author | Sylvain Thénault <sylvain.thenault@logilab.fr> |
Fri, 05 Mar 2010 12:18:22 +0100 | |
changeset 4812 | 2eb6a9b33aa5 |
parent 4709 | 6a71fc0b4274 |
child 4897 | e402e0b32075 |
child 4911 | 898c35be5873 |
permissions | -rw-r--r-- |
0 | 1 |
"""CubicWeb web client application object |
2 |
||
3 |
:organization: Logilab |
|
4212
ab6573088b4a
update copyright: welcome 2010
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2849
diff
changeset
|
4 |
:copyright: 2001-2010 LOGILAB S.A. (Paris, FRANCE), license is LGPL v2. |
0 | 5 |
:contact: http://www.logilab.fr/ -- mailto:contact@logilab.fr |
1977
606923dff11b
big bunch of copyright / docstring update
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
1426
diff
changeset
|
6 |
:license: GNU Lesser General Public License, v2.1 - http://www.gnu.org/licenses |
0 | 7 |
""" |
8 |
__docformat__ = "restructuredtext en" |
|
9 |
||
10 |
import sys |
|
11 |
from time import clock, time |
|
12 |
||
2613
5e19c2bb370e
R [all] logilab.common 0.44 provides only deprecated
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents:
2476
diff
changeset
|
13 |
from logilab.common.deprecation import deprecated |
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
14 |
|
0 | 15 |
from rql import BadRQLQuery |
16 |
||
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
17 |
from cubicweb import set_log_methods, cwvreg |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
18 |
from cubicweb import ( |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
19 |
ValidationError, Unauthorized, AuthenticationError, NoSelectableObject, |
2685
0518ca8f63e3
[autoreload] recompute urlresolver / urlrewriter after autoreload
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2666
diff
changeset
|
20 |
RepositoryError, CW_EVENT_MANAGER) |
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
21 |
from cubicweb.web import LOGGER, component |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
22 |
from cubicweb.web import ( |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
23 |
StatusResponse, DirectResponse, Redirect, NotFound, |
2293 | 24 |
RemoteCallFailed, ExplicitLogin, InvalidSession, RequestError) |
0 | 25 |
|
26 |
# make session manager available through a global variable so the debug view can |
|
27 |
# print information about web session |
|
28 |
SESSION_MANAGER = None |
|
29 |
||
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
30 |
class AbstractSessionManager(component.Component): |
0 | 31 |
"""manage session data associated to a session identifier""" |
3408
c92170fca813
[api] use __regid__ instead of deprecated id
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2887
diff
changeset
|
32 |
__regid__ = 'sessionmanager' |
1426 | 33 |
|
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
34 |
def __init__(self, vreg): |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
35 |
self.session_time = vreg.config['http-session-time'] or None |
0 | 36 |
assert self.session_time is None or self.session_time > 0 |
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
37 |
self.cleanup_session_time = vreg.config['cleanup-session-time'] or 43200 |
0 | 38 |
assert self.cleanup_session_time > 0 |
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
39 |
self.cleanup_anon_session_time = vreg.config['cleanup-anonymous-session-time'] or 120 |
0 | 40 |
assert self.cleanup_anon_session_time > 0 |
41 |
if self.session_time: |
|
42 |
assert self.cleanup_session_time < self.session_time |
|
43 |
assert self.cleanup_anon_session_time < self.session_time |
|
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
44 |
self.authmanager = vreg['components'].select('authmanager', vreg=vreg) |
1426 | 45 |
|
0 | 46 |
def clean_sessions(self): |
47 |
"""cleanup sessions which has not been unused since a given amount of |
|
48 |
time. Return the number of sessions which have been closed. |
|
49 |
""" |
|
50 |
self.debug('cleaning http sessions') |
|
51 |
closed, total = 0, 0 |
|
52 |
for session in self.current_sessions(): |
|
53 |
no_use_time = (time() - session.last_usage_time) |
|
54 |
total += 1 |
|
55 |
if session.anonymous_connection: |
|
56 |
if no_use_time >= self.cleanup_anon_session_time: |
|
57 |
self.close_session(session) |
|
58 |
closed += 1 |
|
59 |
elif no_use_time >= self.cleanup_session_time: |
|
60 |
self.close_session(session) |
|
61 |
closed += 1 |
|
62 |
return closed, total - closed |
|
1426 | 63 |
|
0 | 64 |
def has_expired(self, session): |
65 |
"""return True if the web session associated to the session is expired |
|
66 |
""" |
|
67 |
return not (self.session_time is None or |
|
68 |
time() < session.last_usage_time + self.session_time) |
|
1426 | 69 |
|
0 | 70 |
def current_sessions(self): |
71 |
"""return currently open sessions""" |
|
72 |
raise NotImplementedError() |
|
1426 | 73 |
|
0 | 74 |
def get_session(self, req, sessionid): |
75 |
"""return existing session for the given session identifier""" |
|
76 |
raise NotImplementedError() |
|
77 |
||
78 |
def open_session(self, req): |
|
79 |
"""open and return a new session for the given request |
|
1426 | 80 |
|
0 | 81 |
:raise ExplicitLogin: if authentication is required |
82 |
""" |
|
83 |
raise NotImplementedError() |
|
1426 | 84 |
|
0 | 85 |
def close_session(self, session): |
86 |
"""close session on logout or on invalid session detected (expired out, |
|
87 |
corrupted...) |
|
88 |
""" |
|
89 |
raise NotImplementedError() |
|
90 |
||
91 |
||
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
92 |
class AbstractAuthenticationManager(component.Component): |
0 | 93 |
"""authenticate user associated to a request and check session validity""" |
94 |
id = 'authmanager' |
|
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
95 |
vreg = None # XXX necessary until property for deprecation warning is on appobject |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
96 |
|
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
97 |
def __init__(self, vreg): |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
98 |
self.vreg = vreg |
0 | 99 |
|
100 |
def authenticate(self, req): |
|
101 |
"""authenticate user and return corresponding user object |
|
1426 | 102 |
|
0 | 103 |
:raise ExplicitLogin: if authentication is required (no authentication |
104 |
info found or wrong user/password) |
|
105 |
""" |
|
106 |
raise NotImplementedError() |
|
107 |
||
1426 | 108 |
|
0 | 109 |
class CookieSessionHandler(object): |
110 |
"""a session handler using a cookie to store the session identifier |
|
111 |
||
112 |
:cvar SESSION_VAR: |
|
113 |
string giving the name of the variable used to store the session |
|
114 |
identifier |
|
115 |
""" |
|
116 |
SESSION_VAR = '__session' |
|
1426 | 117 |
|
0 | 118 |
def __init__(self, appli): |
2706
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
119 |
self.vreg = appli.vreg |
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
120 |
self.session_manager = self.vreg['components'].select('sessionmanager', |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
121 |
vreg=self.vreg) |
0 | 122 |
global SESSION_MANAGER |
123 |
SESSION_MANAGER = self.session_manager |
|
2706
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
124 |
if not 'last_login_time' in self.vreg.schema: |
0 | 125 |
self._update_last_login_time = lambda x: None |
2706
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
126 |
CW_EVENT_MANAGER.bind('after-registry-reload', self.reset_session_manager) |
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
127 |
|
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
128 |
def reset_session_manager(self): |
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
129 |
data = self.session_manager.dump_data() |
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
130 |
self.session_manager = self.vreg['components'].select('sessionmanager', |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
131 |
vreg=self.vreg) |
2706
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
132 |
self.session_manager.restore_data(data) |
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
133 |
global SESSION_MANAGER |
09baf5175196
[web session] proper reloading of the session manager on vreg update
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2705
diff
changeset
|
134 |
SESSION_MANAGER = self.session_manager |
0 | 135 |
|
136 |
def clean_sessions(self): |
|
137 |
"""cleanup sessions which has not been unused since a given amount of |
|
138 |
time |
|
139 |
""" |
|
140 |
self.session_manager.clean_sessions() |
|
1426 | 141 |
|
0 | 142 |
def set_session(self, req): |
143 |
"""associate a session to the request |
|
144 |
||
145 |
Session id is searched from : |
|
146 |
- # form variable |
|
147 |
- cookie |
|
148 |
||
149 |
if no session id is found, open a new session for the connected user |
|
150 |
or request authentification as needed |
|
151 |
||
1426 | 152 |
:raise Redirect: if authentication has occured and succeed |
0 | 153 |
""" |
154 |
assert req.cnx is None # at this point no cnx should be set on the request |
|
155 |
cookie = req.get_cookie() |
|
156 |
try: |
|
157 |
sessionid = str(cookie[self.SESSION_VAR].value) |
|
158 |
except KeyError: # no session cookie |
|
159 |
session = self.open_session(req) |
|
160 |
else: |
|
161 |
try: |
|
162 |
session = self.get_session(req, sessionid) |
|
163 |
except InvalidSession: |
|
164 |
try: |
|
165 |
session = self.open_session(req) |
|
166 |
except ExplicitLogin: |
|
167 |
req.remove_cookie(cookie, self.SESSION_VAR) |
|
168 |
raise |
|
169 |
# remember last usage time for web session tracking |
|
170 |
session.last_usage_time = time() |
|
171 |
||
172 |
def get_session(self, req, sessionid): |
|
173 |
return self.session_manager.get_session(req, sessionid) |
|
1426 | 174 |
|
0 | 175 |
def open_session(self, req): |
176 |
session = self.session_manager.open_session(req) |
|
177 |
cookie = req.get_cookie() |
|
178 |
cookie[self.SESSION_VAR] = session.sessionid |
|
179 |
req.set_cookie(cookie, self.SESSION_VAR, maxage=None) |
|
180 |
# remember last usage time for web session tracking |
|
181 |
session.last_usage_time = time() |
|
182 |
if not session.anonymous_connection: |
|
183 |
self._postlogin(req) |
|
184 |
return session |
|
185 |
||
186 |
def _update_last_login_time(self, req): |
|
187 |
try: |
|
188 |
req.execute('SET X last_login_time NOW WHERE X eid %(x)s', |
|
189 |
{'x' : req.user.eid}, 'x') |
|
190 |
req.cnx.commit() |
|
191 |
except (RepositoryError, Unauthorized): |
|
192 |
# ldap user are not writeable for instance |
|
193 |
req.cnx.rollback() |
|
194 |
except: |
|
195 |
req.cnx.rollback() |
|
196 |
raise |
|
1426 | 197 |
|
0 | 198 |
def _postlogin(self, req): |
199 |
"""postlogin: the user has been authenticated, redirect to the original |
|
200 |
page (index by default) with a welcome message |
|
201 |
""" |
|
202 |
# Update last connection date |
|
203 |
# XXX: this should be in a post login hook in the repository, but there |
|
204 |
# we can't differentiate actual login of automatic session |
|
205 |
# reopening. Is it actually a problem? |
|
206 |
self._update_last_login_time(req) |
|
207 |
args = req.form |
|
4639
82afdc7d8cd8
cleanup internal forms parameters in postlogin
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4490
diff
changeset
|
208 |
for forminternal_key in ('__form_id', '__domid', '__errorurl'): |
82afdc7d8cd8
cleanup internal forms parameters in postlogin
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4490
diff
changeset
|
209 |
args.pop(forminternal_key, None) |
0 | 210 |
args['__message'] = req._('welcome %s !') % req.user.login |
211 |
if 'vid' in req.form: |
|
212 |
args['vid'] = req.form['vid'] |
|
213 |
if 'rql' in req.form: |
|
214 |
args['rql'] = req.form['rql'] |
|
215 |
path = req.relative_path(False) |
|
216 |
if path == 'login': |
|
217 |
path = 'view' |
|
218 |
raise Redirect(req.build_url(path, **args)) |
|
1426 | 219 |
|
0 | 220 |
def logout(self, req): |
2476
1294a6bdf3bf
application -> instance where it makes sense
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2293
diff
changeset
|
221 |
"""logout from the instance by cleaning the session and raising |
0 | 222 |
`AuthenticationError` |
223 |
""" |
|
224 |
self.session_manager.close_session(req.cnx) |
|
225 |
req.remove_cookie(req.get_cookie(), self.SESSION_VAR) |
|
226 |
raise AuthenticationError() |
|
227 |
||
228 |
||
229 |
class CubicWebPublisher(object): |
|
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
230 |
"""the publisher is a singleton hold by the web frontend, and is responsible |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
231 |
to publish HTTP request. |
0 | 232 |
""" |
1426 | 233 |
|
0 | 234 |
def __init__(self, config, debug=None, |
235 |
session_handler_fact=CookieSessionHandler, |
|
236 |
vreg=None): |
|
4484
d87989d91635
fix duplicated vregistry initialization during tests
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4212
diff
changeset
|
237 |
self.info('starting web instance from %s', config.apphome) |
0 | 238 |
if vreg is None: |
2666
c6c832d32936
[webapp] missing renaming
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2650
diff
changeset
|
239 |
vreg = cwvreg.CubicWebVRegistry(config, debug=debug) |
0 | 240 |
self.vreg = vreg |
4484
d87989d91635
fix duplicated vregistry initialization during tests
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4212
diff
changeset
|
241 |
# connect to the repository and get instance's schema |
0 | 242 |
self.repo = config.repository(vreg) |
243 |
if not vreg.initialized: |
|
244 |
self.config.init_cubes(self.repo.get_cubes()) |
|
245 |
vreg.init_properties(self.repo.properties()) |
|
4484
d87989d91635
fix duplicated vregistry initialization during tests
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4212
diff
changeset
|
246 |
vreg.set_schema(self.repo.get_schema()) |
0 | 247 |
# set the correct publish method |
248 |
if config['query-log-file']: |
|
249 |
from threading import Lock |
|
250 |
self._query_log = open(config['query-log-file'], 'a') |
|
251 |
self.publish = self.log_publish |
|
1426 | 252 |
self._logfile_lock = Lock() |
0 | 253 |
else: |
254 |
self._query_log = None |
|
255 |
self.publish = self.main_publish |
|
256 |
# instantiate session and url resolving helpers |
|
257 |
self.session_handler = session_handler_fact(self) |
|
2685
0518ca8f63e3
[autoreload] recompute urlresolver / urlrewriter after autoreload
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2666
diff
changeset
|
258 |
self.set_urlresolver() |
2705
30bcdbd92820
[events] renamed source-reload into registry-reload to avoid potential confusions with datasources
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2685
diff
changeset
|
259 |
CW_EVENT_MANAGER.bind('after-registry-reload', self.set_urlresolver) |
2685
0518ca8f63e3
[autoreload] recompute urlresolver / urlrewriter after autoreload
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2666
diff
changeset
|
260 |
|
0518ca8f63e3
[autoreload] recompute urlresolver / urlrewriter after autoreload
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
2666
diff
changeset
|
261 |
def set_urlresolver(self): |
2887
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
262 |
self.url_resolver = self.vreg['components'].select('urlpublisher', |
1282dc6525c5
give vreg where we need it (eg no bound request)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2867
diff
changeset
|
263 |
vreg=self.vreg) |
1426 | 264 |
|
0 | 265 |
def connect(self, req): |
266 |
"""return a connection for a logged user object according to existing |
|
267 |
sessions (i.e. a new connection may be created or an already existing |
|
268 |
one may be reused |
|
269 |
""" |
|
270 |
self.session_handler.set_session(req) |
|
271 |
||
272 |
# publish methods ######################################################### |
|
1426 | 273 |
|
0 | 274 |
def log_publish(self, path, req): |
275 |
"""wrapper around _publish to log all queries executed for a given |
|
276 |
accessed path |
|
277 |
""" |
|
278 |
try: |
|
279 |
return self.main_publish(path, req) |
|
280 |
finally: |
|
281 |
cnx = req.cnx |
|
282 |
self._logfile_lock.acquire() |
|
283 |
try: |
|
284 |
try: |
|
285 |
result = ['\n'+'*'*80] |
|
286 |
result.append(req.url()) |
|
287 |
result += ['%s %s -- (%.3f sec, %.3f CPU sec)' % q for q in cnx.executed_queries] |
|
288 |
cnx.executed_queries = [] |
|
289 |
self._query_log.write('\n'.join(result).encode(req.encoding)) |
|
290 |
self._query_log.flush() |
|
291 |
except Exception: |
|
292 |
self.exception('error while logging queries') |
|
293 |
finally: |
|
294 |
self._logfile_lock.release() |
|
295 |
||
2788
8d3dbe577d3a
R put version info in deprecation warnings
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents:
2706
diff
changeset
|
296 |
@deprecated("[3.4] use vreg['controllers'].select(...)") |
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
297 |
def select_controller(self, oid, req): |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
298 |
try: |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
299 |
return self.vreg['controllers'].select(oid, req=req, appli=self) |
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
300 |
except NoSelectableObject: |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
301 |
raise Unauthorized(req._('not authorized')) |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
302 |
|
0 | 303 |
def main_publish(self, path, req): |
304 |
"""method called by the main publisher to process <path> |
|
1426 | 305 |
|
0 | 306 |
should return a string containing the resulting page or raise a |
307 |
`NotFound` exception |
|
308 |
||
309 |
:type path: str |
|
310 |
:param path: the path part of the url to publish |
|
1426 | 311 |
|
0 | 312 |
:type req: `web.Request` |
313 |
:param req: the request object |
|
314 |
||
315 |
:rtype: str |
|
316 |
:return: the result of the pusblished url |
|
317 |
""" |
|
318 |
path = path or 'view' |
|
319 |
# don't log form values they may contains sensitive information |
|
320 |
self.info('publish "%s" (form params: %s)', path, req.form.keys()) |
|
321 |
# remove user callbacks on a new request (except for json controllers |
|
322 |
# to avoid callbacks being unregistered before they could be called) |
|
323 |
tstart = clock() |
|
324 |
try: |
|
325 |
try: |
|
326 |
ctrlid, rset = self.url_resolver.process(req, path) |
|
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
327 |
try: |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
328 |
controller = self.vreg['controllers'].select(ctrlid, req, |
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
329 |
appli=self) |
2058
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
330 |
except NoSelectableObject: |
7ef12c03447c
nicer vreg api, try to make rset an optional named argument in select and derivated (including selectors)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
1977
diff
changeset
|
331 |
raise Unauthorized(req._('not authorized')) |
581
09f87f2c535e
update_search_state in the publisher since it should be done whatever the controller
sylvain.thenault@logilab.fr
parents:
168
diff
changeset
|
332 |
req.update_search_state() |
0 | 333 |
result = controller.publish(rset=rset) |
334 |
if req.cnx is not None: |
|
335 |
# req.cnx is None if anonymous aren't allowed and we are |
|
336 |
# displaying the cookie authentication form |
|
337 |
req.cnx.commit() |
|
338 |
except (StatusResponse, DirectResponse): |
|
339 |
req.cnx.commit() |
|
340 |
raise |
|
341 |
except Redirect: |
|
342 |
# redirect is raised by edit controller when everything went fine, |
|
343 |
# so try to commit |
|
344 |
try: |
|
345 |
req.cnx.commit() |
|
346 |
except ValidationError, ex: |
|
347 |
self.validation_error_handler(req, ex) |
|
348 |
except Unauthorized, ex: |
|
349 |
req.data['errmsg'] = req._('You\'re not authorized to access this page. ' |
|
350 |
'If you think you should, please contact the site administrator.') |
|
351 |
self.error_handler(req, ex, tb=False) |
|
352 |
except Exception, ex: |
|
353 |
self.error_handler(req, ex, tb=True) |
|
354 |
else: |
|
355 |
# delete validation errors which may have been previously set |
|
356 |
if '__errorurl' in req.form: |
|
357 |
req.del_session_data(req.form['__errorurl']) |
|
358 |
raise |
|
359 |
except (AuthenticationError, NotFound, RemoteCallFailed): |
|
360 |
raise |
|
361 |
except ValidationError, ex: |
|
362 |
self.validation_error_handler(req, ex) |
|
2272
f27a3a75be0d
no tb for RequestError
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2263
diff
changeset
|
363 |
except (Unauthorized, BadRQLQuery, RequestError), ex: |
0 | 364 |
self.error_handler(req, ex, tb=False) |
365 |
except Exception, ex: |
|
366 |
self.error_handler(req, ex, tb=True) |
|
367 |
finally: |
|
368 |
if req.cnx is not None: |
|
369 |
try: |
|
370 |
req.cnx.rollback() |
|
371 |
except: |
|
372 |
pass # ignore rollback error at this point |
|
373 |
self.info('query %s executed in %s sec', req.relative_path(), clock() - tstart) |
|
374 |
return result |
|
375 |
||
376 |
def validation_error_handler(self, req, ex): |
|
377 |
ex.errors = dict((k, v) for k, v in ex.errors.items()) |
|
378 |
if '__errorurl' in req.form: |
|
4224
5998df006968
refactor form error handling:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
3408
diff
changeset
|
379 |
forminfo = {'error': ex, |
0 | 380 |
'values': req.form, |
381 |
'eidmap': req.data.get('eidmap', {}) |
|
382 |
} |
|
383 |
req.set_session_data(req.form['__errorurl'], forminfo) |
|
4679
d8ad65dab3e9
remove #<formid> from url used to redirect after a validation error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4639
diff
changeset
|
384 |
# XXX form session key / __error_url should be differentiated: |
d8ad65dab3e9
remove #<formid> from url used to redirect after a validation error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4639
diff
changeset
|
385 |
# session key is 'url + #<form dom id', though we usually don't want |
d8ad65dab3e9
remove #<formid> from url used to redirect after a validation error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4639
diff
changeset
|
386 |
# the browser to move to the form since it hides the global |
d8ad65dab3e9
remove #<formid> from url used to redirect after a validation error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4639
diff
changeset
|
387 |
# messages. |
d8ad65dab3e9
remove #<formid> from url used to redirect after a validation error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
4639
diff
changeset
|
388 |
raise Redirect(req.form['__errorurl'].rsplit('#', 1)[0]) |
0 | 389 |
self.error_handler(req, ex, tb=False) |
1426 | 390 |
|
0 | 391 |
def error_handler(self, req, ex, tb=False): |
392 |
excinfo = sys.exc_info() |
|
393 |
self.exception(repr(ex)) |
|
394 |
req.set_header('Cache-Control', 'no-cache') |
|
395 |
req.remove_header('Etag') |
|
396 |
req.message = None |
|
397 |
req.reset_headers() |
|
4709
6a71fc0b4274
[web] fix #724769: Use RemoteCallFailed in the publisher's error_handler
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
4679
diff
changeset
|
398 |
if req.json_request: |
6a71fc0b4274
[web] fix #724769: Use RemoteCallFailed in the publisher's error_handler
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
4679
diff
changeset
|
399 |
raise RemoteCallFailed(unicode(ex)) |
0 | 400 |
try: |
401 |
req.data['ex'] = ex |
|
402 |
if tb: |
|
403 |
req.data['excinfo'] = excinfo |
|
404 |
req.form['vid'] = 'error' |
|
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
405 |
errview = self.vreg['views'].select('error', req) |
882
75488a2a875e
fix ui.main-template property handling
sylvain.thenault@logilab.fr
parents:
871
diff
changeset
|
406 |
template = self.main_template_id(req) |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
407 |
content = self.vreg['views'].main_template(req, template, view=errview) |
0 | 408 |
except: |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
409 |
content = self.vreg['views'].main_template(req, 'error-template') |
0 | 410 |
raise StatusResponse(500, content) |
1426 | 411 |
|
0 | 412 |
def need_login_content(self, req): |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
413 |
return self.vreg['views'].main_template(req, 'login') |
1426 | 414 |
|
0 | 415 |
def loggedout_content(self, req): |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
416 |
return self.vreg['views'].main_template(req, 'loggedout') |
1426 | 417 |
|
0 | 418 |
def notfound_content(self, req): |
419 |
req.form['vid'] = '404' |
|
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
420 |
view = self.vreg['views'].select('404', req) |
882
75488a2a875e
fix ui.main-template property handling
sylvain.thenault@logilab.fr
parents:
871
diff
changeset
|
421 |
template = self.main_template_id(req) |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
422 |
return self.vreg['views'].main_template(req, template, view=view) |
0 | 423 |
|
882
75488a2a875e
fix ui.main-template property handling
sylvain.thenault@logilab.fr
parents:
871
diff
changeset
|
424 |
def main_template_id(self, req): |
2263
1f59cd5b710f
accept a __template parameter that specifies a different (main) template
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents:
1977
diff
changeset
|
425 |
template = req.form.get('__template', req.property_value('ui.main-template')) |
2650
18aec79ec3a3
R [vreg] important refactoring of the vregistry, moving behaviour to end dictionnary (and so leaving room for more flexibility ; keep bw compat ; update api usage in cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents:
2613
diff
changeset
|
426 |
if template not in self.vreg['views']: |
882
75488a2a875e
fix ui.main-template property handling
sylvain.thenault@logilab.fr
parents:
871
diff
changeset
|
427 |
template = 'main-template' |
75488a2a875e
fix ui.main-template property handling
sylvain.thenault@logilab.fr
parents:
871
diff
changeset
|
428 |
return template |
1426 | 429 |
|
0 | 430 |
|
431 |
set_log_methods(CubicWebPublisher, LOGGER) |
|
432 |
set_log_methods(CookieSessionHandler, LOGGER) |