diff options
| author | drebs <drebs@leap.se> | 2017-03-19 10:05:56 +0100 |
|---|---|---|
| committer | drebs <drebs@leap.se> | 2017-04-04 18:27:35 +0200 |
| commit | 994dcf642216f3bbb5fa2288609827921465ad8d (patch) | |
| tree | cd6348ec945919f6c210323170b23372afcbe1fd /server/src | |
| parent | d1af3fcbedfd2c709c125236561646e71baec403 (diff) | |
[feat] allow blobs urls in server
Diffstat (limited to 'server/src')
| -rw-r--r-- | server/src/leap/soledad/server/url_mapper.py | 22 |
1 files changed, 10 insertions, 12 deletions
diff --git a/server/src/leap/soledad/server/url_mapper.py b/server/src/leap/soledad/server/url_mapper.py index a0edeaca..d4961c92 100644 --- a/server/src/leap/soledad/server/url_mapper.py +++ b/server/src/leap/soledad/server/url_mapper.py @@ -50,18 +50,14 @@ class URLMapper(object): This method sets up the following authorization rules: - URL path | Authorized actions - -------------------------------------------------- - / | GET - /robots.txt | GET - /shared-db | GET - /shared-db/docs | - - /shared-db/doc/{any_id} | GET, PUT, DELETE - /shared-db/sync-from/{source} | - - /user-db | - - /user-db/docs | - - /user-db/doc/{id} | - - /user-db/sync-from/{source} | GET, PUT, POST + URL path | Authorized actions + ---------------------------------------------------- + / | GET + /robots.txt | GET + /shared-db | GET + /shared-db/doc/{any_id} | GET, PUT, DELETE + /user-{uuid}/sync-from/{source} | GET, PUT, POST + /blobs/{uuid}/{blob_id} | GET, PUT, POST """ # auth info for global resource self._connect('/', ['GET']) @@ -75,3 +71,5 @@ class URLMapper(object): # auth info for user-db sync resource self._connect('/user-{uuid}/sync-from/{source_replica_uid}', ['GET', 'PUT', 'POST']) + # auth info for blobs resource + self._connect('/blobs/{uuid}/{blob_id}', ['GET', 'PUT']) |