Подключить Mars ID
к своему проекту

# pip install flask requests
from flask import Flask, request, redirect, g
from urllib.parse import quote
import requests, functools

app = Flask(__name__)

def mars_user():
    token = request.cookies.get("__mars_id")
    if not token:
        return None
    r = requests.get("https://id.marshub.uz/api/verify",
                     headers={"Authorization": f"Bearer {token}"}, timeout=5)
    return r.json() if r.ok else None   # { id, name, role, tg }

def require_auth(f):
    @functools.wraps(f)
    def wrapper(*a, **kw):
        user = mars_user()
        if not user:
            return redirect("https://id.marshub.uz/login?next=" + quote(request.url, safe=""))
        g.user = user
        return f(*a, **kw)
    return wrapper

@app.route("/")
@require_auth
def index():
    return f"Привет, {g.user['name']}! Роль: {g.user['role']}"

# myapp/middleware.py
from django.shortcuts import redirect
from urllib.parse import quote
import requests

class MarsIdMiddleware:
    PUBLIC = ("/health", "/static/")

    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        if request.path.startswith(self.PUBLIC):
            return self.get_response(request)

        token = request.COOKIES.get("__mars_id")
        user = None
        if token:
            r = requests.get("https://id.marshub.uz/api/verify",
                             headers={"Authorization": f"Bearer {token}"}, timeout=5)
            user = r.json() if r.ok else None

        if not user:
            back = quote(request.build_absolute_uri(), safe="")
            return redirect(f"https://id.marshub.uz/login?next={back}")

        request.mars_user = user      # в view: request.mars_user["name"]
        return self.get_response(request)

# settings.py → MIDDLEWARE = [..., "myapp.middleware.MarsIdMiddleware"]

<?php
function mars_user(): ?array {
    if (empty($_COOKIE['__mars_id'])) return null;

    $ch = curl_init('https://id.marshub.uz/api/verify');
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 5,
        CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $_COOKIE['__mars_id']],
    ]);
    $body = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
    curl_close($ch);

    return $code === 200 ? json_decode($body, true) : null;
}

$user = mars_user();
if (!$user) {
    $back = urlencode('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
    header('Location: https://id.marshub.uz/login?next=' . $back);
    exit;
}

echo 'Привет, ' . htmlspecialchars($user['name']);

package main

import (
    "encoding/json"
    "net/http"
    "net/url"
)

type MarsUser struct {
    ID   string `json:"id"`
    Name string `json:"name"`
    Role string `json:"role"`
    Tg   int64  `json:"tg"`
}

func marsUser(r *http.Request) *MarsUser {
    c, err := r.Cookie("__mars_id")
    if err != nil {
        return nil
    }
    req, _ := http.NewRequest("GET", "https://id.marshub.uz/api/verify", nil)
    req.Header.Set("Authorization", "Bearer "+c.Value)

    resp, err := http.DefaultClient.Do(req)
    if err != nil || resp.StatusCode != 200 {
        return nil
    }
    defer resp.Body.Close()

    var u MarsUser
    if json.NewDecoder(resp.Body).Decode(&u) != nil {
        return nil
    }
    return &u
}

func handler(w http.ResponseWriter, r *http.Request) {
    u := marsUser(r)
    if u == nil {
        back := url.QueryEscape("https://" + r.Host + r.RequestURI)
        http.Redirect(w, r, "https://id.marshub.uz/login?next="+back, 302)
        return
    }
    w.Write([]byte("Привет, " + u.Name))
}