "Authorization"])
-def ping():
+def public():
     """No access token required to access this route
     """
-    return "All good. You don't need to be authenticated to call this"
+    response = "All good. You don't need to be authenticated to call this"
+    return jsonify(message=response)
 
 
-@APP.route("/secured/ping")
+@APP.route("/api/private")
 @cross_origin(headers=["Content-Type", "Authorization"])
 @cross_origin(headers=["Access-Control-Allow-Origin", "*"])
 @requires_auth
-def secured_ping():
+def private():
     """A valid access token is required to access this route
     """
-    return "All good. You only get this message if you're authenticated"
+    response = "All good. You only get this message if you're authenticated"
+    return jsonify(message=response)
 
 
-@APP.route("/secured/private/ping")
+@APP.route("/api/private-scoped")
 @cross_origin(headers=["Content-Type", "Authorization"])
 @cross_origin(headers=["Access-Control-Allow-Origin", "*"])
 @requires_auth
-def secured_private_ping():
+def private_scoped():
     """A valid access token and an appropriate scope are required to access this route
     """
-    if requires_scope("read:agenda"):
-        return "All good. You're authenticated and the access token has the appropriate scope"
-    return "You don't have access to this resource"
+    if requires_scope("read:messages"):
+        response = "All good. You're authenticated and the access token has the appropriate scope"
+        return jsonify(message=response)
+    raise AuthError({
+        "code": "Anauthorized",
+        "desciption": "You don't have access to this resource"
+    }, 403)
 
 
 if __name__ == "__main__":