Mercurial > p > roundup > code
view setup.py @ 6693:9a1f5e496e6c
issue2551203 - Add support for CORS preflight request
Add support for unauthenticated CORS preflight and fix headers for
CORS.
client.py:
pass through unauthenticated CORS preflight to rest backend. Normal
rest OPTION handlers (including tracker defined extensions) can
see and handle the request.
make some error cases return error json with crrect mime type rather
than plain text tracebacks.
create new functions to verify origin and referer that filter using
allowed origins setting.
remove tracker base url from error message is referer is not at an
allowed origin.
rest.py:
fix up OPTION methods handlers to include
Access-Control-Allow-Methods that are the same as the Allow
header.
set cache to one week for all Access-Control headers for CORS
preflight only.
remove self.client.setHeader("Access-Control-Allow-Origin", "*") and
set Access-Control-Allow-Origin to the client supplied origin if
it passes allowed origin checks. Required for CORS otherwise data
isn't available to caller. Set for all responses.
set Vary header now includes Origin as responses can differ based on
Origin for all responses.
set Access-Control-Allow-Credentials to true on all responses.
test_liveserver.py:
run server with setting to enforce origin csrf header check
run server with setting to enforce x-requested-with csrf header check
run server with setting for allowed_api_origins
requests now set required csrf headers
test preflight request on collections
check new headers and Origin is no longer '*'
rewrite all compression checks to use a single method with argument
to use different compression methods. Reduce a lot of code
duplication and makes updating for new headers easier.
test_cgi:
test new error messages in client.py
account for new headers
test preflight and new code paths
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Tue, 07 Jun 2022 09:39:35 -0400 |
| parents | 4b627102b344 |
| children | b3ba03d2b214 |
line wrap: on
line source
#! /usr/bin/env python # -*- coding: utf-8 -*- # # Copyright (c) 2001 Bizar Software Pty Ltd (http://www.bizarsoftware.com.au/) # This module is free software, and you may redistribute it and/or modify # under the same terms as Python, so long as this copyright message and # disclaimer are retained in their original form. # # IN NO EVENT SHALL BIZAR SOFTWARE PTY LTD BE LIABLE TO ANY PARTY FOR # DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING # OUT OF THE USE OF THIS CODE, EVEN IF THE AUTHOR HAS BEEN ADVISED OF THE # POSSIBILITY OF SUCH DAMAGE. # # BIZAR SOFTWARE PTY LTD SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING, # BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS # FOR A PARTICULAR PURPOSE. THE CODE PROVIDED HEREUNDER IS ON AN "AS IS" # BASIS, AND THERE IS NO OBLIGATION WHATSOEVER TO PROVIDE MAINTENANCE, # SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS. # from __future__ import print_function from roundup.dist.command.build_doc import build_doc from roundup.dist.command.build import build, list_message_files from roundup.dist.command.bdist_rpm import bdist_rpm from roundup.dist.command.install_lib import install_lib from setuptools import setup from sysconfig import get_path import sys, os from glob import glob def include(d, e): """Generate a pair of (directory, file-list) for installation. 'd' -- A directory 'e' -- A glob pattern""" return (d, [f for f in glob('%s/%s'%(d, e)) if os.path.isfile(f)]) def mapscript(path): """ Helper for building a list of script names from a list of module files. """ module = os.path.splitext(os.path.basename(path))[0] script = module.replace('_', '-') return '%s = roundup.scripts.%s:run' % (script, module) def make_data_files_absolute(data_files, prefix): """Using setuptools data files are put under the egg install directory if the datafiles are relative paths. We don't want this. Data files like man pages, documentation, templates etc. should be installed in a directory outside of the install directory. So we prefix all datafiles making them absolute so man pages end up in places like: /usr/local/share/man, docs in /usr/local/share/doc/roundup, templates in /usr/local/share/roundup/templates. """ new_data_files = [ (os.path.join(prefix,df[0]),df[1]) for df in data_files ] return new_data_files def get_prefix(): """Get site specific prefix using --prefix, platform lib or sys.prefix. """ prefix_arg=False prefix="" for a in sys.argv: if prefix_arg: prefix=a break # is there a short form -p or something for this?? if a.startswith('--prefix'): if a == '--prefix': # next argument is prefix prefix_arg=True continue else: # strip '--prefix=' prefix=a[9:] if prefix: return prefix else: # get the platform lib path. Must start with / else infinite loop. plp = get_path('platlib') # nuke suffix that matches lib/* and return prefix head, tail = os.path.split(plp) while tail not in ['lib', 'lib64' ] and head != '/': head, tail = os.path.split(head) if head == '/': head = sys.prefix return head def main(): # template munching packages = [ 'roundup', 'roundup.anypy', 'roundup.cgi', 'roundup.cgi.PageTemplates', 'roundup.cgi.TAL', 'roundup.cgi.ZTUtils', 'roundup.backends', 'roundup.scripts', 'roundup.test', ] # build list of scripts from their implementation modules scripts = [mapscript(f) for f in glob('roundup/scripts/[!_]*.py')] data_files = [ ('share/roundup/cgi-bin', ['frontends/roundup.cgi']), ] # install man pages on POSIX platforms if os.name == 'posix': data_files.append(include('share/man/man1', '*')) # add the templates to the data files lists from roundup.init import listTemplates templates = [t['path'] for t in listTemplates('share/roundup/templates').values()] for tdir in templates: for idir in '. detectors extensions html html/layout static'.split(): data_files.append(include(os.path.join(tdir, idir), '*')) # add message files for (_dist_file, _mo_file) in list_message_files(): data_files.append((os.path.dirname(_mo_file), [os.path.join("build", _mo_file)])) # add docs data_files.append(include('share/doc/roundup/html', '*')) data_files.append(include('share/doc/roundup/html/_images', '*')) data_files.append(include('share/doc/roundup/html/_sources', '*')) data_files.append(include('share/doc/roundup/html/_static', '*')) data_files = make_data_files_absolute(data_files, get_prefix()) # when running under python2, even if called from setup, it tries # and fails to perform an egg easy install even though it shouldn't: # https://issues.roundup-tracker.org/issue2551185 # Add this argument if we are an install to prevent this. # This works right under python3. # FIXME there has to be a better way than this # https://issues.roundup-tracker.org/issue2551185 if sys.version_info[0] < 3: for arg in sys.argv: if arg == 'install': sys.argv.append('--old-and-unmanageable') # perform the setup action from roundup import __version__ # long_description may not contain non-ascii characters. Distutils # will produce an non-installable installer on linux *and* we can't # run the bdist_wininst on Linux if there are non-ascii characters # because the distutils installer will try to use the mbcs codec # which isn't available on non-windows platforms. See also # http://bugs.python.org/issue10945 long_description=open('doc/announcement.txt').read() try: # attempt to interpret string as 'ascii' long_description.encode('ascii') except UnicodeEncodeError as cause: print("doc/announcement.txt contains non-ascii: %s" % cause, file=sys.stderr) sys.exit(42) setup(name='roundup', version=__version__, author="Richard Jones", author_email="richard@users.sourceforge.net", maintainer="Ralf Schlatterbeck", maintainer_email="rsc@runtux.com", description="A simple-to-use and -install issue-tracking system" " with command-line, web and e-mail interfaces. Highly" " customisable.", long_description=long_description, url='https://www.roundup-tracker.org', download_url='https://pypi.org/project/roundup', classifiers=['Development Status :: 5 - Production/Stable', #'Development Status :: 4 - Beta', #'Development Status :: 3 - Alpha', 'Environment :: Console', 'Environment :: Web Environment', 'Intended Audience :: Customer Service', 'Intended Audience :: Information Technology', 'Intended Audience :: End Users/Desktop', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'License :: OSI Approved :: MIT License', 'Operating System :: MacOS :: MacOS X', 'Operating System :: Microsoft :: Windows', 'Operating System :: POSIX', 'Programming Language :: Python', 'Programming Language :: Python :: 2', 'Programming Language :: Python :: 2.7', 'Programming Language :: Python :: 3', 'Programming Language :: Python :: 3.4', 'Programming Language :: Python :: 3.5', 'Programming Language :: Python :: 3.6', 'Programming Language :: Python :: 3.7', 'Programming Language :: Python :: 3.8', 'Programming Language :: Python :: 3.9', 'Topic :: Communications :: Email', 'Topic :: Office/Business', 'Topic :: Software Development :: Bug Tracking', 'Topic :: Internet :: WWW/HTTP :: WSGI :: Application', ], # Override certain command classes with our own ones cmdclass= {'build_doc': build_doc, 'build': build, 'bdist_rpm': bdist_rpm, 'install_lib': install_lib, }, packages=packages, entry_points={ 'console_scripts': scripts }, data_files=data_files) if __name__ == '__main__': # Prevent `pip install roundup` from building bdist_wheel. # Man pages, templates, locales installed under site-packages not # in normal system locations. # https://stackoverflow.com/questions/36846260/can-python-setuptools-install-files-outside-dist-packages ''' if 'bdist_wheel' in sys.argv: raise RuntimeError("This setup.py does not support wheels") ''' os.chdir(os.path.dirname(__file__) or '.') main() # vim: set filetype=python sts=4 sw=4 et si :
