def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ engine = engine_from_config(settings, 'sqlalchemy.') initialize_sql(engine) session_factory = session_factory_from_settings(settings) #redis # session_factory = UnencryptedCookieSessionFactoryConfig('itsaseekreet') authn_policy = AuthTktAuthenticationPolicy(secret='s0secret', callback=groupfinder) authz_policy = ACLAuthorizationPolicy() config = Configurator( settings=settings, root_factory='testsite.security.RootFactory', authentication_policy=authn_policy, authorization_policy=authz_policy, session_factory=session_factory, ) # jinja_env = _get_or_build_default_environment(config.registry) # ?#?#? #config.set_request_factory(RequestWithUserAttribute) config.add_route('home', '/') config.add_route('auth', '/auth') # config.add_view(hello_world, route_name='hello') # config.add_view(hello_world, route_name='hello') config.scan() return config.make_wsgi_app()
def main(global_config, **settings): # we dont want these values in our settings.ini mail_settings = { 'mail.host':os.environ.get('YSS_MAIL_HOST', 'localhost'), 'mail.port':os.environ.get('YSS_MAIL_PORT', '25'), 'mail.username':os.environ.get('YSS_MAIL_USERNAME', None), 'mail.password':os.environ.get('YSS_MAIL_PASSWORD', None), } settings.update(mail_settings) settings['redis.sessions.secret'] = os.environ.get( 'YSS_REDIS_SESSIONS_SECRET', 'seekr1t') settings['substanced.secret'] = os.environ.get( 'YSS_SUBSTANCED_SECRET', 'seekri1') mimetypes.add_type('application/font-woff', '.woff') secret = settings['substanced.secret'] authn_policy = YSSAuthenticationPolicy(secret) sentry_dsn = os.environ.get('YSS_SENTRY_DSN') if sentry_dsn: sentry_sdk.init(dsn=sentry_dsn, integrations=[PyramidIntegration()]) config = Configurator( settings=settings, root_factory=root_factory, authentication_policy=authn_policy, ) session_factory = session_factory_from_settings(settings) config.set_session_factory(session_factory) config.include('substanced') config.include('pyramid_layout') config.include('velruse.providers.twitter') config.include('velruse.providers.google_oauth2') config.include('.root') config.include('.evolve') config.include('.catalog') config.include('.songs') config.include('.recordings') config.add_twitter_login( consumer_key=os.environ['YSS_TWITTER_LOGIN_CONSUMER_KEY'], consumer_secret=os.environ['YSS_TWITTER_LOGIN_CONSUMER_SECRET'], ) config.add_google_oauth2_login( consumer_key=os.environ['YSS_GOOGLE_LOGIN_CONSUMER_KEY'], consumer_secret=os.environ['YSS_GOOGLE_LOGIN_CONSUMER_SECRET'], ) config.add_static_view('static', 'yss.root.views:static') config.add_permission('yss.indexed') config.add_request_method( authentication_type, 'authentication_type', reify=True ) config.scan() return config.make_wsgi_app()
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ with Configurator(settings=settings) as config: session_factory = session_factory_from_settings(settings) allow_cors(config) config.include('pyramid_jinja2') config.include('.models') config.include('.routes') config.include('.security') config.set_session_factory(session_factory) config.include('pyramid_redis_sessions') config.scan() return config.make_wsgi_app()
def overload_redis_session_factory(settings, config): ''' pyramid_redis_sessions will create a session object for every request, even the CORS preflight requests, and if there is no session cookie, a new session key will be created. And the CORS preflight requests will never have a session cookie. So we overload the session factory function here and add a special case for CORS preflight requests. ''' session_factory = session_factory_from_settings(settings) def overloaded_session_factory(request, **kwargs): if request.method.lower() == 'options': return DummySession() else: return session_factory(request, **kwargs) config.set_session_factory(overloaded_session_factory)
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ # Connect DB engine = engine_from_config(settings, 'sqlalchemy.') initialize_sql(engine) session_factory = session_factory_from_settings(settings) #redis # session_factory = UnencryptedCookieSessionFactoryConfig('itsaseekreet') # authn_policy = AuthTktAuthenticationPolicy(secret='s0secret', # callback=groupfinder) authz_policy = ACLAuthorizationPolicy() config = Configurator( settings=settings, root_factory='testsite.security.RootFactory', # authentication_policy=authn_policy, authorization_policy=authz_policy, session_factory=session_factory, ) # Add automatic CORS responses config.include('.cors') config.add_cors_preflight_handler() # make sure to add this before other routes to intercept OPTIONS # Add JWT config.include('pyramid_jwt') config.set_jwt_authentication_policy('s0secret', callback=add_role_principals) # jinja_env = _get_or_build_default_environment(config.registry) # ?#?#? #config.set_request_factory(RequestWithUserAttribute) config.add_route('home', '/home') config.add_route('auth', '/auth') # config.add_view(hello_world, route_name='hello') # config.add_view(hello_world, route_name='hello') config.scan() return config.make_wsgi_app()
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ engine = engine_from_config(settings, 'sqlalchemy.') models.DBSession.configure(bind=engine) models.Base.metadata.bind = engine config = Configurator(settings=settings) config.set_root_factory(RootFactory) config.set_authentication_policy(UserAuthenticationPolicy()) config.set_authorization_policy(ACLAuthorizationPolicy()) config.add_request_method(UserAuthenticationPolicy.get_user, 'user', reify=True) config.set_default_permission(Permissions.MEMBER) session_factory = session_factory_from_settings(settings) config.set_session_factory(session_factory) config.add_renderer('.html', 'pyramid_jinja2.renderer_factory') config.add_static_view('static', 'static', cache_max_age=3600) config.add_route('home', '/') config.add_route('login', '/login') config.add_route('logout', '/logout') config.add_route('campaigns_index', '/campaigns') config.add_route('campaigns_create', '/campaigns/new') config.add_route('campaigns_view', '/campaigns/{campaign_id:\d+}') config.add_route('campaigns_play', '/campaigns/{campaign_id:\d+}/play') config.add_route('campaigns_request_join', '/campaigns/{campaign_id:\d+}/join') config.add_route('characters_create', '/characters/new') config.add_route('characters_view', '/characters/{character_id:\d+}') config.add_route('characters_edit', '/characters/{character_id:\d+}/edit') config.add_route('users_index', '/users') config.add_route('users_create', '/users/new') config.add_route('users_view', '/users/{user_id:\d+}') config.add_route('users_edit', '/users/{user_id:\d+}/edit') config.scan() return config.make_wsgi_app()
def set_creation_time_aware_session_factory(config): """Setup a session factory that rememembers time when the session was created. We need this information to later invalidate session for the authentication change details. """ settings = config.registry.settings # special rule for converting dotted python paths to callables for option in ('client_callable', 'serialize', 'deserialize', 'id_generator'): key = 'redis.sessions.%s' % option if key in settings: settings[key] = config.maybe_dotted(settings[key]) session_factory = session_factory_from_settings(settings) def create_session(request): session = session_factory(request) if "created_at" not in session: session["created_at"] = now() return session config.set_session_factory(create_session)
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ config = Configurator(settings=settings, root_factory=root_factory) session_factory = session_factory_from_settings(settings) config.set_session_factory(session_factory) config.include('substanced') config.include('schoolpack.site') config.add_catalog_index('title', 'field', 'schoolpack') config.add_static_view( 'sdistatic', 'static', cache_max_age=86400 ) config.add_static_view( 'static', 'retail/static', cache_max_age=86400 ) # override deform_bootstrap static registration, it doesn't # specify a cache_max_age config.add_static_view( 'static-deform_bootstrap', 'deform_bootstrap:static', cache_max_age=86400 ) config.scan() return config.make_wsgi_app() return config.make_wsgi_app()
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ auth_tkt_policy = AuthTktAuthenticationPolicy( settings['authtkt.secret'], hashalg='sha512', callback=groupfinder, max_age=2592000, secure=asbool(settings.get('authtkt.secure', 'false'))) auth_token_policy = AuthTokenAuthenticationPolicy( callback=groupfinder ) authorization_policy = ACLAuthorizationPolicy() authentication_policy = AuthenticationStackPolicy() authentication_policy.add_policy('auth_tkt', auth_tkt_policy) authentication_policy.add_policy('auth_token', auth_token_policy) # set crypto key encryption.ENCRYPTION_SECRET = settings.get('encryption_secret') # import this later so encyption key can be monkeypatched from appenlight.models import DBSession, register_datastores # update config with cometd info settings['cometd_servers'] = {'server': settings['cometd.server'], 'secret': settings['cometd.secret']} # Create the Pyramid Configurator. settings['_mail_url'] = settings['mailing.app_url'] config = CythonCompatConfigurator( settings=settings, authentication_policy=authentication_policy, authorization_policy=authorization_policy, root_factory='appenlight.security.RootFactory', default_permission='view') # custom registry variables # resource type information config.registry.resource_types = ['resource', 'application'] # plugin information config.registry.appenlight_plugins = {} config.set_default_csrf_options(require_csrf=True, header='X-XSRF-TOKEN') config.add_view_deriver('appenlight.predicates.csrf_view', name='csrf_view') # later, when config is available dogpile_config = {'url': settings['redis.url'], "redis_expiration_time": 86400, "redis_distributed_lock": True} cache_regions.regions = cache_regions.CacheRegions(dogpile_config) config.registry.cache_regions = cache_regions.regions engine = engine_from_config(settings, 'sqlalchemy.', json_serializer=json.dumps) DBSession.configure(bind=engine) # json rederer that serializes datetime config.add_renderer('json', json_renderer) config.set_request_property('appenlight.lib.request.es_conn', 'es_conn') config.set_request_property('appenlight.lib.request.get_user', 'user', reify=True) config.set_request_property('appenlight.lib.request.get_csrf_token', 'csrf_token', reify=True) config.set_request_property('appenlight.lib.request.safe_json_body', 'safe_json_body', reify=True) config.set_request_property('appenlight.lib.request.unsafe_json_body', 'unsafe_json_body', reify=True) config.add_request_method('appenlight.lib.request.add_flash_to_headers', 'add_flash_to_headers') config.add_request_method('appenlight.lib.request.get_authomatic', 'authomatic', reify=True) config.include('pyramid_redis_sessions') config.include('pyramid_tm') config.include('pyramid_jinja2') config.include('appenlight_client.ext.pyramid_tween') config.include('ziggurat_foundations.ext.pyramid.sign_in') es_server_list = aslist(settings['elasticsearch.nodes']) redis_url = settings['redis.url'] log.warning('Elasticsearch server list: {}'.format(es_server_list)) log.warning('Redis server: {}'.format(redis_url)) config.registry.es_conn = pyelasticsearch.ElasticSearch(es_server_list) config.registry.redis_conn = redis.StrictRedis.from_url(redis_url) config.registry.redis_lockmgr = Redlock([settings['redis.redlock.url'], ], retry_count=0, retry_delay=0) # mailer config.registry.mailer = Mailer.from_settings(settings) # Configure sessions session_factory = session_factory_from_settings(settings) config.set_session_factory(session_factory) # Configure renderers and event subscribers config.add_jinja2_extension('jinja2.ext.loopcontrols') config.add_jinja2_search_path('appenlight:templates') # event subscribers config.add_subscriber("appenlight.subscribers.application_created", "pyramid.events.ApplicationCreated") config.add_subscriber("appenlight.subscribers.add_renderer_globals", "pyramid.events.BeforeRender") config.add_subscriber('appenlight.subscribers.new_request', 'pyramid.events.NewRequest') config.add_view_predicate('context_type_class', 'appenlight.predicates.contextTypeClass') register_datastores(es_conn=config.registry.es_conn, redis_conn=config.registry.redis_conn, redis_lockmgr=config.registry.redis_lockmgr) # base stuff and scan # need to ensure webassets exists otherwise config.override_asset() # throws exception if not os.path.exists(settings['webassets.dir']): os.mkdir(settings['webassets.dir']) config.add_static_view(path='appenlight:webassets', name='static', cache_max_age=3600) config.override_asset(to_override='appenlight:webassets/', override_with=settings['webassets.dir']) config.include('appenlight.views') config.include('appenlight.views.admin') config.scan(ignore=['appenlight.migrations', 'appenlight.scripts', 'appenlight.tests']) config.add_directive('register_appenlight_plugin', register_appenlight_plugin) for entry_point in iter_entry_points(group='appenlight.plugins'): plugin = entry_point.load() plugin.includeme(config) # include other appenlight plugins explictly if needed includes = aslist(settings.get('appenlight.includes', [])) for inc in includes: config.include(inc) # run this after everything registers in configurator def pre_commit(): jinja_env = config.get_jinja2_environment() jinja_env.filters['tojson'] = json.dumps jinja_env.filters['toJSONUnsafe'] = jinja2_filters.toJSONUnsafe config.action(None, pre_commit, order=PHASE3_CONFIG + 999) def wrap_config_celery(): configure_celery(config.registry) config.action(None, wrap_config_celery, order=PHASE3_CONFIG + 999) app = config.make_wsgi_app() return app
def main(global_config, **settings): """Initiate a Pyramid WSGI application. """ db_url = settings.get('fig.sqlalchemy.url') if db_url: pg_socket_var = os.getenv('XBUS_POSTGRESQL_1_PORT') if pg_socket_var is not None: pg_socket = pg_socket_var.split('://', 1)[-1] else: pg_socket = settings.get('fig.sqlalchemy.default.socket') settings['sqlalchemy.url'] = db_url.format(socket=pg_socket) engine = engine_from_config(settings, 'sqlalchemy.') DBSession.configure(bind=engine) config = Configurator( session_factory=session_factory_from_settings(settings), settings=settings, root_factory=RootFactory, ) config.include('pyramid_chameleon') # Determine the kind of auth to use based on settings; store it so others # can access the setting via "request.registry.settings.auth_kind"). config.add_settings(auth_kind=( 'saml2' if bool_setting(config.get_settings(), 'saml2.enabled') else 'http' )) if config.get_settings().auth_kind == 'http': http_auth.setup(config) config.include('pyramid_httpauth') elif config.get_settings().auth_kind == 'saml2': saml2_auth.setup(config) config.set_authorization_policy(ACLAuthorizationPolicy()) # All views are protected by default; to provide an anonymous view, use # permission=pyramid.security.NO_PERMISSION_REQUIRED. config.set_default_permission('view') init_i18n(config) config.add_static_view('static', 'static', cache_max_age=3600) # Pages. config.add_route('home', '/') config.add_route('xml_config_ui', '/xml_config') config.add_route( 'event_type_graph', API_PREFIX + 'event_type/{id}/graph', factory=RECORD_FACTORY_LOC.format( model='monitor', collection='event_type', ), ) # Other routes. config.add_route('login_info', 'login_info') # REST API exposed with JSON. _add_api_routes(config, 'data_clearing', 'cl_event_type') _add_api_routes(config, 'data_clearing', 'cl_item') _add_api_routes(config, 'data_clearing', 'cl_item_column') _add_api_routes(config, 'data_clearing', 'cl_item_join') _add_api_routes(config, 'data_clearing', 'cl_item_type') _add_api_routes(config, 'monitor', 'emission_profile') _add_api_routes(config, 'monitor', 'emitter') _add_api_routes(config, 'monitor', 'emitter_profile') _add_api_routes(config, 'monitor', 'envelope') _add_api_routes(config, 'monitor', 'event') _add_api_routes(config, 'monitor', 'event_error') _add_api_routes(config, 'monitor', 'event_error_tracking') _add_api_routes(config, 'monitor', 'event_node') _add_api_routes(config, 'monitor', 'event_tracking') _add_api_routes(config, 'monitor', 'event_type') _add_api_routes(config, 'monitor', 'input_descriptor') _add_api_routes(config, 'monitor', 'role') _add_api_routes(config, 'monitor', 'service') _add_api_routes(config, 'monitor', 'user') # Other parts of the API. config.add_route('consumer_list', API_PREFIX + 'consumer') config.add_route('replay_envelope', API_PREFIX + 'replay_envelope') config.add_route('upload', API_PREFIX + 'upload') config.add_route('xml_config', API_PREFIX + 'xml_config') # Process view declarations. config.scan() # Run! return config.make_wsgi_app()
def main(global_config, **settings): """Initiate a Pyramid WSGI application. """ db_url = settings.get('fig.sqlalchemy.url') if db_url: pg_socket_var = os.getenv('XBUS_POSTGRESQL_1_PORT') if pg_socket_var is not None: pg_socket = pg_socket_var.split('://', 1)[-1] else: pg_socket = settings.get('fig.sqlalchemy.default.socket') settings['sqlalchemy.url'] = db_url.format(socket=pg_socket) engine = engine_from_config(settings, 'sqlalchemy.') DBSession.configure(bind=engine) config = Configurator( session_factory=session_factory_from_settings(settings), settings=settings, root_factory=RootFactory, ) config.include('pyramid_chameleon') # Determine the kind of auth to use based on settings; store it so others # can access the setting via "request.registry.settings.auth_kind"). config.add_settings(auth_kind=('saml2' if bool_setting( config.get_settings(), 'saml2.enabled') else 'http')) if config.get_settings().auth_kind == 'http': http_auth.setup(config) config.include('pyramid_httpauth') elif config.get_settings().auth_kind == 'saml2': saml2_auth.setup(config) config.set_authorization_policy(ACLAuthorizationPolicy()) # All views are protected by default; to provide an anonymous view, use # permission=pyramid.security.NO_PERMISSION_REQUIRED. config.set_default_permission('view') init_i18n(config) config.add_static_view('static', 'static', cache_max_age=3600) # Pages. config.add_route('home', '/') config.add_route('xml_config_ui', '/xml_config') config.add_route( 'event_type_graph', API_PREFIX + 'event_type/{id}/graph', factory=RECORD_FACTORY_LOC.format( model='monitor', collection='event_type', ), ) # Other routes. config.add_route('login_info', 'login_info') # REST API exposed with JSON. _add_api_routes(config, 'data_clearing', 'cl_event_type') _add_api_routes(config, 'data_clearing', 'cl_item') _add_api_routes(config, 'data_clearing', 'cl_item_column') _add_api_routes(config, 'data_clearing', 'cl_item_join') _add_api_routes(config, 'data_clearing', 'cl_item_type') _add_api_routes(config, 'monitor', 'emission_profile') _add_api_routes(config, 'monitor', 'emitter') _add_api_routes(config, 'monitor', 'emitter_profile') _add_api_routes(config, 'monitor', 'envelope') _add_api_routes(config, 'monitor', 'event') _add_api_routes(config, 'monitor', 'event_error') _add_api_routes(config, 'monitor', 'event_error_tracking') _add_api_routes(config, 'monitor', 'event_node') _add_api_routes(config, 'monitor', 'event_tracking') _add_api_routes(config, 'monitor', 'event_type') _add_api_routes(config, 'monitor', 'input_descriptor') _add_api_routes(config, 'monitor', 'role') _add_api_routes(config, 'monitor', 'service') _add_api_routes(config, 'monitor', 'user') # Other parts of the API. config.add_route('consumer_list', API_PREFIX + 'consumer') config.add_route('replay_envelope', API_PREFIX + 'replay_envelope') config.add_route('upload', API_PREFIX + 'upload') config.add_route('xml_config', API_PREFIX + 'xml_config') # Process view declarations. config.scan() # Run! return config.make_wsgi_app()
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ engine = engine_from_config(settings, 'sqlalchemy.') DBSession.configure(bind=engine) Base.metadata.bind = engine config = Configurator(settings=settings) my_session_factory = session_factory_from_settings(settings) config.include("pyramid_jinja2") config.set_session_factory(my_session_factory) config.add_static_view('static', 'static') config.add_route("login", '/login') config.add_route("logout", "/logout") config.add_route("home", '/home') config.add_route("washing_machine", '/washing_machine/{id}') config.add_route("tv", '/tv/{id}') config.add_route("register_one", "/register/{id}") config.add_route("register", '/register') config.add_route("admin", '/admin') config.add_route("send_mail_register", "/send_mail_register") config.add_route("profile", '/profile') config.add_route("camera", "/api/camera") config.add_route("camera_one", "/api/camera/{id}") config.add_route("frigider", '/api/frigider') config.add_route("frigider_one", '/api/frigider/{id}') config.add_route("televizor", "/api/televizor") config.add_route("televizor_one", "/api/televizor/{id}") config.add_route("canal", "/api/canal") config.add_route("canal_one", "/api/canal/{id}") config.add_route("sistem_de_iluminat", "/api/sistem_de_iluminat") config.add_route("sistem_de_iluminat_one", "/api/sistem_de_iluminat/{id}") config.add_route("masina_spalat", '/api/masina_spalat') config.add_route("masina_spalat_one", "/api/masina_spalat/{id}") config.add_route("termostat", "/api/termostat") config.add_route("termostat_one", "/api/termostat/{id}") config.add_route("cafetiera", "/api/cafetiera") config.add_route("cafetiera_one", "/api/cafetiera/{id}") config.add_route("activitate_si", "/api/activitate_si/{id}") config.add_route("activitate_cafetiera", "/api/activitate_cafetiera/{id}") config.add_route("activitate_tv", "/api/activitate_tv/{id}") config.add_route("user", "/api/user") config.add_route("user_one", "/api/user/{id}") config.add_route("refrigerator", '/refrigerator/{id}') config.add_route("lights", '/lights/{id}') config.add_route("coffee_maker", '/coffee_maker/{id}') config.add_route("thermostat", '/thermostat/{id}') config.add_route("dispozitive", "/api/dispozitive") config.add_route("dispozitive_one", "/api/dispozitive/{id}/{tip}") config.add_route("user_id", "/user_id") config.add_route("info", "/api/info") config.add_route("not_found", "/not_found") config.scan() return config.make_wsgi_app()
def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ auth_tkt_policy = AuthTktAuthenticationPolicy( settings["authtkt.secret"], hashalg="sha512", callback=groupfinder, max_age=2592000, secure=asbool(settings.get("authtkt.secure", "false")), ) auth_token_policy = AuthTokenAuthenticationPolicy(callback=groupfinder) authorization_policy = ACLAuthorizationPolicy() authentication_policy = AuthenticationStackPolicy() authentication_policy.add_policy("auth_tkt", auth_tkt_policy) authentication_policy.add_policy("auth_token", auth_token_policy) # set crypto key encryption.ENCRYPTION_SECRET = settings.get("encryption_secret") # import this later so encyption key can be monkeypatched from appenlight.models import DBSession, register_datastores # registration settings["appenlight.disable_registration"] = asbool( settings.get("appenlight.disable_registration") ) # update config with cometd info settings["cometd_servers"] = { "server": settings["cometd.server"], "secret": settings["cometd.secret"], } # Create the Pyramid Configurator. settings["_mail_url"] = settings["mailing.app_url"] config = CythonCompatConfigurator( settings=settings, authentication_policy=authentication_policy, authorization_policy=authorization_policy, root_factory="appenlight.security.RootFactory", default_permission="view", ) # custom registry variables # resource type information config.registry.resource_types = ["resource", "application"] # plugin information config.registry.appenlight_plugins = {} config.set_default_csrf_options(require_csrf=True, header="X-XSRF-TOKEN") config.add_view_deriver("appenlight.predicates.csrf_view", name="csrf_view") # later, when config is available dogpile_config = { "url": settings["redis.url"], "redis_expiration_time": 86400, "redis_distributed_lock": True, } cache_regions.regions = cache_regions.CacheRegions(dogpile_config) config.registry.cache_regions = cache_regions.regions engine = engine_from_config(settings, "sqlalchemy.", json_serializer=json.dumps) DBSession.configure(bind=engine) # json rederer that serializes datetime config.add_renderer("json", json_renderer) config.add_request_method( "appenlight.lib.request.es_conn", "es_conn", property=True ) config.add_request_method( "appenlight.lib.request.get_user", "user", reify=True, property=True ) config.add_request_method( "appenlight.lib.request.get_csrf_token", "csrf_token", reify=True, property=True ) config.add_request_method( "appenlight.lib.request.safe_json_body", "safe_json_body", reify=True, property=True, ) config.add_request_method( "appenlight.lib.request.unsafe_json_body", "unsafe_json_body", reify=True, property=True, ) config.add_request_method( "appenlight.lib.request.add_flash_to_headers", "add_flash_to_headers" ) config.add_request_method( "appenlight.lib.request.get_authomatic", "authomatic", reify=True ) config.include("pyramid_redis_sessions") config.include("pyramid_tm") config.include("pyramid_jinja2") config.include("pyramid_mailer") config.include("appenlight_client.ext.pyramid_tween") config.include("ziggurat_foundations.ext.pyramid.sign_in") es_server_list = aslist(settings["elasticsearch.nodes"]) redis_url = settings["redis.url"] log.warning("Elasticsearch server list: {}".format(es_server_list)) log.warning("Redis server: {}".format(redis_url)) config.registry.es_conn = Elasticsearch(es_server_list) config.registry.redis_conn = redis.StrictRedis.from_url(redis_url) config.registry.redis_lockmgr = Redlock( [settings["redis.redlock.url"]], retry_count=0, retry_delay=0 ) # mailer bw compat config.registry.mailer = config.registry.getUtility(IMailer) # Configure sessions session_factory = session_factory_from_settings(settings) config.set_session_factory(session_factory) # Configure renderers and event subscribers config.add_jinja2_extension("jinja2.ext.loopcontrols") config.add_jinja2_search_path("appenlight:templates") # event subscribers config.add_subscriber( "appenlight.subscribers.application_created", "pyramid.events.ApplicationCreated", ) config.add_subscriber( "appenlight.subscribers.add_renderer_globals", "pyramid.events.BeforeRender" ) config.add_subscriber( "appenlight.subscribers.new_request", "pyramid.events.NewRequest" ) config.add_view_predicate( "context_type_class", "appenlight.predicates.contextTypeClass" ) register_datastores( es_conn=config.registry.es_conn, redis_conn=config.registry.redis_conn, redis_lockmgr=config.registry.redis_lockmgr, ) # base stuff and scan # need to ensure webassets exists otherwise config.override_asset() # throws exception if not os.path.exists(settings["webassets.dir"]): os.mkdir(settings["webassets.dir"]) config.add_static_view( path="appenlight:webassets", name="static", cache_max_age=3600 ) config.override_asset( to_override="appenlight:webassets/", override_with=settings["webassets.dir"] ) config.include("appenlight.views") config.include("appenlight.views.admin") config.scan( ignore=["appenlight.migrations", "appenlight.scripts", "appenlight.tests"] ) config.add_directive("register_appenlight_plugin", register_appenlight_plugin) for entry_point in iter_entry_points(group="appenlight.plugins"): plugin = entry_point.load() plugin.includeme(config) # include other appenlight plugins explictly if needed includes = aslist(settings.get("appenlight.includes", [])) for inc in includes: config.include(inc) # run this after everything registers in configurator def pre_commit(): jinja_env = config.get_jinja2_environment() jinja_env.filters["tojson"] = json.dumps jinja_env.filters["toJSONUnsafe"] = jinja2_filters.toJSONUnsafe config.action(None, pre_commit, order=PHASE3_CONFIG + 999) def wrap_config_celery(): configure_celery(config.registry) config.action(None, wrap_config_celery, order=PHASE3_CONFIG + 999) app = config.make_wsgi_app() return app
def main(global_config, **settings): """ """ auth_secret = os.getenv('AUTH_POLICY_SECRET', '') authentication_policy = AuthTktAuthenticationPolicy(auth_secret) authorization_policy = ACLAuthorizationPolicy() redis_secret = os.getenv('REDIS_SESSIONS_SECRET', '') settings['redis.sessions.secret'] = redis_secret settings['redis.sessions.url'] = redis_url session_factory = session_factory_from_settings(settings) config = Configurator( authentication_policy=authentication_policy, authorization_policy=authorization_policy, session_factory=session_factory, settings=settings, ) config.add_route('about', '/about') config.add_view( 'pythonpackages.views.about', route_name='about', renderer='pythonpackages:templates/about.mak') config.add_route('activity', '/activity') config.add_view( 'pythonpackages.views.activity', route_name='activity', renderer='pythonpackages:templates/activity.mak') config.add_route('callback_github', '/callback_github') config.add_view( 'pythonpackages.views.callback_github', route_name='callback_github') config.add_route('callback_pypi', '/callback_pypi') config.add_view( 'pythonpackages.views.callback_pypi', route_name='callback_pypi') config.add_route('root', '/') config.add_view( 'pythonpackages.views.root', route_name='root', renderer='pythonpackages:templates/root.mak') config.add_route('logout', '/logout') config.add_view( 'pythonpackages.views.logout', route_name='logout') config.add_route( 'user', '/{user}', factory=UserFactory, ) config.add_view( 'pythonpackages.views.user', route_name='user', renderer='pythonpackages:templates/user.mak') config.add_static_view( 'static', 'pythonpackages:static', cache_max_age=3600) config.include('pyramid_mako') config.include('pyramid_redis_sessions') return config.make_wsgi_app()