def post(self): # Deserialize the body. Dying here with 500 is ok, it should not happen, so # if it is happening, it's nice to get an exception report. request = replication_pb2.ServiceLinkRequest.FromString(self.request.body) # Ensure the ticket was generated by us (by checking HMAC tag). ticket_data = None try: ticket_data = LinkTicketToken.validate(request.ticket, []) except tokens.InvalidTokenError: self.reply(replication_pb2.ServiceLinkResponse.BAD_TICKET) return # Ensure the ticket was generated for the calling application. replica_app_id = ticket_data['app_id'] expected_ident = auth.Identity(auth.IDENTITY_SERVICE, replica_app_id) if auth.get_current_identity() != expected_ident: self.reply(replication_pb2.ServiceLinkResponse.AUTH_ERROR) return # Register the replica. If it is already there, will reset its known state. replication.register_replica(replica_app_id, request.replica_url) self.reply(replication_pb2.ServiceLinkResponse.SUCCESS)
def post(self): # Deserialize the body. Dying here with 500 is ok, it should not happen, so # if it is happening, it's nice to get an exception report. request = replication_pb2.ServiceLinkRequest.FromString(self.request.body) # Ensure the ticket was generated by us (by checking HMAC tag). ticket_data = None try: ticket_data = LinkTicketToken.validate(request.ticket, []) except tokens.InvalidTokenError: self.reply(replication_pb2.ServiceLinkResponse.BAD_TICKET) return # Ensure the ticket was generated for the calling application. replica_app_id = ticket_data['app_id'] expected_ident = auth.Identity(auth.IDENTITY_SERVICE, replica_app_id) if auth.get_current_identity() != expected_ident: self.reply(replication_pb2.ServiceLinkResponse.AUTH_ERROR) return # Register the replica. If it is already there, will reset its known state. replication.register_replica(replica_app_id, request.replica_url) self.reply(replication_pb2.ServiceLinkResponse.SUCCESS)