feat: Minimal infrastructure for http, httpApiKey, and oauth2 security schemes

.gitignore

@@ -145,3 +145,6 @@ cython_debug/
 
 # Logs
 *.log
+
+# IntelliJ Idea based IDE
+.idea

asynction/exceptions.py

@@ -38,3 +38,28 @@ class MessageAckValidationException(ValidationException):
     """
 
     pass
+
+
+class SecurityException(AsynctionException):
+    """
+    Base Security Exception type.
+    """
+
+    pass
+
+
+class UnregisteredSecurityScheme(SecurityException):
+    """
+    Raised when a security scheme not listed in the securitySchemes section of the
+    spec is used in a ``security`` or ``x-security`` specification
+    """
+
+    pass
+
+
+class UnsupportedSecurityScheme(SecurityException):
+    """
+    Raised when a specified security scheme is not supported by asynction
+    """
+
+    pass

asynction/mock_server.py

@@ -31,12 +31,15 @@
 from hypothesis_jsonschema import from_schema
 from hypothesis_jsonschema._from_schema import STRING_FORMATS
 
+from asynction import UnregisteredSecurityScheme
+from asynction.security import security_handler_factory
 from asynction.server import AsynctionSocketIO
 from asynction.types import AsyncApiSpec
 from asynction.types import ErrorHandler
 from asynction.types import JSONMapping
 from asynction.types import JSONSchema
 from asynction.types import Message
+from asynction.types import SecurityRequirement
 from asynction.validation import bindings_validator_factory
 from asynction.validation import publish_message_validator_factory
 
@@ -210,7 +213,9 @@ def from_spec(
         )
 
     def _register_handlers(
-        self, default_error_handler: Optional[ErrorHandler] = None
+        self,
+        default_error_handler: Optional[ErrorHandler] = None,
+        server_security: Optional[Sequence[SecurityRequirement]] = None,
     ) -> None:
         for namespace, channel in self.spec.channels.items():
             if channel.publish is not None:
@@ -240,6 +245,17 @@ def _register_handlers(
                 with_bindings_validation = bindings_validator_factory(channel.bindings)
                 connect_handler = with_bindings_validation(connect_handler)
 
+            if server_security:
+                if not self.spec.components.security_schemes:
+                    raise UnregisteredSecurityScheme
+
+                # create a security handler wrapper
+                with_security = security_handler_factory(
+                    server_security, self.spec.components.security_schemes
+                )
+                # apply security
+                connect_handler = with_security(connect_handler)
+
             self.on_event("connect", connect_handler, namespace)
 
         if default_error_handler is not None: