def login():
bottle.response.headers.replace("Content-type", "application/json")
bottle.response.headers.append("Cache-Control", "no-cache, must-revalidate")
user = bottle.request.forms.get("username")
password = bottle.request.forms.get("password")
remote_addr = bottle.request.environ.get("REMOTE_ADDR", "0")
info = API.check_auth(user, password)
if info:
API.pyload.log.debug(_("API login from IP address: %s") % remote_addr)
else:
API.pyload.log.warning(_("Failed API login from IP address: %s") % remote_addr)
return json_dumps(False)
s = set_session(request, info)
# get the session id by dirty way, documentations seems wrong
try:
sid = s._headers['cookie_out'].split("=")[1].split(";")[0]
return json_dumps(sid)
except Exception:
return json_dumps(True)
def call_API(func, args=""):
bottle.response.headers.replace("Content-type", "application/json")
bottle.response.headers.append("Cache-Control", "no-cache, must-revalidate")
s = bottle.request.environ.get('beaker.session')
if 'session' in bottle.request.POST:
s = s.get_by_id(bottle.request.POST['session'])
if not s or not s.get("authenticated", False):
return bottle.HTTPError(403, json_dumps("Forbidden"))
if not API.is_authorized(func, {"role": s['role'], "permission": s['perms']}):
return bottle.HTTPError(401, json_dumps("Unauthorized"))
args = args.split("/")[1:]
kwargs = {}
for x, y in itertools.chain(bottle.request.GET.iteritems(), bottle.request.POST.iteritems()):
if x == "session":
continue
kwargs[x] = urllib.unquote(y)
try:
return call_API(func, *args, **kwargs)
except Exception, e:
traceback.print_exc()
return bottle.HTTPError(500, json_dumps({"error": e.message, "traceback": traceback.format_exc()}))
def call_API(func, *args, **kwargs):
if not hasattr(API.EXTERNAL, func) or func.startswith("_"):
print "Invalid API call", func
return bottle.HTTPError(404, json_dumps("Not Found"))
result = getattr(API, func)(*[SafeEval.const_eval(x) for x in args],
**dict((x, SafeEval.const_eval(y)) for x, y in kwargs.iteritems()))
# null is invalid json response
return json_dumps(result or True, cls=TBaseEncoder)
