Ejemplo n.º 1
0
 def setUp(self):
     self.config = testing.setUp()
     self.config.add_view_predicate('content_type', ContentTypePredicate)
     self.config.set_csrf_storage_policy(
         CookieCSRFStoragePolicy(domain='localhost'))
     self.config.set_default_csrf_options(require_csrf=True)
     self.config.registry.cornice_services = {}
Ejemplo n.º 2
0
def main(global_config, **settings):
    """ This function returns a Pyramid WSGI application.
    """
    my_session_factory = SignedCookieSessionFactory('itsaseekreet')
    with Configurator(settings=settings,
                      session_factory=my_session_factory) as config:
        config.include('.models')
        config.include('cornice')
        config.include('pyramid_tm')
        config.include('pyramid_jinja2')
        config.add_jinja2_renderer('.html')
        config.include('.routes')
        config.include('.views')

        # Store the CSRF token in cookie as the Angular HttpClient reads
        # from the cookie to set the appropriate headers. Configure the
        # pyramid to use the same token name and X- header used by the
        # Angular
        csrf_policy = CookieCSRFStoragePolicy(cookie_name='XSRF-TOKEN')
        config.set_csrf_storage_policy(csrf_policy)
        config.set_default_csrf_options(require_csrf=True,
                                        token='XSRF-TOKEN',
                                        header='X-XSRF-TOKEN')

        config.scan()
        config.add_static_view(name='/', path=settings.get('client_url'))
    return config.make_wsgi_app()
Ejemplo n.º 3
0
def includeme(config):
    settings = config.get_settings()

    config.set_csrf_storage_policy(CookieCSRFStoragePolicy())
    config.set_default_csrf_options(require_csrf=True)

    config.set_security_policy(MySecurityPolicy(settings['auth.secret']))
Ejemplo n.º 4
0
def includeme(config):
    settings = config.get_settings()

    config.set_csrf_storage_policy(CookieCSRFStoragePolicy())
    config.set_default_csrf_options(require_csrf=True)

    config.set_security_policy(MySecurityPolicy(settings['auth.secret']))
    config.add_request_method(
        lambda request: request.identity, 'user', property=True)
Ejemplo n.º 5
0
    def _makeOne(self, **kw):
        from pyramid.csrf import CookieCSRFStoragePolicy

        return CookieCSRFStoragePolicy(**kw)
Ejemplo n.º 6
0
def includeme(config):
    config.set_csrf_storage_policy(CookieCSRFStoragePolicy())
    config.set_default_csrf_options(require_csrf=True)