code: def SecurityCheck(self, func, request, *args, **kwargs):
      
  
      try:
        auth_header = request.headers.get("Authorization", "")
        if not auth_header.startswith(self.BEARER_PREFIX):
          raise ValueError("JWT token is missing.")
  
        token = auth_header[len(self.BEARER_PREFIX):]
  
        auth_domain = config.CONFIG["AdminUI.firebase_auth_domain"]
        project_id = auth_domain.split(".")[0]
  
        idinfo = id_token.verify_firebase_token(
            token, request, audience=project_id)
  
        if idinfo["iss"] != self.SECURE_TOKEN_PREFIX + project_id:
          raise ValueError("Wrong issuer.")
  
        request.user = idinfo["email"]
      except ValueError as e:
        # For a homepage, just do a pass-through, otherwise JS code responsible
        # for the Firebase auth won't ever get executed. This approach is safe,
        # because wsgiapp.HttpRequest object will raise on any attempt to
        # access uninitialized HttpRequest.user attribute.
        if request.path != "/":
          return self.AuthError("JWT token validation failed: %s" % e)
  
      return func(request, *args, **kwargs)
docs: Check if access should be allowed for the request.