def register_view(request):
data = get_data(request)
if not isinstance(data, dict) or 'hash' not in data:
return error_handler(request, 404, {"location": "body", "name": "hash", "description": "Not Found"})
md5 = data['hash']
if not md5.startswith('md5:'):
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash type is not supported.']})
if len(md5) != 36:
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash value is wrong length.']})
if set(md5[4:]).difference('0123456789abcdef'):
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash value is not hexadecimal.']})
try:
uuid = request.registry.storage.register(md5)
except StorageUploadError as exc:
LOGGER.error('Storage error: %s', exc.message, extra=context_unpack(request, {'MESSAGE_ID': 'storage_error'}))
return error_handler(request, 502, {"description": "Upload failed, please try again later"})
LOGGER.info('Registered new document upload {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'registered_upload'}, {'doc_id': uuid, 'doc_hash': md5}))
signature = quote(b64encode(request.registry.signer.signature(uuid)))
upload_url = request.route_url('upload_file', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.upload_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
data['url'] = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
request.response.status = 201
request.response.headers['Location'] = upload_url
return {'data': data, 'upload_url': upload_url}
def upload_view(request):
if 'file' not in request.POST or not hasattr(request.POST['file'], 'filename'):
return error_handler(request, 404, {"location": "body", "name": "file", "description": "Not Found"})
post_file = request.POST['file']
try:
uuid, md5, content_type, filename = request.registry.storage.upload(post_file)
except StorageUploadError as exc:
LOGGER.error('Storage error: %s', exc.message, extra=context_unpack(request, {'MESSAGE_ID': 'storage_error'}))
return error_handler(request, 502, {"description": "Upload failed, please try again later"})
LOGGER.info('Uploaded new document {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'uploaded_new_document'}, {'doc_id': uuid, 'doc_hash': md5}))
expires = int(time()) + EXPIRES
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, expires))))
get_url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'Expires': expires, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
request.response.headers['Location'] = get_url
return {'data': {'url': url, 'hash': md5, 'format': content_type, 'title': filename}, 'get_url': get_url}
def register_view(request):
data = get_data(request)
if not isinstance(data, dict) or 'hash' not in data:
return error_handler(request, 404, {"location": "body", "name": "hash", "description": "Not Found"})
md5 = data['hash']
if not md5.startswith('md5:'):
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash type is not supported.']})
if len(md5) != 36:
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash value is wrong length.']})
if set(md5[4:]).difference('0123456789abcdef'):
return error_handler(request, 422, {"location": "body", "name": "hash", "description": [u'Hash value is not hexadecimal.']})
uuid = request.registry.storage.register(md5)
LOGGER.info('Registered new document upload {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'registered_upload'}, {'doc_id': uuid, 'doc_hash': md5}))
signature = quote(b64encode(request.registry.signer.signature(uuid)))
upload_url = request.route_url('upload_file', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.upload_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
data['url'] = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
request.response.status = 201
request.response.headers['Location'] = upload_url
return {'data': data, 'upload_url': upload_url}
def upload_view(request):
if 'file' not in request.POST or not hasattr(request.POST['file'], 'filename'):
return error_handler(request, 404, {"location": "body", "name": "file", "description": "Not Found"})
post_file = request.POST['file']
uuid, md5, content_type, filename = request.registry.storage.upload(post_file)
LOGGER.info('Uploaded new document {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'uploaded_new_document'}, {'doc_id': uuid, 'doc_hash': md5}))
expires = int(time()) + EXPIRES
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, expires))))
get_url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'Expires': expires, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
request.response.headers['Location'] = get_url
return {'data': {'url': url, 'hash': md5, 'format': content_type, 'title': filename}, 'get_url': get_url}
def upload_file_view(request):
if 'file' not in request.POST or not hasattr(request.POST['file'], 'filename'):
return error_handler(request, 404, {"location": "body", "name": "file", "description": "Not Found"})
uuid = request.matchdict['doc_id']
keyid = request.GET.get('KeyID', request.registry.dockey)
if keyid not in request.registry.dockeyring:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does not exist"})
key = request.registry.dockeyring.get(keyid)
if 'Signature' not in request.GET:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Not Found"})
signature = request.GET['Signature']
try:
signature = b64decode(unquote(signature))
except TypeError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature invalid"})
try:
if uuid != key.verify(signature + uuid.encode("utf-8")):
raise ValueError
except ValueError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature does not match"})
post_file = request.POST['file']
try:
uuid, md5, content_type, filename = request.registry.storage.upload(post_file, uuid)
except KeyNotFound:
return error_handler(request, 404, {"location": "url", "name": "doc_id", "description": "Not Found"})
except ContentUploaded:
return error_handler(request, 403, {"location": "url", "name": "doc_id", "description": "Content already uploaded"})
except HashInvalid:
return error_handler(request, 403, {"location": "body", "name": "file", "description": "Invalid checksum"})
except StorageUploadError as exc:
LOGGER.error('Storage error: %s', exc.message, extra=context_unpack(request, {'MESSAGE_ID': 'storage_error'}))
return error_handler(request, 502, {"description": "Upload failed, please try again later"})
LOGGER.info('Uploaded document {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'uploaded_document'}, {'doc_hash': md5}))
expires = int(time()) + EXPIRES
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, expires))))
get_url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'Expires': expires, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
return {'data': {'url': url, 'hash': md5, 'format': content_type, 'title': filename}, 'get_url': get_url}
def get_view(request):
uuid = request.matchdict['doc_id']
now = int(time())
expires = request.GET.get('Expires')
if expires and expires.isdigit() and int(expires) < now:
return error_handler(request, 403, {"location": "url", "name": "Expires", "description": "Request has expired"})
keyid = request.GET.get('KeyID', request.registry.dockey)
if keyid not in (request.registry.apikey, request.registry.dockey) and not expires:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does permit to get private document"})
if keyid not in request.registry.keyring:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does not exist"})
mess = "{}\0{}".format(uuid, expires) if expires else uuid
if request.GET.get('Prefix'):
mess = '{}/{}'.format(request.GET['Prefix'], mess)
uuid = '{}/{}'.format(request.GET['Prefix'], uuid)
key = request.registry.keyring.get(keyid)
if 'Signature' not in request.GET:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Not Found"})
signature = request.GET['Signature']
try:
signature = b64decode(unquote(signature))
except TypeError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature invalid"})
try:
if mess != key.verify(signature + mess.encode("utf-8")):
raise ValueError
except ValueError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature does not match"})
try:
doc = request.registry.storage.get(uuid)
except KeyNotFound:
return error_handler(request, 404, {"location": "url", "name": "doc_id", "description": "Not Found"})
except NoContent:
return HTTPNoContent()
except StorageRedirect as e:
request.response.status = 302
request.response.headers['Location'] = e.url
return e.url
else:
request.response.content_type = doc['Content-Type']
request.response.content_disposition = doc['Content-Disposition']
request.response.body = doc['Content']
return request.response
def get_view(request):
uuid = request.matchdict['doc_id']
now = int(time())
expires = request.GET.get('Expires')
if expires and expires.isdigit() and int(expires) < now:
return error_handler(request, 403, {"location": "url", "name": "Expires", "description": "Request has expired"})
keyid = request.GET.get('KeyID', request.registry.dockey)
if keyid not in (request.registry.apikey, request.registry.dockey) and not expires:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does permit to get private document"})
if keyid not in request.registry.keyring:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does not exist"})
mess = "{}\0{}".format(uuid, expires) if expires else uuid
if request.GET.get('Prefix'):
mess = '{}/{}'.format(request.GET['Prefix'], mess)
uuid = '{}/{}'.format(request.GET['Prefix'], uuid)
key = request.registry.keyring.get(keyid)
if 'Signature' not in request.GET:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Not Found"})
signature = request.GET['Signature']
try:
signature = b64decode(unquote(signature))
except TypeError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature invalid"})
try:
if mess != key.verify(signature + mess.encode("utf-8")):
raise ValueError
except ValueError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature does not match"})
try:
doc = request.registry.storage.get(uuid)
except KeyNotFound:
return error_handler(request, 404, {"location": "url", "name": "doc_id", "description": "Not Found"})
except NoContent:
return HTTPNoContent()
except StorageRedirect as e:
request.response.status = 302
request.response.headers['Location'] = e.url
return e.url
else:
request.response.content_type = doc['Content-Type']
request.response.content_disposition = doc['Content-Disposition']
request.response.body = doc['Content']
return request.response
def upload_file_view(request):
if 'file' not in request.POST or not hasattr(request.POST['file'], 'filename'):
return error_handler(request, 404, {"location": "body", "name": "file", "description": "Not Found"})
uuid = request.matchdict['doc_id']
keyid = request.GET.get('KeyID', request.registry.dockey)
if keyid not in request.registry.dockeyring:
return error_handler(request, 403, {"location": "url", "name": "KeyID", "description": "Key Id does not exist"})
key = request.registry.dockeyring.get(keyid)
if 'Signature' not in request.GET:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Not Found"})
signature = request.GET['Signature']
try:
signature = b64decode(unquote(signature))
except TypeError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature invalid"})
try:
if uuid != key.verify(signature + uuid.encode("utf-8")):
raise ValueError
except ValueError:
return error_handler(request, 403, {"location": "url", "name": "Signature", "description": "Signature does not match"})
post_file = request.POST['file']
try:
uuid, md5, content_type, filename = request.registry.storage.upload(post_file, uuid)
except KeyNotFound:
return error_handler(request, 404, {"location": "url", "name": "doc_id", "description": "Not Found"})
except ContentUploaded:
return error_handler(request, 403, {"location": "url", "name": "doc_id", "description": "Content already uploaded"})
except HashInvalid:
return error_handler(request, 403, {"location": "body", "name": "file", "description": "Invalid checksum"})
LOGGER.info('Uploaded document {}'.format(uuid),
extra=context_unpack(request, {'MESSAGE_ID': 'uploaded_document'}, {'doc_hash': md5}))
expires = int(time()) + EXPIRES
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, md5[4:]))))
url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
signature = quote(b64encode(request.registry.signer.signature("{}\0{}".format(uuid, expires))))
get_url = request.route_url('get', doc_id=uuid, _query={'Signature': signature, 'Expires': expires, 'KeyID': request.registry.dockey}, _host=request.registry.get_host or request.domain, _port=request.host_port)
return {'data': {'url': url, 'hash': md5, 'format': content_type, 'title': filename}, 'get_url': get_url}