REST: DELETE中处理秘密的最佳方法

from flask import Flask, request, jsonify
from functools import wraps
import logging

app = Flask(__name__)

# 模拟用户数据库
users = {
    'user1': {'password': 'secret1', 'email': 'user1@example.com'},
    'user2': {'password': 'secret2', 'email': 'user2@example.com'}
}

# 认证装饰器
def require_auth(f):
    @wraps(f)
    def decorated(*args, **kwargs):
        auth_header = request.headers.get('Authorization')
        if not auth_header:
            return jsonify({'error': 'Authentication required'}), 401
        
        user_id, password = auth_header.split(':')
        if user_id not in users or users[user_id]['password'] != password:
            return jsonify({'error': 'Invalid credentials'}), 403
        
        return f(*args, **kwargs)
    return decorated

@app.route('/users/<user_id>', methods=['DELETE'])
@require_auth
def delete_user(user_id):
    if user_id in users:
        del users[user_id]
        logging.info(f'User {user_id} deleted')
        return jsonify({'message': 'User deleted successfully'}), 200
    else:
        return jsonify({'error': 'User not found'}), 404

if __name__ == '__main__':
    logging.basicConfig(level=logging.INFO)
    app.run(debug=True)