|
|
# -*- coding: utf-8 -*-
|
|
|
|
|
|
# Copyright 2010 - 2017 RhodeCode GmbH and the AppEnlight project authors
|
|
|
#
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
# you may not use this file except in compliance with the License.
|
|
|
# You may obtain a copy of the License at
|
|
|
#
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
#
|
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
# See the License for the specific language governing permissions and
|
|
|
# limitations under the License.
|
|
|
|
|
|
import hashlib
|
|
|
import os
|
|
|
|
|
|
from pyramid.i18n import TranslationStringFactory
|
|
|
from pyramid import threadlocal
|
|
|
|
|
|
_ = TranslationStringFactory("pyramid")
|
|
|
|
|
|
from appenlight import security
|
|
|
from appenlight.lib import helpers, generate_random_string
|
|
|
from appenlight.models.services.config import ConfigService
|
|
|
|
|
|
|
|
|
def gen_urls(request):
|
|
|
urls = {
|
|
|
"baseUrl": request.route_url("/"),
|
|
|
"applicationsNoId": request.route_url("applications_no_id"),
|
|
|
"applications": request.route_url(
|
|
|
"applications", resource_id="REPLACE_ID"
|
|
|
).replace("REPLACE_ID", ":resourceId"),
|
|
|
"applicationsProperty": request.route_url(
|
|
|
"applications_property", key="REPLACE_KEY", resource_id="REPLACE_ID"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":resourceId")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"configsNoId": request.route_url("admin_configs"),
|
|
|
"configs": request.route_url(
|
|
|
"admin_config", key="REPLACE_KEY", section="REPLACE_SECTION"
|
|
|
)
|
|
|
.replace("REPLACE_SECTION", ":section")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"docs": "http://getappenlight.com/page/api/main.html",
|
|
|
"eventsNoId": request.route_url("events_no_id"),
|
|
|
"events": request.route_url("events", event_id="REPLACE_ID").replace(
|
|
|
"REPLACE_ID", ":eventId"
|
|
|
),
|
|
|
"eventsProperty": request.route_url(
|
|
|
"events_property", key="REPLACE_KEY", event_id="REPLACE_ID"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":eventId")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"groupsNoId": request.route_url("groups_no_id"),
|
|
|
"groups": request.route_url("groups", group_id="REPLACE_ID").replace(
|
|
|
"REPLACE_ID", ":groupId"
|
|
|
),
|
|
|
"groupsProperty": request.route_url(
|
|
|
"groups_property", key="REPLACE_KEY", group_id="REPLACE_ID"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":groupId")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"logsNoId": request.route_url("logs_no_id"),
|
|
|
"integrationAction": request.route_url(
|
|
|
"integrations_id",
|
|
|
action="REPLACE_ACT",
|
|
|
resource_id="REPLACE_RID",
|
|
|
integration="REPLACE_IID",
|
|
|
)
|
|
|
.replace("REPLACE_RID", ":resourceId")
|
|
|
.replace("REPLACE_ACT", ":action")
|
|
|
.replace("REPLACE_IID", ":integration"),
|
|
|
"usersNoId": request.route_url("users_no_id"),
|
|
|
"users": request.route_url("users", user_id="REPLACE_ID").replace(
|
|
|
"REPLACE_ID", ":userId"
|
|
|
),
|
|
|
"usersProperty": request.route_url(
|
|
|
"users_property", key="REPLACE_KEY", user_id="REPLACE_ID"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":userId")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"userSelf": request.route_url("users_self"),
|
|
|
"userSelfProperty": request.route_url(
|
|
|
"users_self_property", key="REPLACE_KEY"
|
|
|
).replace("REPLACE_KEY", ":key"),
|
|
|
"reports": request.route_url("reports"),
|
|
|
"reportGroup": request.route_url(
|
|
|
"report_groups", group_id="REPLACE_RID"
|
|
|
).replace("REPLACE_RID", ":groupId"),
|
|
|
"reportGroupProperty": request.route_url(
|
|
|
"report_groups_property", key="REPLACE_KEY", group_id="REPLACE_GID"
|
|
|
)
|
|
|
.replace("REPLACE_KEY", ":key")
|
|
|
.replace("REPLACE_GID", ":groupId"),
|
|
|
"pluginConfigsNoId": request.route_url(
|
|
|
"plugin_configs", plugin_name="REPLACE_TYPE"
|
|
|
).replace("REPLACE_TYPE", ":plugin_name"),
|
|
|
"pluginConfigs": request.route_url(
|
|
|
"plugin_config", id="REPLACE_ID", plugin_name="REPLACE_TYPE"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":id")
|
|
|
.replace("REPLACE_TYPE", ":plugin_name"),
|
|
|
"resourceProperty": request.route_url(
|
|
|
"resources_property", key="REPLACE_KEY", resource_id="REPLACE_ID"
|
|
|
)
|
|
|
.replace("REPLACE_ID", ":resourceId")
|
|
|
.replace("REPLACE_KEY", ":key"),
|
|
|
"slowReports": request.route_url("slow_reports"),
|
|
|
"sectionView": request.route_url(
|
|
|
"section_view", section="REPLACE_S", view="REPLACE_V"
|
|
|
)
|
|
|
.replace("REPLACE_S", ":section")
|
|
|
.replace("REPLACE_V", ":view"),
|
|
|
"otherRoutes": {
|
|
|
"register": request.route_url("register"),
|
|
|
"lostPassword": request.route_url("lost_password"),
|
|
|
"lostPasswordGenerate": request.route_url("lost_password_generate"),
|
|
|
"signOut": request.route_url("ziggurat.routes.sign_out"),
|
|
|
},
|
|
|
"social_auth": {
|
|
|
"google": request.route_url("social_auth", provider="google"),
|
|
|
"twitter": request.route_url("social_auth", provider="twitter"),
|
|
|
"bitbucket": request.route_url("social_auth", provider="bitbucket"),
|
|
|
"github": request.route_url("social_auth", provider="github"),
|
|
|
},
|
|
|
"plugins": {},
|
|
|
"adminAction": request.route_url("admin", action="REPLACE_ACT").replace(
|
|
|
"REPLACE_ACT", ":action"
|
|
|
),
|
|
|
}
|
|
|
return urls
|
|
|
|
|
|
|
|
|
def new_request(event):
|
|
|
environ = event.request.environ
|
|
|
event.request.response.headers["X-Frame-Options"] = "SAMEORIGIN"
|
|
|
event.request.response.headers["X-XSS-Protection"] = "1; mode=block"
|
|
|
# can this be enabled on non https deployments?
|
|
|
# event.request.response.headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubdomains;'
|
|
|
|
|
|
# do not send XSRF token with /api calls
|
|
|
if not event.request.path.startswith("/api"):
|
|
|
if environ["wsgi.url_scheme"] == "https":
|
|
|
event.request.response.set_cookie(
|
|
|
"XSRF-TOKEN", event.request.session.get_csrf_token(), secure=True
|
|
|
)
|
|
|
else:
|
|
|
event.request.response.set_cookie(
|
|
|
"XSRF-TOKEN", event.request.session.get_csrf_token()
|
|
|
)
|
|
|
if event.request.user:
|
|
|
event.request.response.headers["x-appenlight-uid"] = (
|
|
|
"%s" % event.request.user.id
|
|
|
)
|
|
|
|
|
|
|
|
|
def add_renderer_globals(event):
|
|
|
request = event.get("request") or threadlocal.get_current_request()
|
|
|
|
|
|
renderer_globals = event
|
|
|
renderer_globals["h"] = helpers
|
|
|
renderer_globals["js_hash"] = request.registry.js_hash
|
|
|
renderer_globals["css_hash"] = request.registry.css_hash
|
|
|
renderer_globals["_"] = _
|
|
|
renderer_globals["security"] = security
|
|
|
renderer_globals["flash_msgs"] = []
|
|
|
renderer_globals["appenlight_plugins"] = []
|
|
|
|
|
|
if "jinja" in event["renderer_info"].type:
|
|
|
renderer_globals["url_list"] = gen_urls(request)
|
|
|
# add footer html and some other global vars to renderer
|
|
|
for module, config in request.registry.appenlight_plugins.items():
|
|
|
if config["url_gen"]:
|
|
|
urls = config["url_gen"](request)
|
|
|
renderer_globals["url_list"]["plugins"][module] = urls
|
|
|
|
|
|
renderer_globals["appenlight_plugins"].append(
|
|
|
{
|
|
|
"name": module,
|
|
|
"config": {
|
|
|
"javascript": config["javascript"],
|
|
|
"header_html": config["header_html"],
|
|
|
},
|
|
|
}
|
|
|
)
|
|
|
|
|
|
footer_config = ConfigService.by_key_and_section(
|
|
|
"template_footer_html", "global", default_value=""
|
|
|
)
|
|
|
|
|
|
renderer_globals["template_footer_html"] = footer_config.value
|
|
|
try:
|
|
|
renderer_globals["root_administrator"] = request.has_permission(
|
|
|
"root_administration", security.RootFactory(request)
|
|
|
)
|
|
|
except AttributeError:
|
|
|
renderer_globals["root_administrator"] = False
|
|
|
|
|
|
renderer_globals["_mail_url"] = request.registry.settings["_mail_url"]
|
|
|
|
|
|
if not request:
|
|
|
return
|
|
|
|
|
|
# do not sens flash headers with /api calls
|
|
|
if not request.path.startswith("/api"):
|
|
|
flash_msgs = helpers.get_type_formatted_flash(request)
|
|
|
renderer_globals["flash_msgs"] = flash_msgs
|
|
|
request.add_flash_to_headers()
|
|
|
|
|
|
|
|
|
def application_created(app):
|
|
|
webassets_dir = app.app.registry.settings.get("webassets.dir")
|
|
|
js_hash = generate_random_string()
|
|
|
css_hash = generate_random_string()
|
|
|
if webassets_dir:
|
|
|
js_hasher = hashlib.md5()
|
|
|
css_hasher = hashlib.md5()
|
|
|
for root, dirs, files in os.walk(webassets_dir):
|
|
|
for name in files:
|
|
|
filename = os.path.join(root, name)
|
|
|
if name.endswith("css"):
|
|
|
with open(filename, "r", encoding="utf8", errors="replace") as f:
|
|
|
for line in f:
|
|
|
css_hasher.update(line.encode("utf8"))
|
|
|
elif name.endswith("js"):
|
|
|
with open(filename, "r", encoding="utf8", errors="replace") as f:
|
|
|
for line in f:
|
|
|
js_hasher.update(line.encode("utf8"))
|
|
|
js_hash = js_hasher.hexdigest()
|
|
|
css_hash = css_hasher.hexdigest()
|
|
|
app.app.registry.js_hash = js_hash
|
|
|
app.app.registry.css_hash = css_hash
|
|
|
|
