1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
#
# Copyright (c) 2016 ThoughtWorks, Inc.
#
# Pixelated is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Pixelated is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
import json
import os
import pkg_resources
from pixelated.resources.users import UsersResource
import pixelated
from pixelated.resources import BaseResource, UnAuthorizedResource, UnavailableResource
from pixelated.resources import IPixelatedSession
from pixelated.resources.attachments_resource import AttachmentsResource
from pixelated.resources.sandbox_resource import SandboxResource
from pixelated.resources.contacts_resource import ContactsResource
from pixelated.resources.features_resource import FeaturesResource
from pixelated.resources.feedback_resource import FeedbackResource
from pixelated.resources.login_resource import LoginResource
from pixelated.resources.logout_resource import LogoutResource
from pixelated.resources.user_settings_resource import UserSettingsResource
from pixelated.resources.mail_resource import MailResource
from pixelated.resources.mails_resource import MailsResource
from pixelated.resources.tags_resource import TagsResource
from pixelated.resources.keys_resource import KeysResource
from pixelated.resources.inbox_resource import InboxResource, MODE_STARTUP, MODE_RUNNING
from twisted.web.resource import NoResource
from twisted.web.static import File
from twisted.web.util import Redirect
from twisted.logger import Logger
logger = Logger()
class RootResource(BaseResource):
def __init__(self, services_factory, static_folder, public=False):
BaseResource.__init__(self, services_factory)
self._public = public
self._static_folder = static_folder
self._services_factory = services_factory
with open(pkg_resources.resource_filename('templates', 'Interstitial.html')) as f:
self.interstitial = f.read()
self._redirect_to_login_resource = Redirect('login')
self._inbox_resource = InboxResource(services_factory)
self._startup_mode()
def _startup_mode(self):
self.putChildPublic('static', File(self._static_folder))
self._mode = MODE_STARTUP
logger.debug('Root in STARTUP mode. %s' % self)
def getChildWithDefault(self, path, request):
self._add_csrf_cookie(request)
if path == '':
return self._redirect_to_login_resource if self._public else self._inbox_resource
if self._mode == MODE_STARTUP:
return UnavailableResource()
if self._is_xsrf_valid(request):
return BaseResource.getChildWithDefault(self, path, request)
return UnAuthorizedResource()
def _is_xsrf_valid(self, request):
get_request = (request.method == 'GET')
if get_request:
return True
xsrf_token = request.getCookie('XSRF-TOKEN')
logger.debug('CSRF token: %s' % xsrf_token)
ajax_request = (request.getHeader('x-requested-with') == 'XMLHttpRequest')
if ajax_request:
xsrf_header = request.getHeader('x-xsrf-token')
return xsrf_header and xsrf_header == xsrf_token
csrf_input = request.args.get('csrftoken', [None])[0] or json.loads(request.content.read()).get('csrftoken', [None])[0]
return csrf_input and csrf_input == xsrf_token
def putChildPublic(self, path, resource):
return BaseResource.putChild(self, path, resource)
def putChildProtected(self, path, resource):
return BaseResource.putChild(self, path, UnAuthorizedResource() if self._public else resource)
def putChild(self, path, resource):
logger.warn('Use either `putChildPublic` or `putChildProtected` on this resource')
return self.putChildProtected(path, resource) # to be on the safe side
def initialize(self, provider=None, disclaimer_banner=None, authenticator=None):
self.putChildPublic('sandbox', SandboxResource(self._static_folder))
self.putChildProtected('keys', KeysResource(self._services_factory))
self.putChildProtected(AttachmentsResource.BASE_URL, AttachmentsResource(self._services_factory))
self.putChildProtected('contacts', ContactsResource(self._services_factory))
self.putChildProtected('features', FeaturesResource(provider))
self.putChildProtected('tags', TagsResource(self._services_factory))
self.putChildProtected('mails', MailsResource(self._services_factory))
self.putChildProtected('mail', MailResource(self._services_factory))
self.putChildProtected('feedback', FeedbackResource(self._services_factory))
self.putChildProtected('user-settings', UserSettingsResource(self._services_factory))
self.putChildProtected('users', UsersResource(self._services_factory))
self.putChildPublic(LoginResource.BASE_URL,
LoginResource(self._services_factory, provider, disclaimer_banner=disclaimer_banner, authenticator=authenticator))
self.putChildPublic(LogoutResource.BASE_URL, LogoutResource(self._services_factory))
self._inbox_resource.initialize()
self._mode = MODE_RUNNING
logger.debug('Root in RUNNING mode. %s' % self)
|
