42
42
from ivle import util
45
44
from ivle.dispatch.request import Request
46
from ivle.dispatch import login
49
import plugins.console # XXX: Relies on www/ being in the Python path.
51
# XXX List of plugins, which will eventually be read in from conf
53
'ivle.webapp.admin.user#Plugin',
54
'ivle.webapp.tutorial#Plugin',
55
'ivle.webapp.admin.subject#Plugin',
56
'ivle.webapp.browser#Plugin',
57
'ivle.webapp.groups#Plugin',
58
'ivle.webapp.console#Plugin',
59
'ivle.webapp.security#Plugin',
62
def get_routes_mapper():
45
import ivle.webapp.security
46
from ivle.webapp.base.plugins import ViewPlugin, PublicViewPlugin
47
from ivle.webapp.base.xhtml import XHTMLView, XHTMLErrorView
48
from ivle.webapp.errors import HTTPError, Unauthorized, NotFound
50
def generate_route_mapper(view_plugins, attr):
64
52
Build a Mapper object for doing URL matching using 'routes', based on the
53
given plugin registry.
67
55
m = routes.Mapper(explicit=True)
68
for pluginstr in plugins_HACK:
69
plugin_path, classname = pluginstr.split('#')
70
# Load the plugin module from somewhere in the Python path
71
# (Note that plugin_path is a fully-qualified Python module name).
72
plugin = getattr(__import__(plugin_path, fromlist=[classname]),
56
for plugin in view_plugins:
74
57
# Establish a URL pattern for each element of plugin.urls
75
for url in plugin.urls:
58
assert hasattr(plugin, 'urls'), "%r does not have any urls" % plugin
59
for url in getattr(plugin, attr):
77
61
view_class = url[1]
78
62
kwargs_dict = url[2] if len(url) >= 3 else {}
79
63
m.connect(routex, view=view_class, **kwargs_dict)
83
"""Handles a request which may be to anywhere in the site except media.
66
def handler(apachereq):
67
"""Handles an HTTP request.
84
69
Intended to be called by mod_python, as a handler.
86
req: An Apache request object.
88
# Make the request object into an IVLE request which can be passed to apps
91
req = Request(req, html.write_html_head)
93
# Pass the apachereq to error reporter, since ivle req isn't created
95
handle_unknown_exception(apachereq, *sys.exc_info())
96
# Tell Apache not to generate its own errors as well
97
return mod_python.apache.OK
99
# Run the main handler, and catch all exceptions
101
return handler_(req, apachereq)
102
except mod_python.apache.SERVER_RETURN:
103
# An apache error. We discourage these, but they might still happen.
107
handle_unknown_exception(req, *sys.exc_info())
108
# Tell Apache not to generate its own errors as well
109
return mod_python.apache.OK
111
def handler_(req, apachereq):
113
Nested handler function. May raise exceptions. The top-level handler is
114
just used to catch exceptions.
115
Takes both an IVLE request and an Apache req.
71
@param apachereq: An Apache request object.
73
# Make the request object into an IVLE request which can be given to views
74
req = Request(apachereq)
117
76
# Hack? Try and get the user login early just in case we throw an error
118
77
# (most likely 404) to stop us seeing not logged in even when we are.
119
78
if not req.publicmode:
120
req.user = login.get_user_details(req)
122
### BEGIN New plugins framework ###
123
# XXX This should be done ONCE per Python process, not per request.
125
# XXX No authentication is done here
126
req.mapper = get_routes_mapper()
79
user = ivle.webapp.security.get_user_details(req)
81
# Don't set the user if it is disabled or hasn't accepted the ToS.
82
if user and user.valid:
85
conf = ivle.config.Config()
89
req.mapper = generate_route_mapper(conf.plugin_index[PublicViewPlugin],
92
req.mapper = generate_route_mapper(conf.plugin_index[ViewPlugin],
127
95
matchdict = req.mapper.match(req.uri)
128
96
if matchdict is not None:
129
97
viewcls = matchdict['view']
131
99
# (The latter two seem to be built-in, and we don't want them).
132
100
kwargs = matchdict.copy()
133
101
del kwargs['view']
134
# Instantiate the view, which should be a BaseView class
135
view = viewcls(req, **kwargs)
140
### END New plugins framework ###
142
# Check req.app to see if it is valid. 404 if not.
143
if req.app is not None and req.app not in ivle.conf.apps.app_url:
144
req.throw_error(Request.HTTP_NOT_FOUND,
145
"There is no application called %s." % repr(req.app))
147
# Special handling for public mode - only allow the public app, call it
149
# NOTE: This will not behave correctly if the public app uses
150
# write_html_head_foot, but "serve" does not.
152
if req.app != ivle.conf.apps.public_app:
153
req.throw_error(Request.HTTP_FORBIDDEN,
154
"This application is not available on the public site.")
155
app = ivle.conf.apps.app_url[ivle.conf.apps.public_app]
156
apps.call_app(app.dir, req)
159
# app is the App object for the chosen app
161
app = ivle.conf.apps.app_url[ivle.conf.apps.default_app]
163
app = ivle.conf.apps.app_url[req.app]
165
# Check if app requires auth. If so, perform authentication and login.
166
# This will either return a User object, None, or perform a redirect
167
# which we will not catch here.
169
req.user = login.login(req)
170
logged_in = req.user is not None
172
req.user = login.get_user_details(req)
176
# Keep the user's session alive by writing to the session object.
177
# req.get_session().save()
178
# Well, it's a fine idea, but it creates considerable grief in the
179
# concurrent update department, so instead, we'll just make the
180
# sessions not time out.
181
req.get_session().unlock()
183
# If user did not specify an app, HTTP redirect to default app and
186
req.throw_redirect(util.make_path(ivle.conf.apps.default_app))
188
# Set the default title to the app's tab name, if any. Otherwise URL
190
if app.name is not None:
103
# Instantiate the view, which should be a BaseView class
104
view = viewcls(req, **kwargs)
106
# Check that the request (mainly the user) is permitted to access
108
if not view.authorize(req):
113
# A view explicitly raised an HTTP error. Respect it.
116
# Try to find a custom error view.
117
if hasattr(viewcls, 'get_error_view'):
118
errviewcls = viewcls.get_error_view(e)
120
errviewcls = XHTMLView.get_error_view(e)
123
errview = errviewcls(req, e)
132
# A non-HTTPError appeared. We have an unknown exception. Panic.
133
handle_unknown_exception(req, *sys.exc_info())
195
# Call the specified app with the request object
196
apps.call_app(app.dir, req)
198
# if not logged in, login.login will have written the login box.
199
# Just clean up and exit.
201
# MAKE SURE we write the HTTP (and possibly HTML) header. This
202
# wouldn't happen if nothing else ever got written, so we have to make
204
req.ensure_headers_written()
206
# When done, write out the HTML footer if the app has requested it
207
if req.write_html_head_foot:
208
# Show the console if required
209
if logged_in and app.useconsole:
210
plugins.console.present(req, windowpane=True)
211
html.write_html_foot(req)
213
# Note: Apache will not write custom HTML error messages here.
214
# Use req.throw_error to do that.
139
XHTMLErrorView(req, NotFound()).render(req)
217
142
def handle_unknown_exception(req, exc_type, exc_value, exc_traceback):
273
logging.debug('Logging Unhandled Exception')
275
# We handle 3 types of error.
276
# IVLEErrors with 4xx response codes (client error).
277
# IVLEErrors with 5xx response codes (handled server error).
278
# Other exceptions (unhandled server error).
279
# IVLEErrors should not have other response codes than 4xx or 5xx
280
# (eg. throw_redirect should have been used for 3xx codes).
281
# Therefore, that is treated as an unhandled error.
283
if (exc_type == util.IVLEError and httpcode >= 400
284
and httpcode <= 499):
285
# IVLEErrors with 4xx response codes are client errors.
286
# Therefore, these have a "nice" response (we even coat it in the IVLE
289
req.write_html_head_foot = True
290
req.write_javascript_settings = False
291
req.write('<div id="ivle_padding">\n')
189
# A "bad" error message. We shouldn't get here unless IVLE
190
# misbehaves (which is currently very easy, if things aren't set up
192
# Write the traceback.
193
# If this is a non-4xx IVLEError, get the message and httpcode and
194
# make the error message a bit nicer (but still include the
196
# We also need to special-case IVLEJailError, as we can get another
197
# almost-exception out of it.
199
codename, msg = None, None
201
if exc_type is util.IVLEJailError:
202
msg = exc_value.type_str + ": " + exc_value.message
203
tb = 'Exception information extracted from IVLEJailError:\n'
204
tb += urllib.unquote(exc_value.info)
293
207
codename, msg = req.get_http_codename(httpcode)
294
208
except AttributeError:
295
codename, msg = None, None
296
# Override the default message with the supplied one,
298
if exc_value.message is not None:
299
msg = exc_value.message
300
if codename is not None:
301
req.write("<h1>Error: %s</h1>\n" % cgi.escape(codename))
303
req.write("<h1>Error</h1>\n")
305
req.write("<p>%s</p>\n" % cgi.escape(msg))
307
req.write("<p>An unknown error occured.</p>\n")
310
logging.info(str(msg))
312
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
314
req.write("<p>Warning: Could not open Error Log: '%s'</p>\n"
315
%cgi.escape(logfile))
316
req.write('</div>\n')
317
html.write_html_foot(req)
319
# A "bad" error message. We shouldn't get here unless IVLE
320
# misbehaves (which is currently very easy, if things aren't set up
322
# Write the traceback.
323
# If this is a non-4xx IVLEError, get the message and httpcode and
324
# make the error message a bit nicer (but still include the
326
# We also need to special-case IVLEJailError, as we can get another
327
# almost-exception out of it.
329
codename, msg = None, None
331
if exc_type is util.IVLEJailError:
332
msg = exc_value.type_str + ": " + exc_value.message
333
tb = 'Exception information extracted from IVLEJailError:\n'
334
tb += urllib.unquote(exc_value.info)
337
codename, msg = req.get_http_codename(httpcode)
338
except AttributeError:
340
# Override the default message with the supplied one,
342
if hasattr(exc_value, 'message') and exc_value.message is not None:
343
msg = exc_value.message
344
# Prepend the exception type
345
if exc_type != util.IVLEError:
346
msg = exc_type.__name__ + ": " + msg
348
tb = ''.join(traceback.format_exception(exc_type, exc_value,
352
logging.error('%s\n%s'%(str(msg), tb))
353
# Error messages are only displayed is the user is NOT a student,
354
# or if there has been a problem logging the error message
355
show_errors = (not publicmode) and ((login and \
356
str(role) != "student") or logfail)
357
req.write("""<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
211
tb = ''.join(traceback.format_exception(exc_type, exc_value,
214
logging.error('%s\n%s'%(str(msg), tb))
216
# Error messages are only displayed is the user is NOT a student,
217
# or if there has been a problem logging the error message
218
show_errors = (not publicmode) and ((login and \
219
str(role) != "student") or logfail)
220
req.write("""<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
358
221
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
359
222
<html xmlns="http://www.w3.org/1999/xhtml">
360
223
<head><title>IVLE Internal Server Error</title></head>
362
225
<h1>IVLE Internal Server Error""")
364
if (codename is not None
365
and httpcode != mod_python.apache.HTTP_INTERNAL_SERVER_ERROR):
366
req.write(": %s" % cgi.escape(codename))
227
if codename is not None and \
228
httpcode != mod_python.apache.HTTP_INTERNAL_SERVER_ERROR:
229
req.write(": %s" % cgi.escape(codename))
369
232
<p>An error has occured which is the fault of the IVLE developers or
370
administration. The developers have been notified.</p>
374
req.write("<p>%s</p>\n" % cgi.escape(msg))
375
if httpcode is not None:
376
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
378
<p>Please report this to <a href="mailto:%s">%s</a> (the system
379
administrator). Include the following information:</p>
380
""" % (cgi.escape(admin_email), cgi.escape(admin_email)))
382
req.write("<pre>\n%s\n</pre>\n"%cgi.escape(tb))
384
req.write("<p>Warning: Could not open Error Log: '%s'</p>\n"
385
%cgi.escape(logfile))
386
req.write("</body></html>")
236
req.write("Please report this issue to the server administrators, "
237
"along with the following information.")
239
req.write("Details have been logged for further examination.")
244
req.write("<p>%s</p>\n" % cgi.escape(msg))
245
if httpcode is not None:
246
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
247
req.write("<h2>Debugging information</h2>")
249
req.write("<pre>\n%s\n</pre>\n"%cgi.escape(tb))
250
req.write("</body></html>")