almet/copanier
1
0
Fork 0
mirror of https://github.com/almet/copanier.git synced 2025-04-28 11:32:38 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Workaround static extension not marked as "unprotected"

Browse source
This commit is contained in:
Yohan Boniface 2019-04-09 18:45:15 +02:00
parent 02ff34dff7
commit fa377aa290
1 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
copanier/__init__.py
View file

@ -79,7 +79,12 @@ traceback(app)
@app.listen("request")
async def auth_required(request, response):
if request.route and not request.route.payload.get("genuine"):
# Should be handler Roll side?
# In dev mode, we serve the static, but we don't have yet a way to mark static
# route as unprotected.
if request.path.startswith('/static/'):
return
if request.route.payload and not request.route.payload.get("unprotected"):
token = request.cookies.get("token")
email = None
if token:
@ -117,13 +122,13 @@ async def on_startup():
Delivery.init_fs()
@app.route("/sésame", methods=["GET"], genuine=True)
@app.route("/sésame", methods=["GET"], unprotected=True)
async def sesame(request, response):
response.html("sesame.html")
@app.route("/sésame", methods=["POST"])
async def send_sesame(request, response, genuine=True):
async def send_sesame(request, response, unprotected=True):
email = request.form.get("email")
token = utils.create_token(email)
emails.send(
@ -135,7 +140,7 @@ async def send_sesame(request, response, genuine=True):
response.redirect = "/"
@app.route("/sésame/{token}", methods=["GET"], genuine=True)
@app.route("/sésame/{token}", methods=["GET"], unprotected=True)
async def set_sesame(request, response, token):
decoded = utils.read_token(token)
if not decoded: