Use a tween application instead of a catchall route. Using a catchall route has some drawbacks. Especially, we have no mean to have a route that would match only if no other one does AND no view matches either. Said differently, our default handler cannot be plugged on the route level nor the view level, because it is has to be activated only if nothing else works in the pyramid application. Using a tween application allow to handle requests that raises a HTTPNotFound error, while having the pyramid error handler still active between our tween app and the outside world. Related to #4291173

     1

from pyramid.authentication import SessionAuthenticationPolicy

     2

from pyramid.authorization import ACLAuthorizationPolicy

     3

from pyramid.session import SignedCookieSessionFactory

     4

     5

from pyramid_cubicweb.core import get_principals

     6

     7

     8

def includeme(config):

     9

    config.set_session_factory(

    10

        SignedCookieSessionFactory(

    11

            secret=config.registry.settings['session.secret']

    12

        ))

    13

    14

    config.set_authentication_policy(

    15

        SessionAuthenticationPolicy(callback=get_principals))

    16

    config.set_authorization_policy(ACLAuthorizationPolicy())

    17

    18

    config.include('pyramid_cubicweb.login')